Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/wGUu4AIjN_jD0qW-x3WudXnV078.roa
File: wGUu4AIjN_jD0qW-x3WudXnV078.roa (raw, json)
Hash identifier: TorpVtoUHAuHgFrkaZ/vXCxhhiwaZS/cw7yC3Y8RIlk=
Subject key identifier: C0:65:2E:E0:02:23:37:F8:C3:D2:A5:BE:C7:75:AE:75:79:D5:D3:BF
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 0189490292B5CD5F5D7B95BA1D3D15CAA8DF
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/wGUu4AIjN_jD0qW-x3WudXnV078.roa
Signing time: Wed 12 Jul 2023 07:30:52 +0000
ROA not before: Wed 12 Jul 2023 07:30:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13259
IP address blocks: 149.126.240.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:49:02:92:b5:cd:5f:5d:7b:95:ba:1d:3d:15:ca:a8:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jul 12 07:30:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c0652ee0022337f8c3d2a5bec775ae7579d5d3bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:44:76:02:16:43:bd:99:c4:4a:43:1c:c0:d2:
98:0d:13:bb:fd:c4:75:dd:02:01:e0:e1:3c:a4:f7:
a1:70:99:f6:ce:77:da:f8:30:1d:9c:ab:58:cb:aa:
c0:04:53:74:b3:dd:b9:39:14:ac:67:08:e7:04:65:
cb:2e:50:81:19:d8:69:cb:fb:32:73:32:7f:a7:30:
b9:d1:fb:c4:4c:c6:72:35:86:56:b9:f0:bc:2f:ea:
52:c0:e8:26:eb:bb:43:29:a9:ce:d3:49:0b:cc:e9:
97:fc:a2:3e:71:77:46:97:00:fa:3c:54:94:90:74:
f9:9e:43:ae:98:6a:a9:90:3e:cb:3e:9f:7d:34:9e:
a5:f7:91:1a:20:ee:b9:d5:96:72:ee:ff:10:09:49:
23:99:91:28:8f:3e:88:5b:0c:8a:6f:7c:fe:f4:0a:
95:2a:a4:cd:d2:3c:84:94:a1:6c:76:03:2e:b3:a8:
b9:82:40:44:33:ec:1c:be:03:9a:b3:a5:36:67:b8:
f8:40:83:17:80:6f:53:17:10:83:c1:71:bc:ed:31:
52:6b:27:83:d5:b8:7e:53:ef:d7:9a:a5:9c:42:ac:
b8:18:07:6f:64:74:ca:62:a2:2a:b3:12:2e:ee:87:
e6:bc:0d:c7:ac:9d:96:28:4c:1b:ca:c5:ba:75:67:
64:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:65:2E:E0:02:23:37:F8:C3:D2:A5:BE:C7:75:AE:75:79:D5:D3:BF
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/wGUu4AIjN_jD0qW-x3WudXnV078.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.126.240.0/20
Signature Algorithm: sha256WithRSAEncryption
6f:1c:6d:e6:6f:20:27:f2:68:61:7b:74:62:b9:54:95:7c:68:
d5:07:17:17:29:f3:15:50:76:e2:1a:6b:c7:7c:de:a0:ab:06:
5d:59:ae:4d:05:48:79:58:35:a5:6c:72:8d:37:36:9d:eb:55:
24:2f:a1:02:44:00:58:e9:45:38:b5:a9:4d:48:63:fb:1d:1e:
85:d1:0d:22:15:31:8e:4a:2e:13:5d:68:67:6c:92:1a:25:b3:
c7:ee:bd:b9:b4:eb:7e:93:e8:65:8c:40:08:be:d4:eb:4d:48:
e0:52:9c:90:c5:9c:6c:96:d2:2f:e4:46:f6:13:d6:32:38:47:
7e:14:e9:b9:91:d5:85:0e:07:cf:44:69:99:06:78:ee:cf:a2:
25:91:bf:48:28:74:82:c2:80:82:ba:02:2c:b0:b8:18:f5:b3:
3c:64:02:23:05:c8:5c:6a:23:68:d8:6c:52:3e:84:84:9c:bf:
3c:23:77:1d:fe:08:c4:51:ea:d8:63:e8:30:24:5c:8e:34:9b:
29:ce:ff:69:28:cd:e0:d6:1f:2d:14:ae:b0:51:40:be:29:f0:
6d:27:2e:7f:89:be:99:2d:31:1a:89:b4:39:70:d4:ef:b0:32:
e0:29:a3:5e:5b:fc:66:76:50:be:d0:c3:ee:9a:0b:bf:d9:67:
50:2a:94:c6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYlJApK1zV9de5W6HT0VyqjfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ODhmMTk3Zjk3ZTg5MDA3NTU1NDRlODEwY2RkZWY5ZDkw
ZmJjNDEwHhcNMjMwNzEyMDczMDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMDY1MmVlMDAyMjMzN2Y4YzNkMmE1YmVjNzc1YWU3NTc5ZDVkM2JmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkR2AhZDvZnESkMcwNKYDRO7/cR1
3QIB4OE8pPehcJn2znfa+DAdnKtYy6rABFN0s925ORSsZwjnBGXLLlCBGdhpy/sy
czJ/pzC50fvETMZyNYZWufC8L+pSwOgm67tDKanO00kLzOmX/KI+cXdGlwD6PFSU
kHT5nkOumGqpkD7LPp99NJ6l95EaIO651ZZy7v8QCUkjmZEojz6IWwyKb3z+9AqV
KqTN0jyElKFsdgMus6i5gkBEM+wcvgOas6U2Z7j4QIMXgG9TFxCDwXG87TFSayeD
1bh+U+/XmqWcQqy4GAdvZHTKYqIqsxIu7ofmvA3HrJ2WKEwbysW6dWdkXwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMBlLuACIzf4w9Klvsd1rnV51dO/MB8GA1UdIwQY
MBaAFFWI8Zf5fokAdVVE6BDN3vnZD7xBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2Et
N2NmZWY0Mjc2YTBmLzEvd0dVdTRBSWpOX2pEMHFXLXgzV3VkWG5WMDc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2EtN2NmZWY0Mjc2YTBm
LzEvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElX7wMA0G
CSqGSIb3DQEBCwUAA4IBAQBvHG3mbyAn8mhhe3RiuVSVfGjVBxcXKfMVUHbiGmvH
fN6gqwZdWa5NBUh5WDWlbHKNNzad61UkL6ECRABY6UU4talNSGP7HR6F0Q0iFTGO
Si4TXWhnbJIaJbPH7r25tOt+k+hljEAIvtTrTUjgUpyQxZxsltIv5Eb2E9YyOEd+
FOm5kdWFDgfPRGmZBnjuz6Ilkb9IKHSCwoCCugIssLgY9bM8ZAIjBchcaiNo2GxS
PoSEnL88I3cd/gjEUerYY+gwJFyONJspzv9pKM3g1h8tFK6wUUC+KfBtJy5/ib6Z
LTEaibQ5cNTvsDLgKaNeW/xmdlC+0MPumgu/2WdQKpTG
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:03 2025 by rpki-client