Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/XFRiOKjOx0uEfUWpzUrPBtMjLcA.roa
File: XFRiOKjOx0uEfUWpzUrPBtMjLcA.roa (raw, json)
Hash identifier: uubNgqcgPh6lfg2EZomkLcLBZQ2VNnkk4zVRKncuSUc=
Subject key identifier: 5C:54:62:38:A8:CE:C7:4B:84:7D:45:A9:CD:4A:CF:06:D3:23:2D:C0
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 01852B8444FCE02B0C98E9466B97720327E2
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/XFRiOKjOx0uEfUWpzUrPBtMjLcA.roa
Signing time: Mon 19 Dec 2022 17:52:46 +0000
ROA not before: Mon 19 Dec 2022 17:52:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 138687
IP address blocks: 85.133.218.0/24 maxlen: 24
85.133.136.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2b:84:44:fc:e0:2b:0c:98:e9:46:6b:97:72:03:27:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Dec 19 17:52:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5c546238a8cec74b847d45a9cd4acf06d3232dc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cc:81:64:fa:2e:01:6a:6a:5f:25:30:5e:c8:
a7:99:fe:f9:ea:94:ea:48:2b:c5:c6:f1:4b:f4:89:
0d:0f:a3:91:41:00:68:85:ab:70:14:ad:1d:d7:19:
f3:e0:c6:d0:5f:d6:9a:36:00:af:77:af:96:31:2e:
84:0c:34:06:76:c5:14:57:e0:f0:73:7f:4c:2f:5f:
44:27:45:af:9d:09:5f:34:15:f1:92:20:7b:fa:9d:
cf:fd:a2:b6:9a:a7:91:7d:30:8f:46:c4:f4:66:cf:
16:0f:e4:c1:96:ad:0d:18:11:02:bf:8d:ae:af:0e:
8f:84:fa:94:3f:98:4c:a4:69:8f:06:c5:00:4e:10:
17:8c:1b:7e:20:0e:88:49:be:bf:c8:13:20:bf:49:
bb:43:4e:65:8d:03:aa:7d:b4:b7:e6:ff:53:dc:99:
8a:63:e5:81:0a:eb:00:2b:29:50:75:41:b1:0a:90:
67:91:7d:97:2c:0e:8e:7b:e3:13:de:19:a9:9c:38:
c3:41:2e:93:d2:28:de:10:a5:e0:65:53:b8:68:b1:
b4:76:a6:fa:7a:fe:dc:25:31:20:66:e1:7f:17:1b:
a8:6a:88:ff:1f:3b:b8:09:89:ac:4d:c0:00:b7:5e:
10:ab:31:b0:aa:40:d6:07:10:b1:d2:f6:24:12:da:
e8:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:54:62:38:A8:CE:C7:4B:84:7D:45:A9:CD:4A:CF:06:D3:23:2D:C0
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/XFRiOKjOx0uEfUWpzUrPBtMjLcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.136.0/24
85.133.218.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:80:35:f7:4c:3d:b2:55:10:24:c5:1d:a6:35:7a:21:a0:54:
32:66:a4:ae:73:f4:d4:a0:33:1d:18:37:64:39:1c:f4:96:58:
e3:62:bd:15:fa:07:3b:e5:3b:03:ec:b3:87:eb:d5:f8:0f:53:
1d:bd:fb:c0:69:a7:16:76:ba:17:4f:ff:ac:90:10:cd:f3:2b:
52:ea:18:41:d9:09:90:d1:da:84:2b:19:1a:37:ba:f7:a5:ee:
03:a8:a4:53:4a:75:81:e7:f1:33:07:ed:54:e6:88:da:2c:e9:
75:a4:4a:d0:f2:34:4a:df:77:d8:64:98:ec:a9:a4:71:f1:d4:
28:00:66:66:db:0e:11:a5:f6:37:25:e3:48:12:7c:45:bf:17:
4c:5d:a9:5c:e5:e7:a8:35:14:67:eb:dd:f5:dc:19:e7:85:be:
24:ef:9d:5f:ef:6c:9b:95:d1:62:b9:c2:42:47:c2:18:8a:24:
1c:05:7a:4a:44:4b:a8:3c:ae:3c:98:9e:55:e7:55:fe:89:8d:
12:e0:4f:01:7f:7a:c6:a7:f9:fc:ac:67:70:e6:99:49:eb:16:
60:d7:90:c9:ae:f2:bc:d1:dc:7e:70:27:26:e2:e0:af:98:1e:
d6:97:cb:a1:7e:dc:9c:98:4c:3b:02:10:6c:22:6d:c9:b2:1f:
4e:e3:7a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:13 2024 by rpki-client on console-fra.rpki-client.org