Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/b9r_luzGl4HyWgbxkc1eU_fEKHw.roa
File: b9r_luzGl4HyWgbxkc1eU_fEKHw.roa (raw, json)
Hash identifier: dX+UtRgKlN6vk7MeTfAZGJBAdvjmlEhEXBmmHcrOo/0=
Subject key identifier: 6F:DA:FF:96:EC:C6:97:81:F2:5A:06:F1:91:CD:5E:53:F7:C4:28:7C
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 01851B64E5A2A13123C373ECC9B8986DBFE9
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/b9r_luzGl4HyWgbxkc1eU_fEKHw.roa
Signing time: Fri 16 Dec 2022 14:44:35 +0000
ROA not before: Fri 16 Dec 2022 14:44:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 138687
IP address blocks: 85.133.218.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:1b:64:e5:a2:a1:31:23:c3:73:ec:c9:b8:98:6d:bf:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Dec 16 14:44:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6fdaff96ecc69781f25a06f191cd5e53f7c4287c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:07:ea:67:b5:37:be:07:f2:9d:00:82:25:d5:
29:e9:9c:6a:b3:c5:4e:35:43:ee:f3:e1:21:f9:63:
f6:be:5f:3d:58:e4:72:91:ee:fa:90:3e:11:cc:0d:
f7:9c:54:4b:cc:62:55:d7:64:d5:dd:14:5f:2e:52:
28:1d:bf:24:7b:d3:d8:0f:44:8d:df:ce:07:95:3f:
c3:fd:98:96:ca:6e:29:d4:1e:12:7a:43:d4:89:5e:
83:9a:55:7e:8c:e0:e5:9c:61:38:d0:e3:8f:31:ff:
d1:18:5f:59:81:b8:5f:f9:22:6d:50:87:a0:55:60:
b0:00:58:db:0b:58:67:3b:e2:31:3e:44:11:ab:d9:
ff:8e:46:63:07:10:c9:2a:12:37:e4:7a:af:2f:c3:
1c:89:12:24:54:7e:bd:d0:38:42:81:fd:80:a4:03:
53:c0:15:b6:b0:64:a8:37:56:2a:41:14:d9:d4:f6:
68:ec:d9:21:74:61:7d:88:a0:93:6d:f2:9c:5a:65:
24:85:77:09:4e:ae:56:eb:6a:d5:e5:70:d6:8a:01:
3a:86:1c:5a:08:d7:88:90:51:d2:f8:9c:10:02:0a:
f0:9b:69:e2:4d:24:5f:eb:1c:e1:45:59:a3:d7:9e:
bb:52:32:04:54:7c:54:36:c8:50:86:03:28:1e:1f:
e9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:DA:FF:96:EC:C6:97:81:F2:5A:06:F1:91:CD:5E:53:F7:C4:28:7C
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/b9r_luzGl4HyWgbxkc1eU_fEKHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.218.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:2e:34:71:ab:66:e5:3a:f6:7f:63:71:0d:70:83:f3:e5:bb:
17:ea:51:79:1e:ef:f1:6f:14:20:dd:7a:60:b0:c2:7a:09:96:
e3:af:a2:23:60:cb:2c:69:7c:47:05:60:ad:64:ff:31:c9:1f:
29:a4:66:1b:b9:2a:10:94:7c:69:d2:cd:76:2c:d8:63:3c:7e:
2e:b8:4e:68:39:b3:e3:e5:b1:2c:de:ab:cc:7a:9f:e6:10:03:
71:c0:d7:f3:cb:ae:10:8f:e1:de:4f:2c:51:91:34:16:36:85:
94:6c:45:80:62:3a:cd:0c:64:70:39:23:07:71:ed:39:b8:0c:
ab:af:f5:8b:95:e3:82:e6:d4:96:cc:ce:3e:1e:95:39:b7:41:
6e:23:e6:12:0d:33:b3:31:c6:20:de:58:d2:b2:9b:d5:92:61:
53:b6:8c:e1:b9:58:fc:ba:f1:69:80:4b:5e:6d:cf:e7:2d:c5:
7f:43:20:3f:a6:9d:6a:be:f2:3a:ae:fc:f0:77:2c:07:47:31:
8c:2a:7e:ee:68:cf:28:80:f9:fb:2f:1a:d7:ca:dc:b3:4f:c1:
09:3e:14:36:c7:83:d7:6c:aa:20:4a:b5:3a:55:d8:a2:e3:c1:
b3:1e:90:59:34:09:36:ec:79:35:c8:46:62:b0:9f:7a:65:30:
40:fa:0f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:13 2024 by rpki-client on console-fra.rpki-client.org