Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/wE_1tGOuVZ-F7hdZG8iFGATAVhg.roa
File: wE_1tGOuVZ-F7hdZG8iFGATAVhg.roa (raw, json)
Hash identifier: UPLo94ssHbJQfPh8QYhr/27ZYOwDuquEifu4wZzP/5s=
Subject key identifier: C0:4F:F5:B4:63:AE:55:9F:85:EE:17:59:1B:C8:85:18:04:C0:56:18
Certificate issuer: /CN=34d0ec7ac4c391e4ecba9d0a3749191b18ebf934
Certificate serial: 0184A5390F59D9CA6239E1174DE97E6AE8A2
Authority key identifier: 34:D0:EC:7A:C4:C3:91:E4:EC:BA:9D:0A:37:49:19:1B:18:EB:F9:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NNDsesTDkeTsup0KN0kZGxjr-TQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/wE_1tGOuVZ-F7hdZG8iFGATAVhg.roa
Signing time: Wed 23 Nov 2022 16:01:30 +0000
ROA not before: Wed 23 Nov 2022 16:01:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201986
IP address blocks: 178.219.56.0/21 maxlen: 21
178.219.58.0/23 maxlen: 23
194.61.88.0/22 maxlen: 24
109.68.127.0/24 maxlen: 24
185.150.164.0/22 maxlen: 22
185.150.166.0/24 maxlen: 24
185.150.164.0/23 maxlen: 23
185.150.167.0/24 maxlen: 24
185.57.68.0/22 maxlen: 22
2a02:5960::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a5:39:0f:59:d9:ca:62:39:e1:17:4d:e9:7e:6a:e8:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34d0ec7ac4c391e4ecba9d0a3749191b18ebf934
Validity
Not Before: Nov 23 16:01:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c04ff5b463ae559f85ee17591bc8851804c05618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:1b:11:35:04:1f:0e:e0:f4:5b:9a:8f:e0:7d:
0e:d9:74:74:10:5e:5b:b6:ce:6f:c2:db:81:af:6d:
90:d4:61:46:d6:f5:3c:f5:c4:91:e9:85:ec:8e:e2:
e5:19:4a:10:01:a4:ad:8f:99:9f:d9:e0:30:a9:5c:
45:1d:66:b6:72:d2:f7:57:c3:fd:a6:7e:d0:b9:cc:
79:b5:86:57:51:b3:74:36:60:43:54:2a:3b:5b:46:
b6:96:c1:e6:39:b3:8b:bf:9d:bb:df:3c:37:dd:1c:
61:65:e4:3b:80:13:54:ba:c1:20:40:82:71:31:90:
d7:ea:7a:bc:5c:4c:f0:41:39:10:7b:07:32:df:d2:
0f:f1:8e:0f:6b:48:b1:93:65:67:74:7c:bd:e4:8b:
ab:35:3a:2c:b7:da:46:a0:f4:75:ab:aa:f3:92:87:
33:06:7c:3f:b0:b4:68:20:49:4d:0f:b6:9d:ad:9e:
0e:dd:fb:1c:d8:6d:fa:da:bf:aa:80:c2:6d:6b:f6:
f3:c3:51:ff:56:f8:ee:c0:15:75:04:22:de:c2:0c:
4f:af:69:bf:9a:c9:9e:f2:49:6e:10:8d:9d:56:d7:
f5:3e:89:00:d3:b2:2c:17:24:17:f1:e2:ea:f8:8e:
64:1c:87:ce:70:27:c9:0a:94:da:ec:e6:3b:a7:17:
90:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:4F:F5:B4:63:AE:55:9F:85:EE:17:59:1B:C8:85:18:04:C0:56:18
X509v3 Authority Key Identifier:
keyid:34:D0:EC:7A:C4:C3:91:E4:EC:BA:9D:0A:37:49:19:1B:18:EB:F9:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NNDsesTDkeTsup0KN0kZGxjr-TQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/wE_1tGOuVZ-F7hdZG8iFGATAVhg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.68.127.0/24
178.219.56.0/21
185.57.68.0/22
185.150.164.0/22
194.61.88.0/22
IPv6:
2a02:5960::/32
Signature Algorithm: sha256WithRSAEncryption
4a:72:b0:ca:08:e4:c0:96:ea:e6:bd:57:2a:7a:f9:00:9d:58:
07:2c:ac:ff:cc:e2:8a:64:24:17:30:af:a3:0b:77:13:42:de:
08:e7:bb:cf:e3:6a:1f:d3:5e:cd:23:74:fe:13:a1:58:65:f4:
78:4f:a7:fb:0e:8e:0e:e9:5c:85:57:80:43:fc:3c:d1:74:c4:
21:bc:e2:09:02:32:25:5b:f0:d5:4b:eb:4b:b3:47:8e:49:6d:
09:99:1d:7b:ce:51:43:a7:d7:64:a5:b6:a8:03:d3:83:3b:1e:
d3:2a:a0:bd:bb:cf:a4:48:10:bc:68:bb:19:58:84:28:3b:b7:
2c:a5:1a:6c:f5:f4:bd:73:d9:b5:10:51:aa:9f:ca:1a:c4:91:
e3:c6:28:03:aa:05:59:4c:9a:ce:7b:6c:2b:04:f5:5e:9d:8a:
44:c3:e2:3a:c1:03:08:4c:e3:35:a3:64:04:c7:8f:b3:16:4d:
fa:36:61:f1:a8:11:d7:1b:ec:75:a3:4b:0a:50:69:73:ed:4d:
3d:d6:df:12:18:85:43:73:9b:1c:ab:70:81:fe:d2:32:fe:ad:
db:3a:68:41:1a:75:85:c2:fc:02:dc:b2:e4:6c:82:69:c5:4e:
08:7a:fc:2b:81:b7:1c:e2:d6:91:15:94:cb:d1:85:68:1f:6c:
8b:99:21:4c
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgISAYSlOQ9Z2cpiOeEXTel+auiiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0ZDBlYzdhYzRjMzkxZTRlY2JhOWQwYTM3NDkxOTFiMThl
YmY5MzQwHhcNMjIxMTIzMTYwMTMwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMDRmZjViNDYzYWU1NTlmODVlZTE3NTkxYmM4ODUxODA0YzA1NjE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxsRNQQfDuD0W5qP4H0O2XR0EF5b
ts5vwtuBr22Q1GFG1vU89cSR6YXsjuLlGUoQAaStj5mf2eAwqVxFHWa2ctL3V8P9
pn7Qucx5tYZXUbN0NmBDVCo7W0a2lsHmObOLv5273zw33RxhZeQ7gBNUusEgQIJx
MZDX6nq8XEzwQTkQewcy39IP8Y4Pa0ixk2VndHy95IurNTost9pGoPR1q6rzkocz
Bnw/sLRoIElND7adrZ4O3fsc2G362r+qgMJta/bzw1H/VvjuwBV1BCLewgxPr2m/
msme8kluEI2dVtf1PokA07IsFyQX8eLq+I5kHIfOcCfJCpTa7OY7pxeQQwIDAQAB
o4ICMDCCAiwwHQYDVR0OBBYEFMBP9bRjrlWfhe4XWRvIhRgEwFYYMB8GA1UdIwQY
MBaAFDTQ7HrEw5Hk7LqdCjdJGRsY6/k0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTk5Ec2VzVERrZVRzdXAwS04wa1pHeGpyLVRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9mN2Y1M2QtMDY4Yy00NDRlLWFkMWUt
YjdjMjY5NmJhZTUwLzEvd0VfMXRHT3VWWi1GN2hkWkc4aUZHQVRBVmhnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9mN2Y1M2QtMDY4Yy00NDRlLWFkMWUtYjdjMjY5NmJhZTUw
LzEvTk5Ec2VzVERrZVRzdXAwS04wa1pHeGpyLVRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQAbUR/AwQD
sts4AwQCuTlEAwQCuZakAwQCwj1YMA0EAgACMAcDBQAqAllgMA0GCSqGSIb3DQEB
CwUAA4IBAQBKcrDKCOTAlurmvVcqevkAnVgHLKz/zOKKZCQXMK+jC3cTQt4I57vP
42of017NI3T+E6FYZfR4T6f7Do4O6VyFV4BD/DzRdMQhvOIJAjIlW/DVS+tLs0eO
SW0JmR17zlFDp9dkpbaoA9ODOx7TKqC9u8+kSBC8aLsZWIQoO7cspRps9fS9c9m1
EFGqn8oaxJHjxigDqgVZTJrOe2wrBPVenYpEw+I6wQMITOM1o2QEx4+zFk36NmHx
qBHXG+x1o0sKUGlz7U091t8SGIVDc5scq3CB/tIy/q3bOmhBGnWFwvwC3LLkbIJp
xU4Ievwrgbcc4taRFZTL0YVoH2yLmSFM
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:24 2023 by rpki-client on console-fra.rpki-client.org