Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/BbotsYp57wvX8Aa0XlJZUY65Nss.roa
File: BbotsYp57wvX8Aa0XlJZUY65Nss.roa (raw, json)
Hash identifier: WMe7kEpsR7yavWN19ij7xaEyWDkQ/qYffvgwo1Ef7OQ=
Subject key identifier: 05:BA:2D:B1:8A:79:EF:0B:D7:F0:06:B4:5E:52:59:51:8E:B9:36:CB
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 0A5A636B
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/BbotsYp57wvX8Aa0XlJZUY65Nss.roa
Signing time: Sat 19 Feb 2022 07:22:00 +0000
ROA not before: Sat 19 Feb 2022 07:22:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208485
IP address blocks: 85.133.238.0/24 maxlen: 24
85.133.169.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173695851 (0xa5a636b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Feb 19 07:22:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=05ba2db18a79ef0bd7f006b45e5259518eb936cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6a:da:2b:97:2e:84:28:aa:ea:8f:3f:d5:52:
94:05:1e:59:66:75:24:63:79:79:dc:38:11:6c:ae:
02:a8:40:5b:3f:6e:09:a5:7f:76:e7:f1:08:7a:98:
2b:a6:e5:d7:2c:2b:5e:61:76:d2:e0:26:7b:4b:95:
76:b4:38:c2:b5:10:4d:f0:54:23:52:49:72:15:a0:
39:d8:d0:7d:de:26:4b:ab:32:63:95:4b:d0:c3:4e:
b8:ae:2a:4a:27:b8:50:88:e4:c0:eb:43:35:55:02:
d3:1d:29:dd:5e:a8:5b:ad:9f:ba:67:39:11:0c:00:
e7:17:3e:cb:b0:12:67:77:01:1f:b9:d5:58:13:41:
97:c5:82:4c:d3:30:94:90:5b:e9:b0:96:11:6b:4c:
40:3f:7c:8f:27:cc:eb:80:9b:eb:bf:88:2b:3d:6b:
e1:6c:37:61:3a:52:1d:ff:af:c2:39:5d:3a:a1:b3:
93:11:44:b7:2c:fe:50:7d:8a:a2:13:ef:32:dd:60:
15:47:a4:ff:17:ae:56:00:ff:73:a7:dc:2e:26:4d:
32:9d:eb:c3:42:4c:a8:02:63:64:6e:6b:00:ac:d6:
85:9f:5f:00:7a:53:51:83:37:75:fc:ff:82:6c:70:
15:7c:1f:17:1d:e5:16:fe:67:48:06:85:aa:b0:5c:
7f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:BA:2D:B1:8A:79:EF:0B:D7:F0:06:B4:5E:52:59:51:8E:B9:36:CB
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/BbotsYp57wvX8Aa0XlJZUY65Nss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.169.0/24
85.133.238.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:2b:dd:d7:47:48:e3:7b:e8:db:f0:c8:ce:c6:ef:54:c2:ef:
37:e6:82:00:13:02:67:49:44:49:b1:ea:82:d7:26:51:c5:d1:
9d:8f:bb:71:02:50:a0:53:cc:c9:2e:72:1a:17:a1:f0:e9:d1:
ee:46:87:7b:47:0d:4b:1c:d2:16:f5:39:92:44:36:26:4e:2d:
a0:43:89:ed:3f:73:4a:5b:be:ce:4a:f1:b1:0d:3f:13:fc:9b:
f9:06:e5:f5:38:c1:22:55:06:fa:a5:05:f4:98:8f:e3:e7:29:
e0:f4:91:2d:2e:4e:6c:78:0e:65:b7:7f:bc:cd:a1:ed:65:d5:
4b:af:66:2a:65:0d:a0:15:2c:c3:dd:9a:1a:9e:4c:62:4f:84:
cf:84:94:6c:44:17:b8:66:93:3d:82:e5:95:8d:5f:a0:7f:f9:
b3:d0:94:98:90:b3:5c:c3:67:66:68:dc:3d:60:1b:94:b2:3f:
eb:9f:6e:3c:7c:e4:fd:5a:61:9d:39:5f:25:95:8c:fb:f2:51:
ba:62:df:90:a8:cf:21:11:0c:9a:d1:58:18:c2:1c:b2:39:8c:
83:50:b8:99:f9:fb:4e:2b:d5:d0:86:3d:b3:fe:25:a3:12:b9:
84:01:24:f7:c7:49:62:73:1f:5b:a4:fa:cb:69:33:94:e4:76:
33:f4:ed:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:12 2024 by rpki-client on console-fra.rpki-client.org