Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/dKUGK7j1-wJ66kBBdK1u7a9qb6g.roa
File: dKUGK7j1-wJ66kBBdK1u7a9qb6g.roa (raw, json)
Hash identifier: XjqQ9OIluNoGiC5gBvRws2BuIOD2bHXyAerZboAoLJ4=
Subject key identifier: 74:A5:06:2B:B8:F5:FB:02:7A:EA:40:41:74:AD:6E:ED:AF:6A:6F:A8
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 0AD2C259
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/dKUGK7j1-wJ66kBBdK1u7a9qb6g.roa
Signing time: Tue 05 Apr 2022 21:58:10 +0000
ROA not before: Tue 05 Apr 2022 21:58:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208485
IP address blocks: 85.133.234.0/24 maxlen: 24
85.133.169.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 181584473 (0xad2c259)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Apr 5 21:58:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=74a5062bb8f5fb027aea404174ad6eedaf6a6fa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b8:30:52:a6:2c:37:0a:c3:7d:58:49:76:7d:
fe:56:82:bd:7c:4a:62:ae:41:e0:70:ab:99:e6:25:
6c:34:ff:ed:de:1f:a8:9c:c1:1d:a0:53:73:3e:78:
e3:c4:10:e5:e8:de:e4:1a:a0:07:97:23:c7:6c:68:
d1:14:2e:b1:3c:fd:d5:76:98:fc:d9:20:63:74:f1:
8a:1e:4a:33:65:4d:c8:48:eb:ed:19:fa:6d:db:2a:
68:8c:e8:94:32:af:9e:fc:ba:4c:d8:33:1e:1e:38:
4d:4e:d8:7e:fd:2f:cc:ac:05:e3:b5:e6:9a:4a:d3:
85:3d:3b:1d:6c:66:87:73:08:c1:9b:e2:40:6f:9c:
48:6f:b5:1f:a9:56:43:af:ac:5b:2d:78:58:6e:96:
1c:e5:85:c4:01:c4:f1:fe:a9:80:b8:b4:94:d7:4e:
2f:0f:c6:80:9a:9e:83:23:d7:01:1f:d9:67:e4:a8:
56:8c:a1:cf:77:70:7b:df:1c:d0:71:2e:bf:a3:7a:
85:2f:a9:d2:ab:46:b3:1d:ec:63:ba:25:88:80:f7:
9a:b3:42:ea:0c:bf:43:00:04:99:07:f8:3e:a3:aa:
69:7d:87:83:3c:83:b7:71:0c:f0:6a:21:4b:9c:4d:
c1:cf:de:9f:2d:c5:ea:7b:60:f4:5d:cb:9d:9a:9e:
32:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:A5:06:2B:B8:F5:FB:02:7A:EA:40:41:74:AD:6E:ED:AF:6A:6F:A8
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/dKUGK7j1-wJ66kBBdK1u7a9qb6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.169.0/24
85.133.234.0/24
Signature Algorithm: sha256WithRSAEncryption
03:c5:96:1f:30:ad:52:ed:05:29:54:bb:79:c8:be:8b:e9:bb:
cc:2a:6b:9d:9e:88:35:61:1f:46:ee:41:ff:59:4e:d8:12:e7:
69:e1:48:d0:4b:fd:bc:be:21:06:55:83:40:46:96:42:4e:4f:
07:b4:0b:b9:c5:76:72:63:13:a4:d6:59:8e:da:3e:16:b6:8a:
ab:e8:78:ae:b3:70:fe:df:56:84:b5:29:9c:41:00:cc:26:0b:
9b:d2:9b:c3:8a:ec:5d:76:68:18:7f:f3:eb:fc:ba:9b:f7:98:
6a:4c:76:bf:e6:49:ee:45:9d:4e:ce:16:87:2c:58:6f:23:e0:
2d:92:da:40:0b:ce:53:b1:75:67:2c:b2:31:b4:48:b7:d8:e5:
66:e6:e1:3d:48:0c:c9:7f:1c:82:1d:af:1d:c7:25:ad:55:8e:
c7:40:d1:4a:a9:fb:31:8f:3f:a1:f2:e8:ea:2a:c2:cd:48:81:
1f:38:1c:77:61:4c:73:9d:f2:99:f1:fe:8f:01:8d:32:2b:e7:
c8:ea:dd:ab:03:73:10:48:99:73:a4:a0:46:92:df:5e:f3:3e:
ab:65:11:cc:2f:44:a2:d9:c7:6d:03:e5:8f:56:eb:da:7d:2a:
65:01:e0:c9:b0:9c:6f:60:b1:0d:cc:22:5e:99:de:72:2d:e8:
30:e7:bc:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:02 2024 by rpki-client on console-ams.rpki-client.org