Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/1-wj6wzgETpfLvEnrndAucuwDYK4.roa
File: 1-wj6wzgETpfLvEnrndAucuwDYK4.roa (raw, json)
Hash identifier: apcXRf+qFhgcZKuEhafDlroJYX6MlxfZkzFfEV3RSes=
Subject key identifier: FB:08:FA:C3:38:04:4E:97:CB:BC:49:EB:9D:D0:2E:72:EC:03:60:AE
Certificate issuer: /CN=c2d2a234e224bf87996f2f0df559ead882f9e651
Certificate serial: 018475779994D63E29EE4E20D20FCD1EB1CE
Authority key identifier: C2:D2:A2:34:E2:24:BF:87:99:6F:2F:0D:F5:59:EA:D8:82:F9:E6:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtKiNOIkv4eZby8N9Vnq2IL55lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/1-wj6wzgETpfLvEnrndAucuwDYK4.roa
Signing time: Mon 14 Nov 2022 09:28:03 +0000
ROA not before: Mon 14 Nov 2022 09:28:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50926
IP address blocks: 185.70.92.0/22 maxlen: 22
188.164.192.0/21 maxlen: 21
188.164.192.0/24 maxlen: 24
185.23.68.0/22 maxlen: 22
188.164.197.0/24 maxlen: 24
188.164.199.0/24 maxlen: 24
94.127.186.0/24 maxlen: 24
188.164.198.0/24 maxlen: 24
94.127.185.0/24 maxlen: 24
94.127.184.0/24 maxlen: 24
188.164.196.0/24 maxlen: 24
188.164.195.0/24 maxlen: 24
188.164.194.0/24 maxlen: 24
188.164.193.0/24 maxlen: 24
94.127.191.0/24 maxlen: 24
94.127.190.0/24 maxlen: 24
94.127.188.0/24 maxlen: 24
94.127.187.0/24 maxlen: 24
185.129.248.0/22 maxlen: 22
149.62.172.0/22 maxlen: 22
149.62.168.0/21 maxlen: 21
149.62.168.0/22 maxlen: 22
195.5.116.0/23 maxlen: 23
91.200.140.0/22 maxlen: 22
188.95.112.0/21 maxlen: 21
185.176.9.0/24 maxlen: 24
185.176.8.0/24 maxlen: 24
185.176.11.0/24 maxlen: 24
185.176.10.0/24 maxlen: 24
84.246.213.0/24 maxlen: 24
84.246.212.0/24 maxlen: 24
84.246.211.0/24 maxlen: 24
84.246.210.0/24 maxlen: 24
84.246.209.0/24 maxlen: 24
84.246.208.0/21 maxlen: 21
84.246.208.0/24 maxlen: 24
109.68.84.0/24 maxlen: 24
109.68.82.0/24 maxlen: 24
84.246.215.0/24 maxlen: 24
109.68.80.0/24 maxlen: 24
109.68.80.0/21 maxlen: 21
84.246.214.0/24 maxlen: 24
91.213.46.0/24 maxlen: 24
31.24.152.0/21 maxlen: 21
31.24.152.0/24 maxlen: 24
31.24.159.0/24 maxlen: 24
31.24.158.0/24 maxlen: 24
31.24.157.0/24 maxlen: 24
31.24.156.0/24 maxlen: 24
31.24.155.0/24 maxlen: 24
31.24.154.0/24 maxlen: 24
91.142.208.0/20 maxlen: 20
185.222.156.0/22 maxlen: 22
5.175.42.0/24 maxlen: 24
5.175.41.0/24 maxlen: 24
5.175.40.0/24 maxlen: 24
5.175.40.0/21 maxlen: 21
5.175.44.0/24 maxlen: 24
5.175.43.0/24 maxlen: 24
5.175.47.0/24 maxlen: 24
5.175.46.0/24 maxlen: 24
31.24.43.0/24 maxlen: 24
31.24.40.0/24 maxlen: 24
31.24.40.0/21 maxlen: 21
31.24.46.0/24 maxlen: 24
31.24.45.0/24 maxlen: 24
2a00:5ac0:100::/40 maxlen: 40
2a00:5ac0::/44 maxlen: 44
2a01:4b80::/32 maxlen: 32
2a0a:680::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:75:77:99:94:d6:3e:29:ee:4e:20:d2:0f:cd:1e:b1:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d2a234e224bf87996f2f0df559ead882f9e651
Validity
Not Before: Nov 14 09:28:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fb08fac338044e97cbbc49eb9dd02e72ec0360ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:27:41:c7:3a:f4:10:28:a4:17:e9:24:b3:e9:
6d:0d:c4:b3:40:f9:bf:e0:44:a9:9b:6a:8e:6c:df:
f1:b5:6c:22:2a:3d:d6:dc:15:b8:21:6c:7a:c6:bb:
d7:c7:78:94:b5:94:e6:a9:af:c2:0a:05:c0:c0:9f:
ab:45:91:6b:1b:1f:44:a6:60:78:b6:9f:32:c0:bb:
94:11:69:22:25:fb:18:73:3b:ce:e9:82:2f:c6:66:
a0:da:df:26:72:0a:9b:fe:94:72:21:c8:4c:3c:4b:
e7:73:3d:38:a9:e4:ce:0f:53:d8:ae:7c:af:24:74:
6e:38:f6:4c:72:2f:d5:13:d4:0f:ed:cd:36:33:67:
b3:d4:40:9f:74:f2:fb:1d:77:75:75:e7:ee:87:26:
bc:f7:f6:3c:68:c7:5a:68:55:a5:01:0d:fa:c8:f4:
f1:d0:d9:5f:7f:56:28:b5:57:b3:a0:86:b1:4e:59:
06:82:b4:4f:69:a2:82:92:cd:36:21:21:f9:18:cf:
4e:ef:ee:f3:18:77:f0:e9:c9:17:88:d9:a2:d3:81:
03:7a:27:b6:43:f6:3a:2f:50:e8:10:45:20:b6:13:
3c:97:06:f3:5d:af:a5:57:28:5a:52:e2:56:c2:18:
28:af:da:2b:1f:91:b9:ae:ed:81:47:04:3b:e0:7b:
39:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:08:FA:C3:38:04:4E:97:CB:BC:49:EB:9D:D0:2E:72:EC:03:60:AE
X509v3 Authority Key Identifier:
keyid:C2:D2:A2:34:E2:24:BF:87:99:6F:2F:0D:F5:59:EA:D8:82:F9:E6:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtKiNOIkv4eZby8N9Vnq2IL55lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/1-wj6wzgETpfLvEnrndAucuwDYK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.40.0/21
31.24.40.0/21
31.24.152.0/21
84.246.208.0/21
91.142.208.0/20
91.200.140.0/22
91.213.46.0/24
94.127.184.0-94.127.188.255
94.127.190.0/23
109.68.80.0/21
149.62.168.0/21
185.23.68.0/22
185.70.92.0/22
185.129.248.0/22
185.176.8.0/22
185.222.156.0/22
188.95.112.0/21
188.164.192.0/21
195.5.116.0/23
IPv6:
2a00:5ac0::/44
2a00:5ac0:100::/40
2a01:4b80::/32
2a0a:680::/29
Signature Algorithm: sha256WithRSAEncryption
59:ca:ae:30:00:bc:7d:c7:c3:6a:c6:49:fb:9e:a0:fe:e2:cf:
b2:a6:5f:0a:e0:a2:6e:5c:8e:40:9b:db:8d:87:a4:3e:72:90:
29:00:52:7c:93:ec:a4:59:4a:97:85:ba:00:20:1f:27:77:56:
2e:c0:3a:80:a3:7d:41:57:b0:45:db:73:31:0a:b9:f4:3b:07:
9e:fe:65:61:2c:21:1a:5c:fe:af:80:f2:6c:be:d7:07:2d:16:
53:8f:4c:4f:93:1b:74:e8:33:57:a4:89:29:dc:ad:aa:30:a7:
05:2c:05:45:b7:84:f7:20:41:25:e0:de:fc:1a:33:fd:aa:76:
30:7b:5a:d9:7f:ce:3e:49:0d:21:03:0b:20:b6:c8:e4:04:e9:
ff:a3:54:6f:a1:fd:3a:3d:eb:ba:23:28:29:43:cc:09:50:c1:
f0:d3:6e:db:4d:27:44:47:d5:f8:ea:72:33:57:69:db:e3:d0:
c5:f4:05:5a:d8:a0:02:f0:fd:da:f8:64:56:01:71:ee:3e:84:
0e:59:04:41:a9:eb:b5:7c:53:a5:f5:16:73:55:4c:4f:6a:95:
73:b2:f2:c4:25:54:96:ae:70:71:6c:22:67:46:60:ee:9c:66:
11:97:d1:e6:ed:e8:aa:e5:51:74:49:47:54:96:94:0f:81:85:
7d:1e:92:b8
-----BEGIN CERTIFICATE-----
MIIFnTCCBIWgAwIBAgISAYR1d5mU1j4p7k4g0g/NHrHOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyZDJhMjM0ZTIyNGJmODc5OTZmMmYwZGY1NTllYWQ4ODJm
OWU2NTEwHhcNMjIxMTE0MDkyODAzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYjA4ZmFjMzM4MDQ0ZTk3Y2JiYzQ5ZWI5ZGQwMmU3MmVjMDM2MGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSdBxzr0ECikF+kks+ltDcSzQPm/
4ESpm2qObN/xtWwiKj3W3BW4IWx6xrvXx3iUtZTmqa/CCgXAwJ+rRZFrGx9EpmB4
tp8ywLuUEWkiJfsYczvO6YIvxmag2t8mcgqb/pRyIchMPEvncz04qeTOD1PYrnyv
JHRuOPZMci/VE9QP7c02M2ez1ECfdPL7HXd1defuhya89/Y8aMdaaFWlAQ36yPTx
0Nlff1YotVezoIaxTlkGgrRPaaKCks02ISH5GM9O7+7zGHfw6ckXiNmi04EDeie2
Q/Y6L1DoEEUgthM8lwbzXa+lVyhaUuJWwhgor9orH5G5ru2BRwQ74Hs5FwIDAQAB
o4ICqTCCAqUwHQYDVR0OBBYEFPsI+sM4BE6Xy7xJ653QLnLsA2CuMB8GA1UdIwQY
MBaAFMLSojTiJL+HmW8vDfVZ6tiC+eZRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3RLaU5PSWt2NGVaYnk4TjlWbnEySUw1NWxFLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9kMWVlNGItZTg4YS00ZTQxLWE2MTYt
NGIyNDhkYTZjOTZjLzEvMS13ajZ3emdFVHBmTHZFbnJuZEF1Y3V3RFlLNC5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvODEvZDFlZTRiLWU4OGEtNGU0MS1hNjE2LTRiMjQ4ZGE2Yzk2
Yy8xL3d0S2lOT0lrdjRlWmJ5OE45Vm5xMklMNTVsRS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjCBvQYIKwYBBQUHAQcBAf8Ega0wgaowgYAEAgABMHoDBAMF
rygDBAMfGCgDBAMfGJgDBANU9tADBARbjtADBAJbyIwDBABb1S4wDAMEA15/uAME
AF5/vAMEAV5/vgMEA21EUAMEA5U+qAMEArkXRAMEArlGXAMEArmB+AMEArmwCAME
ArnenAMEA7xfcAMEA7ykwAMEAcMFdDAlBAIAAjAfAwcEKgBawAAAAwYAKgBawAED
BQAqAUuAAwUDKgoGgDANBgkqhkiG9w0BAQsFAAOCAQEAWcquMAC8fcfDasZJ+56g
/uLPsqZfCuCiblyOQJvbjYekPnKQKQBSfJPspFlKl4W6ACAfJ3dWLsA6gKN9QVew
RdtzMQq59DsHnv5lYSwhGlz+r4DybL7XBy0WU49MT5MbdOgzV6SJKdytqjCnBSwF
RbeE9yBBJeDe/Boz/ap2MHta2X/OPkkNIQMLILbI5ATp/6NUb6H9Oj3ruiMoKUPM
CVDB8NNu200nREfV+OpyM1dp2+PQxfQFWtigAvD92vhkVgFx7j6EDlkEQanrtXxT
pfUWc1VMT2qVc7LyxCVUlq5wcWwiZ0Zg7pxmEZfR5u3oquVRdElHVJaUD4GFfR6S
uA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:45 2024 by rpki-client on console-ams.rpki-client.org