Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/wFX-xK5viLvQup4ApuCNwLgGxLw.roa
File: wFX-xK5viLvQup4ApuCNwLgGxLw.roa (raw, json)
Hash identifier: /EGmbRRv54UBhnqTIxlpMg+iNOxUl1lbtbTg6i0NigI=
Subject key identifier: C0:55:FE:C4:AE:6F:88:BB:D0:BA:9E:00:A6:E0:8D:C0:B8:06:C4:BC
Certificate issuer: /CN=37518d180923a7f3c00653ec12bc702b95aab907
Certificate serial: 34F99564
Authority key identifier: 37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/wFX-xK5viLvQup4ApuCNwLgGxLw.roa
Signing time: Tue 26 Apr 2022 09:16:10 +0000
ROA not before: Tue 26 Apr 2022 09:16:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24614
IP address blocks: 193.140.252.0/23 maxlen: 23
194.27.188.0/22 maxlen: 22
194.27.196.0/22 maxlen: 22
193.255.252.0/22 maxlen: 22
194.27.238.0/23 maxlen: 23
194.27.240.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 888771940 (0x34f99564)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37518d180923a7f3c00653ec12bc702b95aab907
Validity
Not Before: Apr 26 09:16:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c055fec4ae6f88bbd0ba9e00a6e08dc0b806c4bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c7:13:08:c7:c4:be:ad:f6:b8:46:0d:7c:07:
19:ea:ef:e9:70:fe:49:25:1c:a2:8f:4c:91:0b:c8:
e9:e4:ed:8e:91:c5:72:c6:92:10:b4:36:a0:39:2f:
c4:55:6b:6b:5b:a9:ca:60:83:78:4d:0e:0f:f2:38:
c1:43:72:4e:b5:7b:fb:f6:a9:45:62:c9:69:c6:f1:
c4:38:b6:a7:d7:24:ff:a6:5c:cd:f6:84:07:26:05:
85:49:dd:2f:34:8f:84:41:3c:cf:17:4d:90:97:71:
46:ff:ba:a1:53:96:60:e4:2f:26:e4:4e:fc:78:0a:
5b:29:3b:00:08:ae:77:db:66:f6:6e:9a:e9:9f:4d:
a9:fe:d8:7f:11:be:35:76:00:c3:da:ce:69:84:b9:
79:ab:c2:42:45:a6:a2:cc:1c:84:96:18:57:ff:30:
80:8e:83:4f:f2:c9:7f:72:33:08:70:98:33:d2:da:
dc:46:e7:06:d1:bc:e5:b0:4f:23:57:f5:02:03:c7:
dd:aa:7d:50:c6:97:52:ad:dc:75:e7:2f:e8:e9:53:
34:f7:21:11:6c:b4:d3:3d:d5:72:c2:37:7c:96:e1:
4b:f4:7e:ec:36:c4:08:b8:78:07:a9:d2:fa:96:36:
e1:53:9a:58:ac:ca:d4:cb:74:cb:03:ed:ef:bf:77:
03:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:55:FE:C4:AE:6F:88:BB:D0:BA:9E:00:A6:E0:8D:C0:B8:06:C4:BC
X509v3 Authority Key Identifier:
keyid:37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/wFX-xK5viLvQup4ApuCNwLgGxLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.140.252.0/23
193.255.252.0/22
194.27.188.0/22
194.27.196.0/22
194.27.238.0-194.27.255.255
Signature Algorithm: sha256WithRSAEncryption
93:2a:28:61:86:76:aa:e4:0f:26:70:d7:a3:68:6d:a8:06:6f:
91:4d:08:65:3b:3c:34:f0:cc:8b:be:a4:86:39:36:a4:33:cc:
7c:b0:fb:60:26:a5:ce:01:d8:3e:d3:a8:66:bd:b7:10:a2:42:
6c:86:a5:58:f6:08:e5:ca:c8:23:fb:7d:7a:f5:b8:ad:bb:34:
0a:11:38:65:47:a8:29:46:fb:42:d6:1b:f8:11:62:4a:d3:ed:
d5:2a:83:f3:37:41:4e:99:cc:83:37:f7:40:ec:68:f8:ae:d9:
47:61:91:0a:9a:64:a2:0b:29:6c:b0:c3:dd:00:96:e8:d7:2d:
61:77:52:8d:99:48:6a:43:e2:bb:92:79:76:ff:8e:30:57:f2:
5d:01:a3:1f:c6:9d:5e:c6:1c:ca:27:8a:28:a3:f1:5a:a7:e5:
c4:db:fc:11:09:3f:24:0a:f8:f4:51:d0:cc:f8:0c:de:1c:39:
de:c3:c7:f5:83:ee:09:b1:89:67:ef:66:18:c8:ed:d7:99:70:
1c:52:07:2b:32:1a:98:3f:8b:51:df:e6:09:24:98:e6:70:29:
a5:3b:64:96:a3:6f:9b:45:d8:39:a2:a9:27:bd:7f:b9:b3:10:
23:a4:db:5c:e0:c6:ae:37:a2:b1:18:5a:d3:59:3a:3c:a6:a1:
06:19:75:32
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgIENPmVZDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
NzUxOGQxODA5MjNhN2YzYzAwNjUzZWMxMmJjNzAyYjk1YWFiOTA3MB4XDTIyMDQy
NjA5MTYxMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzA1NWZlYzRhZTZm
ODhiYmQwYmE5ZTAwYTZlMDhkYzBiODA2YzRiYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANjHEwjHxL6t9rhGDXwHGerv6XD+SSUcoo9MkQvI6eTtjpHF
csaSELQ2oDkvxFVra1upymCDeE0OD/I4wUNyTrV7+/apRWLJacbxxDi2p9ck/6Zc
zfaEByYFhUndLzSPhEE8zxdNkJdxRv+6oVOWYOQvJuRO/HgKWyk7AAiud9tm9m6a
6Z9Nqf7YfxG+NXYAw9rOaYS5eavCQkWmoswchJYYV/8wgI6DT/LJf3IzCHCYM9La
3EbnBtG85bBPI1f1AgPH3ap9UMaXUq3cdecv6OlTNPchEWy00z3VcsI3fJbhS/R+
7DbECLh4B6nS+pY24VOaWKzK1Mt0ywPt7793Ax8CAwEAAaOCAigwggIkMB0GA1Ud
DgQWBBTAVf7Erm+Iu9C6ngCm4I3AuAbEvDAfBgNVHSMEGDAWgBQ3UY0YCSOn88AG
U+wSvHArlaq5BzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L04xR05HQWtqcF9QQUJsUHNFcnh3SzVXcXVRYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYmIvZjgwZWYzLTlmMGItNGJkMS04MDE4LTU5NjcxOTIwZmI2MC8x
L3dGWC14SzV2aUx2UXVwNEFwdUNOd0xnR3hMdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmIv
ZjgwZWYzLTlmMGItNGJkMS04MDE4LTU5NjcxOTIwZmI2MC8xL04xR05HQWtqcF9Q
QUJsUHNFcnh3SzVXcXVRYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA+
BggrBgEFBQcBBwEB/wQvMC0wKwQCAAEwJQMEAcGM/AMEAsH//AMEAsIbvAMEAsIb
xDALAwQBwhvuAwMCwhgwDQYJKoZIhvcNAQELBQADggEBAJMqKGGGdqrkDyZw16No
bagGb5FNCGU7PDTwzIu+pIY5NqQzzHyw+2Ampc4B2D7TqGa9txCiQmyGpVj2COXK
yCP7fXr1uK27NAoROGVHqClG+0LWG/gRYkrT7dUqg/M3QU6ZzIM390DsaPiu2Udh
kQqaZKILKWyww90AlujXLWF3Uo2ZSGpD4ruSeXb/jjBX8l0Box/GnV7GHMoniiij
8Vqn5cTb/BEJPyQK+PRR0Mz4DN4cOd7Dx/WD7gmxiWfvZhjI7deZcBxSBysyGpg/
i1Hf5gkkmOZwKaU7ZJajb5tF2DmiqSe9f7mzECOk21zgxq43orEYWtNZOjymoQYZ
dTI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:01 2024 by rpki-client on console-ams.rpki-client.org