Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/XEAIurBZzc2BJnE6-cVIO-maFc0.roa
File: XEAIurBZzc2BJnE6-cVIO-maFc0.roa (raw, json)
Hash identifier: 4cXz+5VACMLAbTYDalUupMh4mjry5olZGm7SrlQ7yRU=
Subject key identifier: 5C:40:08:BA:B0:59:CD:CD:81:26:71:3A:F9:C5:48:3B:E9:9A:15:CD
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 0A50F525
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/XEAIurBZzc2BJnE6-cVIO-maFc0.roa
Signing time: Wed 16 Feb 2022 18:08:57 +0000
ROA not before: Wed 16 Feb 2022 18:08:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12679
IP address blocks: 85.133.194.0/24 maxlen: 24
85.133.217.0/24 maxlen: 24
85.133.236.0/24 maxlen: 24
85.133.234.0/24 maxlen: 24
85.133.137.0/24 maxlen: 24
85.133.136.0/24 maxlen: 24
85.133.253.0/24 maxlen: 24
85.133.165.0/24 maxlen: 24
85.133.164.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173077797 (0xa50f525)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Feb 16 18:08:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5c4008bab059cdcd8126713af9c5483be99a15cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9a:ad:2a:d0:09:09:c3:9e:2c:c3:5d:5f:81:
1a:58:77:05:07:2a:1d:05:7f:75:ed:40:d0:7e:48:
98:48:e6:3d:b3:61:fd:c7:1d:cc:af:fb:ad:a9:ec:
a2:6c:7a:18:65:49:eb:c0:24:a6:df:b0:7b:55:12:
cc:6e:d5:d4:6a:ab:97:3b:04:6e:ee:55:0c:64:43:
6f:22:2d:44:d2:2d:59:f5:3d:7b:d3:34:d4:25:ff:
4c:db:ca:39:1b:53:4c:dd:50:1a:aa:90:99:de:40:
d6:e0:cf:13:46:88:72:24:2e:b9:26:f3:75:e1:b5:
50:9d:20:2e:29:8e:a6:89:97:7a:11:d8:b1:2e:e2:
ac:76:32:94:69:50:f4:bd:ae:56:79:ff:1f:2a:5f:
c5:ae:ed:26:85:4b:1a:d5:e2:87:a1:d7:84:30:1c:
5e:5d:bd:9a:9b:80:69:1f:16:c3:2e:25:ae:d8:23:
d6:30:34:e8:d4:e9:ff:b2:f2:94:aa:b5:56:be:74:
16:18:80:a4:3d:30:48:64:e9:c0:ba:f4:dc:35:f3:
11:40:55:65:8b:44:b1:4a:55:1c:2d:e4:e3:c0:89:
8e:99:36:6d:d2:c7:d6:60:d7:03:d1:90:13:21:de:
54:a2:4d:c2:99:6b:dc:3b:45:d4:5a:39:9c:c1:a7:
df:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:40:08:BA:B0:59:CD:CD:81:26:71:3A:F9:C5:48:3B:E9:9A:15:CD
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/XEAIurBZzc2BJnE6-cVIO-maFc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.136.0/23
85.133.164.0/23
85.133.194.0/24
85.133.217.0/24
85.133.234.0/24
85.133.236.0/24
85.133.253.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:57:ec:a6:6a:5b:7c:30:27:ef:8d:6a:82:a5:7f:d0:8a:33:
27:63:d7:7b:b4:06:f4:a5:55:90:88:d5:d8:81:e6:64:42:71:
2d:f1:51:35:ec:13:b2:31:66:9c:75:3d:7e:72:a5:d9:32:cb:
91:5f:89:74:71:99:ac:9f:0e:9d:75:a3:73:a4:6f:b3:9a:e1:
6f:e4:6f:04:d9:0e:ec:a4:09:f1:b6:a8:e1:79:13:4c:c7:d1:
a7:e5:af:ff:21:d8:bf:18:cd:5d:1f:13:8c:97:e3:95:25:04:
2c:b8:01:d2:6d:f8:f6:75:c0:f7:ad:8c:49:81:65:fa:18:ab:
a5:d2:f8:9d:79:bd:20:ba:13:7f:e5:93:8d:7b:f3:dd:9c:35:
40:07:65:4a:5a:1e:0a:ad:27:d8:f3:ed:1f:4a:93:e6:e2:73:
00:4a:1b:db:51:29:15:b1:1e:98:ff:14:01:46:34:da:80:11:
17:b7:75:56:b1:94:2f:bf:be:01:e8:3e:92:f2:98:80:80:b8:
6b:e1:f5:41:fe:d5:cc:81:06:b7:55:25:16:c0:d8:97:30:ad:
c6:f9:05:3c:9e:7d:f3:c7:85:e1:ac:52:fb:58:a5:59:99:80:
6b:61:63:f8:97:70:6c:78:22:05:80:e9:6b:05:18:79:b5:3d:
30:75:be:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:13 2024 by rpki-client on console-fra.rpki-client.org