Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/CR-01AZvCD6WJpsIJ4GJ7OzMJjo.roa
File: CR-01AZvCD6WJpsIJ4GJ7OzMJjo.roa (raw, json)
Hash identifier: qNuFUPyCEjkLqtpKv2ov/9n0/tbWTUZQr74dvM8d4F0=
Subject key identifier: 09:1F:B4:D4:06:6F:08:3E:96:26:9B:08:27:81:89:EC:EC:CC:26:3A
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 0AE462B8
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/CR-01AZvCD6WJpsIJ4GJ7OzMJjo.roa
Signing time: Mon 11 Apr 2022 13:15:02 +0000
ROA not before: Mon 11 Apr 2022 13:15:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 19120
IP address blocks: 85.133.217.0/24 maxlen: 24
85.133.236.0/24 maxlen: 24
85.133.253.0/24 maxlen: 24
85.133.165.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 182739640 (0xae462b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Apr 11 13:15:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=091fb4d4066f083e96269b08278189ececcc263a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:20:74:ed:2a:b2:bf:19:ae:ab:9f:f4:50:da:
c0:05:30:e9:f2:0b:81:e8:56:f0:41:10:88:f5:64:
9a:97:0c:87:f4:b5:54:fe:2a:c9:4d:34:c4:1c:89:
01:3d:1b:02:1d:9c:b1:ab:25:49:6a:b4:34:5b:0f:
8b:be:03:b5:e1:35:f4:2d:d7:2d:02:6c:f9:25:4b:
0c:e9:ac:16:52:b5:ac:87:50:24:71:c0:a9:79:41:
cd:68:f4:c3:ca:75:90:09:41:cd:e9:b9:8d:77:93:
21:a8:9d:e7:aa:8e:da:86:7a:94:da:77:6e:35:a2:
f8:4d:f9:5b:2d:01:a1:be:41:35:5b:cc:df:f7:0c:
a3:a3:ee:af:ec:83:b7:11:3c:2a:f4:71:34:77:4a:
2c:3e:ec:30:e7:6a:e1:73:e9:60:f9:81:ef:a0:68:
f2:b8:04:fa:3a:b3:e1:30:b6:a9:c6:7f:a4:74:3a:
e8:89:71:79:38:56:f1:71:6b:ff:15:4e:bc:be:9f:
9f:66:d7:f8:2a:e9:19:e8:6f:78:6f:6c:c8:64:0b:
8b:3d:eb:5e:5b:84:36:b6:af:a4:c4:86:19:76:35:
a4:a1:f6:4a:e4:ad:b5:fb:9f:11:04:ed:d4:13:aa:
fe:20:4e:2c:3c:e3:e8:69:c2:e0:37:5a:b6:74:46:
79:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:1F:B4:D4:06:6F:08:3E:96:26:9B:08:27:81:89:EC:EC:CC:26:3A
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/CR-01AZvCD6WJpsIJ4GJ7OzMJjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.165.0/24
85.133.217.0/24
85.133.236.0/24
85.133.253.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:20:0a:37:e4:39:40:29:03:df:5b:97:4b:df:a8:87:b2:08:
d4:14:8c:3e:77:0c:24:2e:25:a5:9e:09:17:5f:bd:3f:89:53:
52:52:f3:01:07:31:f4:8a:be:79:c6:3c:c4:a5:68:f7:44:3f:
f8:45:b9:5c:0e:06:38:06:ae:0a:40:23:56:5f:3e:ce:53:ad:
4b:c0:e6:65:6a:1b:e2:a1:ff:cc:83:af:d7:93:98:e9:0d:e8:
a6:07:62:37:5f:94:4b:a2:71:55:2a:e6:4a:2b:2e:4c:a9:3d:
54:e8:e2:8a:a3:18:65:4e:73:10:e8:a0:42:2a:dc:30:0b:a9:
33:e7:1c:f9:9b:a5:27:4c:70:e3:e4:8f:e0:45:31:40:9d:55:
03:bc:ad:59:17:53:74:dc:59:31:c0:1a:69:13:11:c6:86:d4:
b6:99:29:aa:81:73:eb:ee:c3:e1:69:90:fc:74:ff:46:18:e5:
97:08:81:4f:53:41:85:61:62:50:30:fd:f2:41:aa:55:35:6b:
35:6d:fb:0e:11:a6:8c:56:45:aa:84:38:52:6f:b6:13:15:30:
65:21:e6:ac:3e:4f:aa:7e:c5:6a:8d:9b:d9:0b:3d:ce:fa:fb:
01:2d:a1:a0:f3:80:2d:f1:fa:66:17:d8:5b:be:a3:23:b0:e8:
d5:ed:9c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:05 2023 by rpki-client on console-ams.rpki-client.org