Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/tH3_IYPIsMJ82tXVvRFhEdDnyZI.roa
File: tH3_IYPIsMJ82tXVvRFhEdDnyZI.roa (raw, json)
Hash identifier: PnUlYumf3/yelHwSWzJhl1At9VCv5fqsGhnmJS1eMfo=
Subject key identifier: B4:7D:FF:21:83:C8:B0:C2:7C:DA:D5:D5:BD:11:61:11:D0:E7:C9:92
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 01851B688CFCE309DD07214C09697B007604
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/tH3_IYPIsMJ82tXVvRFhEdDnyZI.roa
Signing time: Fri 16 Dec 2022 14:48:34 +0000
ROA not before: Fri 16 Dec 2022 14:48:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 85.133.227.0/24 maxlen: 24
85.133.228.0/24 maxlen: 24
85.133.233.0/24 maxlen: 24
85.133.234.0/24 maxlen: 24
85.133.237.0/24 maxlen: 24
85.133.238.0/24 maxlen: 24
85.133.236.0/24 maxlen: 24
85.133.241.0/24 maxlen: 24
85.133.242.0/24 maxlen: 24
85.133.250.0/24 maxlen: 24
85.133.253.0/24 maxlen: 24
85.133.174.0/24 maxlen: 24
85.133.178.0/24 maxlen: 24
85.133.179.0/24 maxlen: 24
85.133.194.0/24 maxlen: 24
85.133.199.0/24 maxlen: 24
85.133.202.0/24 maxlen: 24
85.133.205.0/24 maxlen: 24
85.133.208.0/24 maxlen: 24
85.133.216.0/24 maxlen: 24
85.133.217.0/24 maxlen: 24
85.133.215.0/24 maxlen: 24
85.133.219.0/24 maxlen: 24
85.133.221.0/24 maxlen: 24
85.133.132.0/24 maxlen: 24
85.133.136.0/24 maxlen: 24
85.133.137.0/24 maxlen: 24
85.133.135.0/24 maxlen: 24
85.133.143.0/24 maxlen: 24
85.133.146.0/24 maxlen: 24
85.133.151.0/24 maxlen: 24
85.133.153.0/24 maxlen: 24
85.133.156.0/24 maxlen: 24
85.133.166.0/24 maxlen: 24
85.133.160.0/24 maxlen: 24
85.133.161.0/24 maxlen: 24
85.133.165.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:1b:68:8c:fc:e3:09:dd:07:21:4c:09:69:7b:00:76:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Dec 16 14:48:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b47dff2183c8b0c27cdad5d5bd116111d0e7c992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2b:ed:db:90:c0:e3:e4:58:bf:af:d1:a1:3b:
98:ec:94:33:ae:17:94:ce:60:6e:31:b8:4e:9b:a4:
a1:4f:df:1d:55:ea:c1:51:1c:5e:aa:5b:9b:ff:58:
f5:b6:3e:ff:98:08:1a:9f:25:86:8d:92:2e:c3:07:
a4:f6:a1:42:24:8c:76:17:3f:21:43:bb:19:25:bb:
83:26:c1:4f:69:d3:1e:ff:25:93:fb:5d:8f:ab:7d:
a2:54:fe:cd:65:0c:e4:77:81:73:f7:04:39:29:64:
58:43:45:07:15:ad:92:d5:79:0f:b3:7c:e0:86:70:
7c:9b:2a:46:e3:1c:79:87:4a:6f:76:10:97:83:d8:
48:c8:40:f9:1c:8a:11:5b:a3:38:89:96:0a:70:1c:
6c:b6:fd:8a:f0:5f:f5:c8:9b:9c:be:df:97:39:e9:
dd:9f:37:e3:3e:d7:5b:60:62:1e:bc:15:85:ea:48:
3e:c6:43:ed:05:0f:f5:01:73:86:98:67:2e:07:32:
f2:8b:1f:c9:78:3f:31:5b:77:49:8d:70:50:a2:7f:
1a:d4:5f:29:72:21:bb:ff:94:39:f1:7f:70:b5:60:
3f:a2:2b:c3:e5:39:1c:ea:85:86:b0:70:a0:4f:b0:
21:9e:ab:e2:05:ec:07:d5:7d:fc:2e:8e:bb:52:4b:
06:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:7D:FF:21:83:C8:B0:C2:7C:DA:D5:D5:BD:11:61:11:D0:E7:C9:92
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/tH3_IYPIsMJ82tXVvRFhEdDnyZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.132.0/24
85.133.135.0-85.133.137.255
85.133.143.0/24
85.133.146.0/24
85.133.151.0/24
85.133.153.0/24
85.133.156.0/24
85.133.160.0/23
85.133.165.0-85.133.166.255
85.133.174.0/24
85.133.178.0/23
85.133.194.0/24
85.133.199.0/24
85.133.202.0/24
85.133.205.0/24
85.133.208.0/24
85.133.215.0-85.133.217.255
85.133.219.0/24
85.133.221.0/24
85.133.227.0-85.133.228.255
85.133.233.0-85.133.234.255
85.133.236.0-85.133.238.255
85.133.241.0-85.133.242.255
85.133.250.0/24
85.133.253.0/24
Signature Algorithm: sha256WithRSAEncryption
90:9f:fb:35:ca:dc:25:d6:6d:64:f7:b6:db:db:45:9b:ec:f5:
57:86:47:a3:94:db:64:b3:75:e4:dd:92:4e:36:24:63:a5:6c:
ad:af:53:5b:3c:01:d1:05:d0:53:b2:4d:55:fb:cb:c7:9e:09:
44:dc:91:ac:97:ab:08:00:2c:f5:27:b6:57:91:62:7f:85:bd:
2b:8c:7e:4f:89:6c:94:79:fe:fd:da:14:08:c2:fc:4f:58:31:
61:8a:6b:a0:06:99:62:11:7c:69:7c:5d:80:34:ab:75:21:47:
77:c8:d0:5f:61:c0:53:57:03:e6:6f:fe:83:75:3d:c9:93:28:
6b:b5:9a:21:84:92:59:93:77:47:6e:1d:4c:09:01:e3:59:05:
1d:04:8f:af:23:5d:8e:3d:21:cc:fe:8a:02:85:31:d5:82:89:
eb:b3:37:aa:f4:d5:d1:b5:76:66:58:15:d8:f0:82:8a:90:0e:
61:27:52:6e:bd:c5:94:37:da:c8:e1:e8:cf:81:0a:79:1a:07:
2e:26:12:bf:e5:ed:ab:44:52:76:d0:21:7c:ee:56:dc:f1:49:
30:a9:1b:e2:86:03:c5:61:82:72:53:8d:0b:ac:a1:fe:53:e9:
9b:cc:31:35:6d:f8:0c:35:59:05:f7:0a:26:8c:8d:13:94:29:
c4:c2:55:23
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:13 2024 by rpki-client on console-fra.rpki-client.org