Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/buSqc-8AnktWEE4ZVxtTGCXBxGk.roa
File: buSqc-8AnktWEE4ZVxtTGCXBxGk.roa (raw, json)
Hash identifier: ZYuAL1dwakYrz42ydO9IgBmZuGPBuYe9bxOQoN4Kf2w=
Subject key identifier: 6E:E4:AA:73:EF:00:9E:4B:56:10:4E:19:57:1B:53:18:25:C1:C4:69
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 0A79DFDD
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/buSqc-8AnktWEE4ZVxtTGCXBxGk.roa
Signing time: Mon 28 Feb 2022 11:50:38 +0000
ROA not before: Mon 28 Feb 2022 11:50:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 40564
IP address blocks: 85.133.136.0/24 maxlen: 24
85.133.164.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175759325 (0xa79dfdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Feb 28 11:50:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6ee4aa73ef009e4b56104e19571b531825c1c469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:76:e3:c8:a9:88:a3:e2:a8:b5:24:8a:80:69:
8d:1e:f0:f5:0c:c3:fb:0e:19:c6:ce:d1:13:1a:07:
56:37:da:a7:99:4f:ed:1b:46:e5:5a:20:5f:65:8c:
e4:cf:0b:d8:5b:d9:34:1f:8b:2b:e0:51:a8:bd:b5:
7f:80:d2:b4:fd:59:3c:1c:2e:e0:17:c6:64:bd:a2:
ac:fc:78:3d:da:0a:1a:80:93:3d:e4:df:98:3f:9f:
d8:68:3a:f8:52:48:59:9a:55:2a:6b:0d:3f:bb:f3:
5e:97:12:58:9f:6a:96:21:47:ad:e5:53:fd:1a:f6:
9a:f8:19:02:e6:01:f1:62:6f:ed:99:b0:e8:36:48:
78:2e:c5:99:be:fd:a2:d0:c4:53:df:5f:78:7d:2d:
14:33:c8:de:96:5c:59:9d:86:1f:63:f3:00:44:90:
dd:70:d2:b5:7d:81:cc:4d:53:7e:bb:d5:da:0b:76:
e8:66:c1:45:f3:6c:8c:81:0d:31:f6:b3:25:32:f4:
da:f1:64:0d:01:ad:74:0b:0e:1a:66:7a:22:d0:4d:
86:28:fb:e9:21:df:e1:b9:c9:30:69:2e:8a:c4:5d:
c5:85:f8:8f:71:8f:48:0a:03:5a:fe:0b:56:a8:11:
fc:8f:4e:6c:4e:cf:bf:06:e3:60:0d:a9:04:6a:6b:
fb:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:E4:AA:73:EF:00:9E:4B:56:10:4E:19:57:1B:53:18:25:C1:C4:69
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/buSqc-8AnktWEE4ZVxtTGCXBxGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.136.0/24
85.133.164.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:79:ad:34:94:36:fd:f9:35:a3:fd:9b:e7:dd:ac:3d:08:2d:
9f:a7:fe:ac:bf:ee:d0:24:81:32:c9:cf:76:e4:d7:5c:16:22:
7c:7d:a6:b1:ac:7b:4f:53:fe:80:54:31:ee:b3:b4:49:bd:9b:
70:c5:19:9a:4e:d7:81:03:3f:8d:ed:9a:ab:58:b1:21:3a:eb:
8b:24:1b:86:c6:c8:3b:7b:05:5d:c9:e6:ab:61:bb:a6:9b:8e:
2d:1f:89:8d:8c:82:93:8d:62:27:91:cc:a7:70:3d:74:e5:cf:
a1:2d:0a:85:0b:62:7c:ee:a1:32:2e:93:23:06:d6:f5:ae:0a:
6a:0b:d3:0b:12:87:7d:61:b8:2b:cb:45:d8:7d:81:4a:f1:75:
2b:11:ed:75:a6:95:5f:98:e9:4f:56:7b:04:e2:13:41:c1:b6:
fa:14:3b:2b:a5:17:6c:e7:f5:fb:13:bd:88:1a:e3:85:18:a5:
34:25:c5:e4:cb:65:2d:18:10:a9:c2:b6:9c:b4:a7:9c:30:63:
a1:08:6c:75:74:49:f1:bb:f2:d7:11:ab:e6:67:64:29:e4:a9:
01:79:ea:a6:fb:3c:3a:79:d9:2b:5b:ae:72:48:50:b1:85:89:
2c:cb:0a:12:69:1b:9b:1c:19:62:ae:08:63:5d:76:21:e7:87:
0b:00:b3:9f
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIECnnf3TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
ZDVlMzk2NThhM2VmNmYxM2NhMjFjYzExYTRlMzNlYmNkOTQ2NzAyMB4XDTIyMDIy
ODExNTAzOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNmVlNGFhNzNlZjAw
OWU0YjU2MTA0ZTE5NTcxYjUzMTgyNWMxYzQ2OTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKJ248ipiKPiqLUkioBpjR7w9QzD+w4Zxs7RExoHVjfap5lP
7RtG5VogX2WM5M8L2FvZNB+LK+BRqL21f4DStP1ZPBwu4BfGZL2irPx4PdoKGoCT
PeTfmD+f2Gg6+FJIWZpVKmsNP7vzXpcSWJ9qliFHreVT/Rr2mvgZAuYB8WJv7Zmw
6DZIeC7Fmb79otDEU99feH0tFDPI3pZcWZ2GH2PzAESQ3XDStX2BzE1TfrvV2gt2
6GbBRfNsjIENMfazJTL02vFkDQGtdAsOGmZ6ItBNhij76SHf4bnJMGkuisRdxYX4
j3GPSAoDWv4LVqgR/I9ObE7PvwbjYA2pBGpr+zcCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBRu5Kpz7wCeS1YQThlXG1MYJcHEaTAfBgNVHSMEGDAWgBTNXjllij728Tyi
HMEaTjPrzZRnAjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3pWNDVaWW8tOXZFOG9oekJHazR6NjgyVVp3SS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZjAvZWY1MzZjLTAzZDMtNGFjNS1iMTI1LTVkMWZhNjZjMzYzYi8x
L2J1U3FjLThBbmt0V0VFNFpWeHRUR0NYQnhHay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjAv
ZWY1MzZjLTAzZDMtNGFjNS1iMTI1LTVkMWZhNjZjMzYzYi8xL3pWNDVaWW8tOXZF
OG9oekJHazR6NjgyVVp3SS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAFWFiAMEAFWFpDANBgkqhkiG9w0B
AQsFAAOCAQEAOnmtNJQ2/fk1o/2b592sPQgtn6f+rL/u0CSBMsnPduTXXBYifH2m
sax7T1P+gFQx7rO0Sb2bcMUZmk7XgQM/je2aq1ixITrriyQbhsbIO3sFXcnmq2G7
ppuOLR+JjYyCk41iJ5HMp3A9dOXPoS0KhQtifO6hMi6TIwbW9a4KagvTCxKHfWG4
K8tF2H2BSvF1KxHtdaaVX5jpT1Z7BOITQcG2+hQ7K6UXbOf1+xO9iBrjhRilNCXF
5MtlLRgQqcK2nLSnnDBjoQhsdXRJ8bvy1xGr5mdkKeSpAXnqpvs8OnnZK1uuckhQ
sYWJLMsKEmkbmxwZYq4IY112IeeHCwCznw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:13 2024 by rpki-client on console-fra.rpki-client.org