Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/tkylX_R6f6-Fjx9yEBveVBhzuNw.roa
File: tkylX_R6f6-Fjx9yEBveVBhzuNw.roa (raw, json)
Hash identifier: tPYF/bqVkzDOs5RRZq2pK6FdBZX2hqofLdKl+qXbgyc=
Subject key identifier: B6:4C:A5:5F:F4:7A:7F:AF:85:8F:1F:72:10:1B:DE:54:18:73:B8:DC
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 01877991F7466A19A22E37675E542CDFAC23
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/tkylX_R6f6-Fjx9yEBveVBhzuNw.roa
Signing time: Thu 13 Apr 2023 07:43:41 +0000
ROA not before: Thu 13 Apr 2023 07:43:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52209
IP address blocks: 85.133.227.0/24 maxlen: 24
85.133.228.0/24 maxlen: 24
85.133.233.0/24 maxlen: 24
85.133.237.0/24 maxlen: 24
85.133.238.0/24 maxlen: 24
85.133.234.0/24 maxlen: 24
85.133.241.0/24 maxlen: 24
85.133.242.0/24 maxlen: 24
85.133.250.0/24 maxlen: 24
85.133.174.0/24 maxlen: 24
85.133.143.0/24 maxlen: 24
85.133.166.0/24 maxlen: 24
85.133.160.0/24 maxlen: 24
85.133.161.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:79:91:f7:46:6a:19:a2:2e:37:67:5e:54:2c:df:ac:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Apr 13 07:43:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b64ca55ff47a7faf858f1f72101bde541873b8dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:88:0c:5e:8f:08:29:00:7d:53:5b:2e:41:1e:
f8:ec:e2:95:1f:8b:24:01:af:7f:51:31:2c:3a:ed:
d0:13:01:1b:2e:19:7a:b8:34:0d:6c:69:2a:a6:dc:
8d:b0:f2:17:af:70:df:ab:c2:87:ee:2f:5c:76:92:
a8:bd:48:63:23:50:d7:83:2c:89:f3:f3:44:ae:8c:
d2:55:11:e0:25:a4:52:26:b7:ee:e9:aa:0b:0b:1b:
fa:ca:fa:d6:d6:0e:54:77:12:57:44:1c:2d:15:53:
11:3e:a8:ec:c2:bd:c1:d8:82:9b:95:2a:c5:36:e7:
58:87:f3:4b:a3:0d:73:a9:68:f0:d9:60:e8:93:b1:
c4:b0:ab:52:56:3d:7a:fa:8f:ae:ff:fb:5e:a3:f7:
74:9d:dc:51:87:6a:06:cf:de:b2:88:90:03:25:b9:
a4:52:58:83:1e:ae:8d:8a:ba:2e:78:23:5d:61:51:
94:dc:43:68:01:03:67:e0:fb:6b:bc:c4:3f:cf:fc:
51:87:61:73:24:9b:70:b0:8a:fd:fa:9f:27:ef:a7:
78:65:31:56:8a:4b:36:6e:8c:b4:cb:f5:d7:c5:f8:
01:e0:8c:8f:ba:c3:70:e6:fc:ae:33:61:bd:a2:35:
08:8a:27:a6:af:48:f9:e8:01:7d:00:88:1b:09:4c:
cc:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:4C:A5:5F:F4:7A:7F:AF:85:8F:1F:72:10:1B:DE:54:18:73:B8:DC
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/tkylX_R6f6-Fjx9yEBveVBhzuNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.143.0/24
85.133.160.0/23
85.133.166.0/24
85.133.174.0/24
85.133.227.0-85.133.228.255
85.133.233.0-85.133.234.255
85.133.237.0-85.133.238.255
85.133.241.0-85.133.242.255
85.133.250.0/24
Signature Algorithm: sha256WithRSAEncryption
50:41:73:88:7e:7b:35:ab:6d:2e:dd:bf:0a:6b:7d:99:a6:80:
d9:06:f7:85:82:b5:4a:a5:cb:a8:c1:88:db:66:35:df:ef:62:
48:5c:e2:14:aa:8e:5a:66:e6:61:d5:e6:9c:06:df:ed:ac:f1:
50:9d:d3:90:9a:a6:3b:64:06:c4:28:de:f0:18:4d:ef:b5:f7:
b1:0b:90:c8:db:42:d9:e4:54:11:71:72:0e:5a:ff:ca:48:4a:
63:c4:4b:05:e6:b3:ff:88:89:c3:7f:da:77:ca:6b:9c:9a:5d:
74:be:55:c6:0f:11:d9:8e:75:1f:06:1f:2d:52:77:3a:ce:f5:
72:c2:56:ab:4d:f3:3c:48:02:40:89:93:14:60:7e:50:a8:37:
47:eb:ff:60:62:52:71:4f:00:18:44:fa:d8:a5:66:8e:43:fc:
4c:ef:0d:35:de:b7:ae:00:66:23:a2:fc:52:74:90:4f:bc:b1:
c0:d9:b9:81:7b:72:dc:1a:dd:60:b3:b1:df:9c:da:d4:eb:33:
14:42:b2:69:3e:7b:0f:6d:93:fa:f6:7e:8d:65:ed:9a:31:02:
93:48:b8:07:74:40:c1:60:a3:34:ad:98:7f:51:44:5d:51:e9:
e9:d3:04:38:a8:48:8b:ac:a4:92:d4:80:26:0a:cf:7e:e5:3e:
e3:31:40:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:34:00 2025 by rpki-client