Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/QnJlVwIxErPOW3_qikBSn9fIyuA.roa
File: QnJlVwIxErPOW3_qikBSn9fIyuA.roa (raw, json)
Hash identifier: Ra0d36U+vw9vVo2Z9tQo8ByJIcCE0DyTEIJ4TAhPuTs=
Subject key identifier: 42:72:65:57:02:31:12:B3:CE:5B:7F:EA:8A:40:52:9F:D7:C8:CA:E0
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 0A8DAA21
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/QnJlVwIxErPOW3_qikBSn9fIyuA.roa
Signing time: Mon 07 Mar 2022 18:12:01 +0000
ROA not before: Mon 07 Mar 2022 18:12:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6939
IP address blocks: 85.133.217.0/24 maxlen: 24
85.133.236.0/24 maxlen: 24
85.133.253.0/24 maxlen: 24
85.133.165.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177056289 (0xa8daa21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Mar 7 18:12:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=42726557023112b3ce5b7fea8a40529fd7c8cae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e6:92:63:88:d1:0d:81:4d:79:fc:6b:4f:68:
5a:39:1a:5d:5f:a0:7a:28:b7:ac:70:53:0d:e0:04:
1e:b8:11:90:ac:c9:75:d3:1e:0f:af:23:35:f1:de:
45:57:75:d8:2b:f7:f9:6e:0f:c1:1c:44:77:88:5f:
6d:48:0e:23:71:54:76:73:a7:40:3a:7f:f5:3f:e1:
eb:ab:70:e3:0a:3c:f4:39:16:27:72:be:3e:3a:85:
30:d4:07:ed:67:4e:44:35:e0:98:f9:54:1a:e2:84:
56:ea:a9:b9:78:65:40:57:cb:9a:b3:8b:55:c4:76:
7a:f8:5b:02:ba:42:d0:c5:2e:76:10:b5:2a:cc:8b:
53:07:da:b5:43:ae:e6:0c:49:57:f3:bc:77:e6:fd:
b5:b8:59:69:79:f1:60:a6:40:dc:bf:06:2d:22:26:
98:3f:94:3f:d9:ca:84:64:bf:0c:99:cd:3b:93:8d:
e4:2c:37:66:6d:85:f8:12:1a:ef:fc:4a:60:43:6d:
a7:7b:14:91:ee:27:6d:27:6c:b5:3c:c9:a3:ad:dc:
06:44:76:0d:18:76:2d:49:e4:5d:20:0a:e5:cc:c6:
a4:e8:3b:70:eb:6e:ea:2c:f3:64:b3:85:f4:a4:d6:
e0:e5:92:26:b4:e1:03:af:0d:0c:41:e1:31:11:ba:
4d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:72:65:57:02:31:12:B3:CE:5B:7F:EA:8A:40:52:9F:D7:C8:CA:E0
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/QnJlVwIxErPOW3_qikBSn9fIyuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.165.0/24
85.133.217.0/24
85.133.236.0/24
85.133.253.0/24
Signature Algorithm: sha256WithRSAEncryption
25:c7:8d:22:bc:12:fb:e6:77:e2:c2:bc:01:af:86:f5:7d:13:
2e:6b:1a:5e:77:8e:e1:9d:07:51:53:8d:43:57:57:40:c0:43:
d8:ca:5d:a0:4b:a3:bc:07:65:4a:b3:21:70:d1:f5:04:a0:c2:
fe:93:70:8c:de:fb:c7:30:04:9a:f5:79:d4:56:bf:6f:de:e5:
a5:3a:bd:4e:d0:2e:b7:52:7b:5e:b3:de:58:c1:e1:f8:83:67:
ed:ff:4e:bb:ef:3b:e6:88:a6:30:70:5f:0a:54:d6:02:57:d4:
a3:38:7f:df:53:c6:64:f9:27:e6:13:f6:d0:89:5b:56:1e:5d:
bc:26:87:9d:d9:a4:a6:51:38:71:a2:a9:7a:48:4c:b0:92:9f:
01:fe:8e:bc:51:c6:45:85:6d:d0:b4:70:7b:02:d9:24:1b:c9:
48:14:d8:e2:80:00:c1:58:f9:62:c3:24:71:dd:ba:e5:0d:29:
b6:87:dd:18:c4:3a:8f:06:2a:3d:5c:19:7f:c3:2c:11:d8:eb:
56:9d:57:72:ff:c0:b9:6d:48:7c:19:70:ab:ee:a2:d3:6a:89:
c2:92:21:00:ad:4a:36:ef:39:43:b7:b9:76:85:17:b3:e2:a2:
10:93:4c:ef:91:70:a4:bf:d7:43:49:c4:9f:7a:32:4c:83:53:
bb:00:d5:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:13 2024 by rpki-client on console-fra.rpki-client.org