Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/gksUrZGOADg-yCTkwCqWG8mwiVQ.roa
File: gksUrZGOADg-yCTkwCqWG8mwiVQ.roa (raw, json)
Hash identifier: MLOTqhBWU/gQuFQ1tn4ZIzLsKciMzx0vxRA/R9kT4uw=
Subject key identifier: 82:4B:14:AD:91:8E:00:38:3E:C8:24:E4:C0:2A:96:1B:C9:B0:89:54
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 0A67CC87
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/gksUrZGOADg-yCTkwCqWG8mwiVQ.roa
Signing time: Wed 23 Feb 2022 06:14:50 +0000
ROA not before: Wed 23 Feb 2022 06:14:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 85.133.164.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 174574727 (0xa67cc87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Feb 23 06:14:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=824b14ad918e00383ec824e4c02a961bc9b08954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:28:50:b5:3f:0e:41:d1:f4:1f:36:23:f3:7c:
c2:7e:cd:a9:60:39:71:7f:bb:71:17:a3:e1:4d:5c:
31:c9:a5:19:94:e6:49:5b:5f:5e:1c:cc:8e:1f:cd:
9c:13:b9:9f:ad:c1:ac:13:68:14:69:18:13:cf:37:
a0:bc:ec:ac:1c:a5:4f:4b:aa:fe:42:b3:be:6b:08:
4b:c0:2e:0a:d3:32:76:e2:66:99:da:bd:09:b5:d8:
d4:83:15:32:cd:90:8a:a2:29:9b:d5:b7:be:6f:4b:
46:4c:a4:2c:d5:b2:c6:17:14:54:d9:0a:a5:8a:02:
f2:d7:43:0e:3f:30:4b:c1:45:24:8f:27:0d:c4:77:
0a:9a:d6:8c:07:f6:c9:75:98:60:99:7f:de:65:12:
f3:54:52:6f:dc:2e:5e:06:a9:07:eb:8d:58:8a:0e:
d6:d6:5b:b5:f0:65:c3:7a:a3:85:db:e1:9e:98:96:
5c:7b:9c:07:11:42:56:4f:e7:33:c5:16:82:81:52:
a4:a6:1c:bf:18:2c:31:8d:a2:b1:56:8c:0b:93:4f:
0e:56:f6:c2:1e:4e:ff:80:11:3f:d2:79:8f:38:84:
b1:58:32:34:ef:b5:54:7e:4d:d6:3f:e6:c5:88:af:
14:3f:4b:66:d4:fd:60:22:c8:1a:a4:88:53:77:ab:
c3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:4B:14:AD:91:8E:00:38:3E:C8:24:E4:C0:2A:96:1B:C9:B0:89:54
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/gksUrZGOADg-yCTkwCqWG8mwiVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.164.0/24
Signature Algorithm: sha256WithRSAEncryption
14:21:27:0c:d6:27:4d:9b:eb:9d:90:59:ee:9e:6e:0a:ee:67:
09:f6:81:ef:10:62:37:cd:7d:6d:0e:85:c7:d0:da:64:37:7a:
a5:c2:fc:c0:15:a8:8f:9f:bf:c2:ae:1d:fa:f7:1f:4d:a1:0d:
59:8e:33:df:2a:b7:b9:2c:3c:5d:3a:a9:f8:ff:5e:2b:5b:47:
a9:bd:39:3b:a0:cb:3b:10:76:e8:0e:59:2d:af:03:e6:d1:4e:
30:d8:32:dd:28:6b:d8:c8:dd:fc:04:92:16:44:22:93:03:ff:
1a:4a:ff:7a:46:95:83:9b:25:0b:67:b6:40:19:ac:05:27:b6:
92:79:b5:6e:38:f4:87:ea:6d:a6:0d:ac:c0:2d:84:f4:ad:18:
bd:d3:dc:de:12:7a:61:4c:0d:fa:05:4b:12:b1:0b:a1:c0:4a:
f8:27:ea:95:e4:ac:93:f9:b9:21:76:ef:ef:76:78:bc:24:02:
80:fa:9b:0a:47:1a:7e:98:60:e6:85:83:79:20:6b:f4:fc:31:
f1:11:e4:50:16:e0:77:40:41:a2:1c:b7:71:b5:d1:21:f9:1c:
c5:0e:91:97:67:a8:56:dc:3d:9c:11:71:56:d7:79:4f:05:34:
2d:b3:a3:7a:f1:27:d3:a2:6a:15:71:70:1a:c4:b0:79:8d:7f:
fe:96:e8:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:02 2024 by rpki-client on console-ams.rpki-client.org