Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/ixauIF8A_4515oDH6JfDotSUUmE.roa
File: ixauIF8A_4515oDH6JfDotSUUmE.roa (raw, json)
Hash identifier: mrTHSpz63JXUODIKp9bGX2eDD3lKCIXd7JF6WIGKtUU=
Subject key identifier: 8B:16:AE:20:5F:00:FF:8E:75:E6:80:C7:E8:97:C3:A2:D4:94:52:61
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 0A6B7BA7
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/ixauIF8A_4515oDH6JfDotSUUmE.roa
Signing time: Wed 23 Feb 2022 18:58:46 +0000
ROA not before: Wed 23 Feb 2022 18:58:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60025
IP address blocks: 85.133.194.0/24 maxlen: 24
85.133.217.0/24 maxlen: 24
85.133.236.0/24 maxlen: 24
85.133.234.0/24 maxlen: 24
85.133.137.0/24 maxlen: 24
85.133.253.0/24 maxlen: 24
85.133.165.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 174816167 (0xa6b7ba7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Feb 23 18:58:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8b16ae205f00ff8e75e680c7e897c3a2d4945261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:08:59:8f:ca:40:26:9d:cf:96:45:65:65:db:
e6:24:c2:74:53:65:04:ee:55:ea:34:1f:44:d8:11:
d7:3d:a4:a3:58:9b:ce:53:61:57:9a:8a:1f:3c:5b:
4d:0f:1c:84:41:74:4d:29:44:04:0c:55:03:be:81:
08:7a:db:89:85:9d:a5:81:a8:7b:8a:61:4f:5d:23:
dc:2b:1e:3f:96:ef:1d:21:05:83:58:cf:7c:ff:c6:
29:41:5d:f5:f1:57:98:20:48:fe:5a:c7:20:c1:53:
e1:f5:7f:c6:9f:8a:3a:19:d9:66:24:70:8b:89:b4:
59:73:47:fd:a2:7f:eb:d6:3d:e1:e3:a5:30:07:5e:
0c:db:bf:d0:93:b6:31:9b:83:ee:9e:30:c3:48:f7:
0e:14:59:08:ea:f3:27:3c:69:57:f3:a1:3a:08:1b:
69:66:1b:6a:79:e9:9e:2d:6f:c7:58:db:a0:4e:35:
bd:e5:04:1e:9e:9c:c2:8b:6d:35:38:b1:e7:2b:65:
4e:8c:46:8d:19:51:13:b9:4c:6f:70:82:26:83:f7:
1f:99:54:99:64:16:3f:1e:72:13:27:d5:13:45:a9:
c6:2a:a7:99:1a:6b:c1:26:af:44:ad:12:78:6c:3c:
78:0f:e7:56:97:e0:96:91:63:49:22:0a:f3:8a:d8:
1e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:16:AE:20:5F:00:FF:8E:75:E6:80:C7:E8:97:C3:A2:D4:94:52:61
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/ixauIF8A_4515oDH6JfDotSUUmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.137.0/24
85.133.165.0/24
85.133.194.0/24
85.133.217.0/24
85.133.234.0/24
85.133.236.0/24
85.133.253.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:44:d7:39:92:74:ad:b6:9e:e8:5b:a1:49:84:89:27:6f:65:
5f:12:21:7f:4b:5c:fc:b5:c4:99:5e:e9:b2:c8:1e:82:a8:df:
ca:be:28:ee:b3:c0:af:f6:ee:28:87:61:3c:a1:b0:57:ea:65:
db:dd:9f:ba:81:ee:93:61:3d:d2:a0:83:bf:ae:6b:36:8c:ac:
84:18:7c:36:14:e5:33:20:61:15:08:f7:4f:4c:90:3d:67:27:
ac:c3:47:0f:d9:d8:fc:34:03:8e:ea:fe:04:4e:ea:93:c2:6d:
79:24:bb:74:0e:bb:a6:37:9c:f3:db:c5:be:c1:40:18:80:a1:
a1:82:58:1a:e4:a5:7e:88:48:49:ee:e0:e0:22:a8:e2:d7:95:
06:9f:ed:13:c1:3f:9c:c6:8f:82:c9:db:41:4e:65:ff:1f:a6:
61:a2:fe:8f:7a:c9:93:60:a7:65:60:a1:c5:57:05:15:9d:e9:
73:a4:a7:61:18:24:eb:cb:f7:15:da:6a:7c:cb:30:2b:38:87:
61:d4:9e:00:1b:8a:01:8f:16:8e:8a:23:54:ce:fe:25:c4:6e:
ea:ac:d0:50:48:19:51:f0:f1:f8:29:b5:51:d7:d7:35:fe:1b:
12:ea:3b:5f:6c:eb:da:8f:af:e8:dd:79:8b:99:6f:3c:9e:a5:
22:48:ee:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:13 2024 by rpki-client on console-fra.rpki-client.org