Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/cWNW9YF51NJS_1G8EShNwyandHg.roa
File: cWNW9YF51NJS_1G8EShNwyandHg.roa (raw, json)
Hash identifier: eIX+tQaBWazMIeQf/y/ihFM9Y8ZAfgYSphxALbKPzW0=
Subject key identifier: 71:63:56:F5:81:79:D4:D2:52:FF:51:BC:11:28:4D:C3:26:A7:74:78
Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Certificate serial: 3D4A8E43
Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/cWNW9YF51NJS_1G8EShNwyandHg.roa
Signing time: Sat 01 Jan 2022 06:55:08 +0000
ROA not before: Sat 01 Jan 2022 06:55:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16276
IP address blocks: 92.204.128.0/20 maxlen: 24
151.106.32.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1028296259 (0x3d4a8e43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Validity
Not Before: Jan 1 06:55:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=716356f58179d4d252ff51bc11284dc326a77478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:bc:b7:57:d8:d7:fc:08:f0:5c:df:e5:05:4c:
7d:81:36:37:38:37:1c:c6:1c:40:38:63:16:b3:80:
62:a5:7e:70:ee:50:24:2c:0a:a7:94:1b:a0:6b:43:
ba:b5:3e:a6:25:96:a8:a2:5d:c5:f2:af:a2:70:08:
88:4d:ff:d5:d7:6e:ef:5e:c5:9b:83:a2:ba:b7:a7:
74:b4:d8:a2:b9:09:e7:14:3f:23:25:05:70:c0:f1:
4f:36:6c:81:0e:73:fa:70:6f:77:21:54:f3:53:8f:
25:d2:3f:eb:b2:98:56:d3:73:09:ed:99:88:a2:8b:
e1:cd:fb:1b:3a:31:98:06:7d:2c:55:11:71:8a:85:
20:aa:b4:0b:ee:f0:b4:b2:d5:9b:a7:f5:0b:12:0e:
92:bd:9a:04:d2:dd:37:f1:c6:cd:34:89:bf:01:43:
52:e4:09:74:a7:50:cf:7c:b6:fe:c7:3f:cf:a4:55:
bf:2c:3c:60:e6:ab:fa:d4:e7:e1:60:56:c8:b8:e1:
b9:68:c4:df:e4:1b:dd:95:41:a7:75:53:24:dd:64:
13:bc:e9:ff:17:b3:1b:f4:25:7f:5f:b9:26:d7:4e:
a9:c6:46:47:9e:a5:ae:94:17:cc:eb:42:87:e4:c9:
28:eb:cf:4c:0a:7c:ce:5c:cf:ab:f4:4f:87:0f:a3:
0c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:63:56:F5:81:79:D4:D2:52:FF:51:BC:11:28:4D:C3:26:A7:74:78
X509v3 Authority Key Identifier:
keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/cWNW9YF51NJS_1G8EShNwyandHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.204.128.0/20
151.106.32.0/20
Signature Algorithm: sha256WithRSAEncryption
8f:67:58:42:30:8a:9c:26:f8:c1:c8:03:14:15:5c:85:f2:a4:
4a:54:eb:12:b8:e2:3f:7d:44:61:fa:38:51:dd:15:0b:37:66:
f5:12:78:f5:e1:59:ba:35:db:ed:34:35:93:c5:6b:78:1c:cb:
2e:ba:5c:a8:e1:52:ba:5a:3f:72:a6:6c:fc:d9:b9:77:0b:2d:
a5:32:b1:e0:9c:4d:79:8d:39:85:8b:fe:12:33:f0:59:29:2a:
00:f3:c3:c1:6f:19:ac:ec:a4:9a:09:4c:74:d4:e8:99:34:f9:
92:a3:e9:b5:0e:e7:2b:c5:d6:0e:75:88:bd:1d:2f:51:0d:1d:
14:e9:b6:74:b1:8b:fa:74:27:c1:f4:c5:1e:00:b0:ca:54:79:
0f:45:48:70:a3:1f:7d:62:43:12:e3:3d:3f:26:74:41:7d:fe:
e8:d7:8e:fb:23:ba:ca:17:27:ea:30:dd:93:9e:35:f1:17:53:
bd:23:2d:6f:c2:de:2d:7b:b7:4b:94:2c:cd:cf:7c:a7:31:00:
f8:a5:cb:ec:a3:04:4b:8d:6b:a3:c6:3e:0e:25:9f:21:3f:d4:
96:b4:5a:70:b7:dc:9c:bf:fc:c2:3b:9a:c7:f1:b9:80:75:eb:
d0:38:38:26:df:a5:a0:58:d3:40:aa:ac:8e:f9:50:19:82:09:
8e:92:0d:b0
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEPUqOQzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
YTZlZDBmYjdiMzIwODMyYWMxNTgwNTM0YzdiMjYzZjMwNGU5ODFiMB4XDTIyMDEw
MTA2NTUwOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzE2MzU2ZjU4MTc5
ZDRkMjUyZmY1MWJjMTEyODRkYzMyNmE3NzQ3ODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMu8t1fY1/wI8Fzf5QVMfYE2Nzg3HMYcQDhjFrOAYqV+cO5Q
JCwKp5QboGtDurU+piWWqKJdxfKvonAIiE3/1ddu717Fm4OiurendLTYorkJ5xQ/
IyUFcMDxTzZsgQ5z+nBvdyFU81OPJdI/67KYVtNzCe2ZiKKL4c37GzoxmAZ9LFUR
cYqFIKq0C+7wtLLVm6f1CxIOkr2aBNLdN/HGzTSJvwFDUuQJdKdQz3y2/sc/z6RV
vyw8YOar+tTn4WBWyLjhuWjE3+Qb3ZVBp3VTJN1kE7zp/xezG/Qlf1+5JtdOqcZG
R56lrpQXzOtCh+TJKOvPTAp8zlzPq/RPhw+jDAkCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBRxY1b1gXnU0lL/UbwRKE3DJqd0eDAfBgNVHSMEGDAWgBS6btD7ezIIMqwV
gFNMeyY/ME6YGzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3VtN1EtM3N5Q0RLc0ZZQlRUSHNtUHpCT21Ccy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjAvNDIwNDFkLTU5MzEtNDgyNC05MjU0LTE2MWYzNDIzODdkMS8x
L2NXTlc5WUY1MU5KU18xRzhFU2hOd3lhbmRIZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjAv
NDIwNDFkLTU5MzEtNDgyNC05MjU0LTE2MWYzNDIzODdkMS8xL3VtN1EtM3N5Q0RL
c0ZZQlRUSHNtUHpCT21Ccy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEBFzMgAMEBJdqIDANBgkqhkiG9w0B
AQsFAAOCAQEAj2dYQjCKnCb4wcgDFBVchfKkSlTrErjiP31EYfo4Ud0VCzdm9RJ4
9eFZujXb7TQ1k8VreBzLLrpcqOFSulo/cqZs/Nm5dwstpTKx4JxNeY05hYv+EjPw
WSkqAPPDwW8ZrOykmglMdNTomTT5kqPptQ7nK8XWDnWIvR0vUQ0dFOm2dLGL+nQn
wfTFHgCwylR5D0VIcKMffWJDEuM9PyZ0QX3+6NeO+yO6yhcn6jDdk5418RdTvSMt
b8LeLXu3S5Qszc98pzEA+KXL7KMES41ro8Y+DiWfIT/UlrRacLfcnL/8wjuax/G5
gHXr0Dg4Jt+loFjTQKqsjvlQGYIJjpINsA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:03 2024 by rpki-client on console-fra.rpki-client.org