Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/wlLf6CrXqGyZPjr4bofGhgU46a0.roa
File: wlLf6CrXqGyZPjr4bofGhgU46a0.roa (raw, json)
Hash identifier: Sq4Kk8DZyNrMufMpD+RS3xhI57Cif8nukiCVyOBP8Q8=
Subject key identifier: C2:52:DF:E8:2A:D7:A8:6C:99:3E:3A:F8:6E:87:C6:86:05:38:E9:AD
Certificate issuer: /CN=5acb3089461e1f5f8984b7742c89bb68f1b88c12
Certificate serial: 01852AC141C2ED72760A86D14795AE25C832
Authority key identifier: 5A:CB:30:89:46:1E:1F:5F:89:84:B7:74:2C:89:BB:68:F1:B8:8C:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WsswiUYeH1-JhLd0LIm7aPG4jBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/wlLf6CrXqGyZPjr4bofGhgU46a0.roa
Signing time: Mon 19 Dec 2022 14:19:46 +0000
ROA not before: Mon 19 Dec 2022 14:19:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41585
IP address blocks: 194.9.124.0/23 maxlen: 23
194.9.126.0/24 maxlen: 24
91.195.50.0/23 maxlen: 23
91.194.254.0/23 maxlen: 23
91.136.128.0/17 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2a:c1:41:c2:ed:72:76:0a:86:d1:47:95:ae:25:c8:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5acb3089461e1f5f8984b7742c89bb68f1b88c12
Validity
Not Before: Dec 19 14:19:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c252dfe82ad7a86c993e3af86e87c6860538e9ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fc:2b:ac:45:cc:24:9d:5a:78:e2:b4:12:eb:
76:91:08:33:f4:04:80:5b:ce:26:6b:a8:bd:22:0a:
09:4a:3c:ea:54:a5:e9:4a:92:04:be:14:a8:98:63:
eb:82:83:72:a0:13:f1:ce:03:5b:f6:71:20:01:be:
1a:ef:9a:ef:d0:4d:bb:14:4a:c4:3d:eb:ad:45:18:
7e:13:ac:a1:80:c4:bc:7d:f0:a5:33:21:6a:4a:6d:
66:da:87:ec:df:38:04:dc:18:54:77:58:d3:30:64:
88:d3:c2:25:d2:47:55:9c:d6:58:84:44:64:c1:89:
c5:64:42:f9:a4:ea:f4:a8:b2:2d:e0:d1:f8:7a:bf:
0f:39:b5:18:ca:e9:31:ef:e5:ec:ad:fa:8a:55:1b:
be:fd:a0:7b:13:88:9c:6d:01:0f:36:01:a1:8c:19:
69:72:5d:f6:86:34:53:74:ee:3a:95:f0:39:d1:a5:
cc:76:3d:8d:aa:0b:d6:1b:73:9a:57:8f:de:16:93:
a8:12:59:43:08:09:bd:e7:7d:18:85:8f:25:3c:d6:
c9:3a:9f:81:88:8a:7c:88:89:8d:67:f1:f7:a3:ae:
49:c9:14:ac:cf:0a:29:32:6d:df:bc:f8:39:00:36:
ed:36:d2:ef:54:44:ac:c4:71:bb:7f:e6:54:ea:bb:
73:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:52:DF:E8:2A:D7:A8:6C:99:3E:3A:F8:6E:87:C6:86:05:38:E9:AD
X509v3 Authority Key Identifier:
keyid:5A:CB:30:89:46:1E:1F:5F:89:84:B7:74:2C:89:BB:68:F1:B8:8C:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WsswiUYeH1-JhLd0LIm7aPG4jBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/wlLf6CrXqGyZPjr4bofGhgU46a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.136.128.0/17
91.194.254.0/23
91.195.50.0/23
194.9.124.0-194.9.126.255
Signature Algorithm: sha256WithRSAEncryption
43:21:c6:87:3d:29:b1:dc:46:0f:13:0e:d8:6e:f7:47:11:76:
4f:b3:95:55:a7:10:1c:5c:27:03:3b:0c:d8:83:97:e3:08:e4:
3d:9d:c4:6e:5d:64:f5:c8:61:49:f5:94:21:67:f3:bd:4e:fa:
aa:37:62:ac:c7:31:1f:36:5d:f0:68:81:a6:2b:c6:d3:0b:a1:
c2:cd:25:6f:4d:4a:22:e3:ab:ca:32:ef:fd:4c:f2:0b:34:2f:
0c:f5:05:d8:93:c4:5e:0c:40:da:69:c2:af:4c:d1:3d:1d:0a:
6e:a2:9d:5a:6d:13:09:ec:d6:f9:8e:e7:1c:5d:20:26:f3:48:
08:14:14:77:ca:d6:2b:fa:0e:76:96:aa:7e:46:27:e8:61:69:
50:aa:8a:ed:23:1c:d4:93:5e:ef:c1:41:48:07:e3:a0:e2:7c:
05:b7:88:08:8e:01:2d:cf:15:5c:10:eb:c4:80:32:a8:52:67:
3d:e4:ab:bf:03:8a:ff:c0:f3:8c:74:59:1f:e8:b0:03:b9:1b:
07:e2:65:cf:69:9f:7f:d5:a9:6c:cc:86:00:aa:e6:78:6a:63:
80:3e:94:8f:7f:17:45:c4:02:33:90:6e:68:a3:18:1f:d6:77:
08:ec:22:9e:1e:a1:61:d5:a4:e8:14:c8:2e:cb:ba:3f:16:99:
ba:c3:9a:16
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAYUqwUHC7XJ2CobRR5WuJcgyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhY2IzMDg5NDYxZTFmNWY4OTg0Yjc3NDJjODliYjY4ZjFi
ODhjMTIwHhcNMjIxMjE5MTQxOTQ2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMjUyZGZlODJhZDdhODZjOTkzZTNhZjg2ZTg3YzY4NjA1MzhlOWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/wrrEXMJJ1aeOK0Eut2kQgz9ASA
W84ma6i9IgoJSjzqVKXpSpIEvhSomGPrgoNyoBPxzgNb9nEgAb4a75rv0E27FErE
PeutRRh+E6yhgMS8ffClMyFqSm1m2ofs3zgE3BhUd1jTMGSI08Il0kdVnNZYhERk
wYnFZEL5pOr0qLIt4NH4er8PObUYyukx7+XsrfqKVRu+/aB7E4icbQEPNgGhjBlp
cl32hjRTdO46lfA50aXMdj2NqgvWG3OaV4/eFpOoEllDCAm9530YhY8lPNbJOp+B
iIp8iImNZ/H3o65JyRSszwopMm3fvPg5ADbtNtLvVESsxHG7f+ZU6rtzaQIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFMJS3+gq16hsmT46+G6HxoYFOOmtMB8GA1UdIwQY
MBaAFFrLMIlGHh9fiYS3dCyJu2jxuIwSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3Nzd2lVWWVIMS1KaExkMExJbTdhUEc0akJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8yMDUzYzQtYmM0YS00MTZhLTg5NzAt
YWM1MzZiMmFiNGY4LzEvd2xMZjZDclhxR3laUGpyNGJvZkdoZ1U0NmEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy8yMDUzYzQtYmM0YS00MTZhLTg5NzAtYWM1MzZiMmFiNGY4
LzEvV3Nzd2lVWWVIMS1KaExkMExJbTdhUEc0akJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQHW4iAAwQB
W8L+AwQBW8MyMAwDBALCCXwDBADCCX4wDQYJKoZIhvcNAQELBQADggEBAEMhxoc9
KbHcRg8TDthu90cRdk+zlVWnEBxcJwM7DNiDl+MI5D2dxG5dZPXIYUn1lCFn871O
+qo3YqzHMR82XfBogaYrxtMLocLNJW9NSiLjq8oy7/1M8gs0Lwz1BdiTxF4MQNpp
wq9M0T0dCm6inVptEwns1vmO5xxdICbzSAgUFHfK1iv6DnaWqn5GJ+hhaVCqiu0j
HNSTXu/BQUgH46DifAW3iAiOAS3PFVwQ68SAMqhSZz3kq78Div/A84x0WR/osAO5
GwfiZc9pn3/VqWzMhgCq5nhqY4A+lI9/F0XEAjOQbmijGB/WdwjsIp4eoWHVpOgU
yC7Luj8WmbrDmhY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:18 2024 by rpki-client on console-ams.rpki-client.org