Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/wol70FXK0EoUOLhbolPLvFudOSc.roa
File: wol70FXK0EoUOLhbolPLvFudOSc.roa (raw, json)
Hash identifier: 9Eia6uk5H5B4pm+GWu5Z3vasiszQQKXWTMmVf4Thh9I=
Subject key identifier: C2:89:7B:D0:55:CA:D0:4A:14:38:B8:5B:A2:53:CB:BC:5B:9D:39:27
Certificate issuer: /CN=935f53f5e407e55a2330d9d523a804c0722ca565
Certificate serial: 361CD7AE
Authority key identifier: 93:5F:53:F5:E4:07:E5:5A:23:30:D9:D5:23:A8:04:C0:72:2C:A5:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k19T9eQH5VojMNnVI6gEwHIspWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/wol70FXK0EoUOLhbolPLvFudOSc.roa
Signing time: Sat 01 Jan 2022 15:55:54 +0000
ROA not before: Sat 01 Jan 2022 15:55:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12757
IP address blocks: 5.44.191.0/24 maxlen: 24
5.44.190.0/24 maxlen: 24
188.227.248.0/21 maxlen: 21
2a03:5880::/32 maxlen: 32
2a03:5880:104::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 907859886 (0x361cd7ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=935f53f5e407e55a2330d9d523a804c0722ca565
Validity
Not Before: Jan 1 15:55:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c2897bd055cad04a1438b85ba253cbbc5b9d3927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d3:a4:2f:04:a0:d3:3c:c8:7e:de:a6:80:31:
03:83:63:02:9d:26:10:3c:03:e8:61:32:7a:c0:a0:
ef:63:57:f3:0f:d4:d8:ad:a1:60:f3:eb:06:94:2b:
0e:54:64:00:ec:2e:76:97:d6:53:9a:25:ce:17:a9:
3f:0b:f0:53:15:55:26:98:6b:44:c1:40:f0:cf:a0:
2d:52:1a:60:b6:5e:3b:c2:fe:ed:4a:59:cc:bc:74:
31:26:27:7b:6f:31:d8:3d:32:cd:1f:23:d1:f4:03:
be:38:66:ea:4b:4d:02:3a:11:bd:5a:69:d8:0f:05:
87:82:65:2e:e4:19:07:83:ff:38:ea:00:8c:bd:f5:
0f:4f:cb:6a:6b:7e:1c:e5:fc:70:46:5b:f2:1f:b3:
af:ef:62:e9:8c:12:58:6d:2b:e2:dd:07:e5:1b:fd:
ea:83:e4:91:7c:90:c9:51:ed:8b:f0:f3:19:cf:f0:
6c:32:c5:4a:42:d8:d1:3f:98:e7:77:9d:4b:9f:76:
9e:93:d2:54:1c:d7:d5:b2:07:e8:7f:6f:ef:8c:58:
1c:f2:82:fa:3f:c1:a6:34:cd:48:92:57:92:f6:0a:
f4:de:11:e8:b9:e0:e8:6a:78:04:82:fd:a5:69:5e:
15:c8:c0:a1:6b:e6:19:3b:a9:8d:0b:c6:51:59:a0:
9f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:89:7B:D0:55:CA:D0:4A:14:38:B8:5B:A2:53:CB:BC:5B:9D:39:27
X509v3 Authority Key Identifier:
keyid:93:5F:53:F5:E4:07:E5:5A:23:30:D9:D5:23:A8:04:C0:72:2C:A5:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k19T9eQH5VojMNnVI6gEwHIspWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/wol70FXK0EoUOLhbolPLvFudOSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.44.190.0/23
188.227.248.0/21
IPv6:
2a03:5880::/32
Signature Algorithm: sha256WithRSAEncryption
0e:db:b9:09:54:1f:58:7b:7a:99:0f:1e:a8:07:14:13:cf:73:
f7:40:56:c3:06:d5:a6:13:d7:ab:c8:27:9c:72:db:0f:ba:ad:
c2:ae:29:44:0a:af:5e:66:06:b3:06:8b:4a:8c:27:53:0c:13:
4c:2f:65:19:47:50:f7:9a:d1:08:50:68:b5:d2:30:16:1e:e3:
4c:db:63:cd:c0:1a:71:7e:82:d2:d5:62:73:a0:22:97:ae:a4:
14:fe:d7:95:64:28:a7:88:b4:57:cb:46:4e:00:db:6f:c4:20:
0c:35:ea:29:26:5d:ac:a4:31:37:0b:d9:f2:25:ee:9f:ba:31:
8a:5f:e2:35:53:6b:de:a4:5d:98:53:1d:98:da:bb:04:2a:c8:
66:c5:d3:80:15:23:2a:6b:a9:fd:77:07:c8:64:f4:12:f2:b5:
e1:36:7c:ba:a1:1c:11:0f:ca:5e:52:4d:df:ea:f1:6e:36:ed:
55:ae:87:9d:0c:1a:4a:98:ad:ac:5e:35:f5:4c:a9:33:45:aa:
cf:fb:d0:1f:2c:4e:9c:d8:fb:8e:a0:95:b4:04:3e:14:40:67:
ed:82:9e:0e:6d:62:b0:7a:90:ca:24:2c:6d:b0:a8:6d:15:46:
32:06:7f:1e:11:58:ac:62:e0:1d:30:49:e5:18:4c:dd:8d:3e:
54:d4:82:16
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIENhzXrjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
MzVmNTNmNWU0MDdlNTVhMjMzMGQ5ZDUyM2E4MDRjMDcyMmNhNTY1MB4XDTIyMDEw
MTE1NTU1NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzI4OTdiZDA1NWNh
ZDA0YTE0MzhiODViYTI1M2NiYmM1YjlkMzkyNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAN/TpC8EoNM8yH7epoAxA4NjAp0mEDwD6GEyesCg72NX8w/U
2K2hYPPrBpQrDlRkAOwudpfWU5olzhepPwvwUxVVJphrRMFA8M+gLVIaYLZeO8L+
7UpZzLx0MSYne28x2D0yzR8j0fQDvjhm6ktNAjoRvVpp2A8Fh4JlLuQZB4P/OOoA
jL31D0/Lamt+HOX8cEZb8h+zr+9i6YwSWG0r4t0H5Rv96oPkkXyQyVHti/DzGc/w
bDLFSkLY0T+Y53edS592npPSVBzX1bIH6H9v74xYHPKC+j/BpjTNSJJXkvYK9N4R
6Lng6Gp4BIL9pWleFcjAoWvmGTupjQvGUVmgn/sCAwEAAaOCAh4wggIaMB0GA1Ud
DgQWBBTCiXvQVcrQShQ4uFuiU8u8W505JzAfBgNVHSMEGDAWgBSTX1P15AflWiMw
2dUjqATAciylZTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2sxOVQ5ZVFINVZvak1OblZJNmdFd0hJc3BXVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOGIvOGI1NTRjLTBjZWYtNDFiMy1iYTNiLTJkNWQ2ODg0MTczZi8x
L3dvbDcwRlhLMEVvVU9MaGJvbFBMdkZ1ZE9TYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGIv
OGI1NTRjLTBjZWYtNDFiMy1iYTNiLTJkNWQ2ODg0MTczZi8xL2sxOVQ5ZVFINVZv
ak1OblZJNmdFd0hJc3BXVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAQUsvgMEA7zj+DANBAIAAjAHAwUA
KgNYgDANBgkqhkiG9w0BAQsFAAOCAQEADtu5CVQfWHt6mQ8eqAcUE89z90BWwwbV
phPXq8gnnHLbD7qtwq4pRAqvXmYGswaLSownUwwTTC9lGUdQ95rRCFBotdIwFh7j
TNtjzcAacX6C0tVic6Ail66kFP7XlWQop4i0V8tGTgDbb8QgDDXqKSZdrKQxNwvZ
8iXun7oxil/iNVNr3qRdmFMdmNq7BCrIZsXTgBUjKmup/XcHyGT0EvK14TZ8uqEc
EQ/KXlJN3+rxbjbtVa6HnQwaSpitrF419UypM0Wqz/vQHyxOnNj7jqCVtAQ+FEBn
7YKeDm1isHqQyiQsbbCobRVGMgZ/HhFYrGLgHTBJ5RhM3Y0+VNSCFg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:28 2024 by rpki-client on console-fra.rpki-client.org