Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/WMPg_2j4NDKWVxLzU5-iJR933Zk.roa
File: WMPg_2j4NDKWVxLzU5-iJR933Zk.roa (raw, json)
Hash identifier: 4Tbw+QD94RkTW5/+0QGtzoyV/k/33burgAW583ff6a0=
Subject key identifier: 58:C3:E0:FF:68:F8:34:32:96:57:12:F3:53:9F:A2:25:1F:77:DD:99
Certificate issuer: /CN=25a553794223e6b4c632779b51371dc4e7d70705
Certificate serial: 04FA7F09
Authority key identifier: 25:A5:53:79:42:23:E6:B4:C6:32:77:9B:51:37:1D:C4:E7:D7:07:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JaVTeUIj5rTGMnebUTcdxOfXBwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/WMPg_2j4NDKWVxLzU5-iJR933Zk.roa
Signing time: Mon 27 Jun 2022 12:09:00 +0000
ROA not before: Mon 27 Jun 2022 12:09:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39756
IP address blocks: 46.102.248.0/24 maxlen: 24
89.36.24.0/21 maxlen: 24
176.223.224.0/20 maxlen: 24
89.36.30.0/24 maxlen: 24
176.223.240.0/21 maxlen: 24
89.41.60.0/23 maxlen: 24
89.47.247.0/24 maxlen: 24
89.33.207.0/24 maxlen: 24
176.223.192.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83525385 (0x4fa7f09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25a553794223e6b4c632779b51371dc4e7d70705
Validity
Not Before: Jun 27 12:09:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=58c3e0ff68f83432965712f3539fa2251f77dd99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5d:10:58:a9:e7:58:50:8d:9e:39:b5:d6:8e:
4e:4c:db:94:eb:83:91:1b:fd:89:03:93:1c:bf:9e:
30:1d:5e:2a:41:0f:5e:cd:8b:51:ad:97:02:86:50:
18:a5:c2:bc:2b:de:c6:c4:33:ab:16:c5:7f:06:e2:
5c:21:8b:f9:93:af:44:49:3e:d4:98:cb:65:17:20:
aa:3a:e5:09:2f:04:c5:7d:fd:34:70:da:e9:ca:22:
e9:b2:90:d4:96:bf:b2:02:d5:d1:12:41:2a:f7:74:
8b:ea:48:13:d0:ef:bd:1a:0e:91:4f:3a:01:8d:c6:
1c:13:a6:3d:b4:8a:22:89:e5:60:2a:97:57:c9:f6:
c0:2b:e8:19:06:ac:41:24:d7:2d:e7:eb:a7:49:4a:
92:d3:e9:0b:3d:ce:7b:77:4f:88:96:33:83:fb:96:
1b:b1:9a:60:08:74:93:bb:01:1b:c8:b2:7c:b7:37:
9b:8d:dc:30:e6:71:52:64:7b:b0:69:4a:ca:d8:79:
6d:ac:65:72:68:6d:f2:9a:6c:19:d5:92:76:2d:19:
3a:a6:f6:27:ea:7f:1c:ce:07:91:cc:4d:6e:40:c6:
65:09:4f:56:d8:48:cd:62:45:37:10:06:d7:66:0f:
c7:df:c0:16:6a:56:e0:45:62:57:85:76:48:d4:58:
73:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:C3:E0:FF:68:F8:34:32:96:57:12:F3:53:9F:A2:25:1F:77:DD:99
X509v3 Authority Key Identifier:
keyid:25:A5:53:79:42:23:E6:B4:C6:32:77:9B:51:37:1D:C4:E7:D7:07:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JaVTeUIj5rTGMnebUTcdxOfXBwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/WMPg_2j4NDKWVxLzU5-iJR933Zk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/JaVTeUIj5rTGMnebUTcdxOfXBwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.102.248.0/24
89.33.207.0/24
89.36.24.0/21
89.41.60.0/23
89.47.247.0/24
176.223.192.0-176.223.247.255
Signature Algorithm: sha256WithRSAEncryption
22:7f:ff:c2:32:b3:58:83:eb:7d:04:a6:79:1d:17:2f:56:58:
04:58:f8:4d:30:a6:df:b4:6b:e3:52:ab:83:d5:c0:11:f0:21:
b5:8f:a3:f9:73:ce:aa:3d:11:8f:7a:ec:69:b4:80:7c:e1:30:
37:e9:b5:58:c3:ba:b7:d3:81:40:8a:01:44:41:96:45:e7:72:
53:f9:63:5c:67:ab:67:0f:2b:5c:62:bd:5b:82:a4:9e:82:e5:
5e:45:6a:41:0c:49:29:6d:c1:d8:a4:5f:f6:2c:a4:7b:ec:ac:
5d:ef:ce:0c:85:cb:85:a7:97:f1:38:36:ca:22:ad:53:ba:52:
97:42:8b:ea:19:5f:35:64:0c:ec:0e:de:98:a9:1b:7b:bc:df:
ff:4e:09:c8:95:7c:85:64:e1:1a:62:04:23:16:87:66:c3:8b:
77:88:be:c4:22:f3:f6:ca:f8:92:d0:61:4d:e6:ef:1d:06:7c:
f5:ef:cb:28:af:19:72:ba:82:0b:f4:3d:ad:b4:d6:a4:8d:a6:
ff:16:aa:72:4f:1d:5b:88:0a:57:54:54:a3:a5:18:fd:3f:9b:
ba:6b:3e:b0:7d:38:b2:bd:cd:9f:82:0c:45:e1:c1:3c:79:81:
0b:ad:1b:08:77:39:26:2a:ee:48:2c:d4:78:14:74:22:45:ff:
95:3d:78:f0
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgIEBPp/CTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
NWE1NTM3OTQyMjNlNmI0YzYzMjc3OWI1MTM3MWRjNGU3ZDcwNzA1MB4XDTIyMDYy
NzEyMDkwMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNThjM2UwZmY2OGY4
MzQzMjk2NTcxMmYzNTM5ZmEyMjUxZjc3ZGQ5OTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMxdEFip51hQjZ45tdaOTkzblOuDkRv9iQOTHL+eMB1eKkEP
Xs2LUa2XAoZQGKXCvCvexsQzqxbFfwbiXCGL+ZOvREk+1JjLZRcgqjrlCS8ExX39
NHDa6coi6bKQ1Ja/sgLV0RJBKvd0i+pIE9DvvRoOkU86AY3GHBOmPbSKIonlYCqX
V8n2wCvoGQasQSTXLefrp0lKktPpCz3Oe3dPiJYzg/uWG7GaYAh0k7sBG8iyfLc3
m43cMOZxUmR7sGlKyth5baxlcmht8ppsGdWSdi0ZOqb2J+p/HM4HkcxNbkDGZQlP
VthIzWJFNxAG12YPx9/AFmpW4EViV4V2SNRYc30CAwEAAaOCAi8wggIrMB0GA1Ud
DgQWBBRYw+D/aPg0MpZXEvNTn6IlH3fdmTAfBgNVHSMEGDAWgBQlpVN5QiPmtMYy
d5tRNx3E59cHBTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0phVlRlVUlqNXJUR01uZWJVVGNkeE9mWEJ3VS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTMvMWY5NmNjLTVlYTYtNDllMy04ZjVmLTMwZTkyOWVkMTA2My8x
L1dNUGdfMmo0TkRLV1Z4THpVNS1pSlI5MzNaay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTMv
MWY5NmNjLTVlYTYtNDllMy04ZjVmLTMwZTkyOWVkMTA2My8xL0phVlRlVUlqNXJU
R01uZWJVVGNkeE9mWEJ3VS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBF
BggrBgEFBQcBBwEB/wQ2MDQwMgQCAAEwLAMEAC5m+AMEAFkhzwMEA1kkGAMEAVkp
PAMEAFkv9zAMAwQGsN/AAwQDsN/wMA0GCSqGSIb3DQEBCwUAA4IBAQAif//CMrNY
g+t9BKZ5HRcvVlgEWPhNMKbftGvjUquD1cAR8CG1j6P5c86qPRGPeuxptIB84TA3
6bVYw7q304FAigFEQZZF53JT+WNcZ6tnDytcYr1bgqSeguVeRWpBDEkpbcHYpF/2
LKR77Kxd784MhcuFp5fxODbKIq1TulKXQovqGV81ZAzsDt6YqRt7vN//TgnIlXyF
ZOEaYgQjFodmw4t3iL7EIvP2yviS0GFN5u8dBnz178sorxlyuoIL9D2ttNakjab/
FqpyTx1biApXVFSjpRj9P5u6az6wfTiyvc2fggxF4cE8eYELrRsIdzkmKu5ILNR4
FHQiRf+VPXjw
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:53 2024 by rpki-client on console-fra.rpki-client.org