Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/YO4sDuCss7eQoJHnVIUKQqbqKF4.roa
File: YO4sDuCss7eQoJHnVIUKQqbqKF4.roa (raw, json)
Hash identifier: OSHl6f9mGviMpNYkDSm10PoS2H1LLnlpNJ9tT7yJ3lQ=
Subject key identifier: 60:EE:2C:0E:E0:AC:B3:B7:90:A0:91:E7:54:85:0A:42:A6:EA:28:5E
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 01851A14E41D078BEE159F741BF912652425
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/YO4sDuCss7eQoJHnVIUKQqbqKF4.roa
Signing time: Fri 16 Dec 2022 08:37:34 +0000
ROA not before: Fri 16 Dec 2022 08:37:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 85.133.216.0/24 maxlen: 24
85.133.215.0/24 maxlen: 24
85.133.218.0/24 maxlen: 24
85.133.219.0/24 maxlen: 24
85.133.225.0/24 maxlen: 24
85.133.228.0/24 maxlen: 24
85.133.233.0/24 maxlen: 24
85.133.234.0/24 maxlen: 24
85.133.237.0/24 maxlen: 24
85.133.241.0/24 maxlen: 24
85.133.242.0/24 maxlen: 24
85.133.250.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:1a:14:e4:1d:07:8b:ee:15:9f:74:1b:f9:12:65:24:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Dec 16 08:37:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=60ee2c0ee0acb3b790a091e754850a42a6ea285e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cb:d6:6e:1d:b4:ad:7d:21:54:78:62:64:d4:
63:8a:6c:2a:7b:eb:52:09:f3:91:c1:9e:00:4e:52:
46:43:ba:76:e3:0c:30:34:eb:38:e7:c8:2e:f8:57:
cd:ca:57:3b:8f:80:96:06:a5:fd:7c:d3:c8:8e:08:
f7:e9:e5:37:1a:95:4e:e3:bb:42:0a:63:7c:a3:68:
dc:f8:fb:f2:83:b5:e1:74:79:b2:de:d8:04:0b:13:
51:a2:04:f1:34:f8:e4:17:a8:3d:1a:50:e8:4d:c6:
ce:fb:b8:ea:4d:fa:7a:1d:03:b4:05:29:17:74:18:
c4:ce:d2:e7:bb:6d:ff:aa:a9:2d:69:e9:64:46:9f:
d8:75:98:4a:56:18:8f:21:90:67:27:7b:de:70:c1:
f3:38:74:ca:73:06:45:46:f1:82:fb:d7:5d:a7:1c:
dc:7c:7b:11:03:72:dc:bd:29:a9:87:c3:2a:31:7e:
fc:3b:14:c8:5c:63:f5:5e:24:e7:4e:d5:b9:0b:a9:
c2:ae:3e:f4:51:dc:ac:ab:54:9e:18:d3:52:c7:87:
f2:93:08:49:58:d6:bc:f2:23:79:d9:18:25:16:fb:
f1:11:7b:67:f8:c1:cf:af:5f:7c:b0:54:86:e6:d6:
3f:33:08:17:76:9f:ae:47:be:81:48:e8:0f:05:b1:
23:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:EE:2C:0E:E0:AC:B3:B7:90:A0:91:E7:54:85:0A:42:A6:EA:28:5E
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/YO4sDuCss7eQoJHnVIUKQqbqKF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.215.0-85.133.216.255
85.133.218.0/23
85.133.225.0/24
85.133.228.0/24
85.133.233.0-85.133.234.255
85.133.237.0/24
85.133.241.0-85.133.242.255
85.133.250.0/24
Signature Algorithm: sha256WithRSAEncryption
67:6d:bd:8c:df:bb:df:2e:0b:d1:a1:c2:b4:e0:0d:2b:e1:d8:
b0:9b:fc:6c:80:86:ca:21:2b:88:84:85:0e:54:8d:3c:76:9d:
e9:d1:90:c6:88:23:7f:ce:35:66:ff:6e:1f:e2:5a:e9:ba:c8:
44:6a:19:63:58:d6:4c:44:ff:33:7f:dc:e1:f8:02:87:f5:9f:
63:de:f1:14:42:2b:4f:8e:45:dd:63:cb:c8:c1:1c:ba:c0:59:
a3:d8:41:10:54:0c:a3:4d:a8:8a:07:7a:c2:34:84:9c:5e:2f:
f3:70:0b:0e:ca:49:c0:6b:65:97:78:2b:c0:fc:0f:1d:83:58:
6b:c4:9d:d8:c4:ab:7b:d7:7b:aa:71:db:72:10:7c:ce:b6:42:
ba:d8:fc:80:6d:81:a2:81:71:c5:4e:84:f8:51:ba:aa:da:94:
8a:1c:c2:db:2b:1d:98:d8:7d:e2:5f:23:7e:90:15:79:24:40:
ee:74:1d:29:7a:19:36:c2:2c:7d:8b:59:4f:37:7f:4c:6e:d5:
30:40:56:f2:f1:be:7f:2f:07:2f:2f:b9:a1:76:e1:ff:7d:9d:
5e:2a:0d:18:9e:71:a0:c0:16:74:61:9b:a7:a0:f9:6e:ce:66:
f5:aa:ca:f1:32:8a:5d:3a:a7:8f:8d:1f:f8:76:c2:16:00:d6:
28:59:14:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:01 2024 by rpki-client on console-ams.rpki-client.org