Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/f_aomWF_5_n9tg6DKPZob7_rGQI.roa
File: f_aomWF_5_n9tg6DKPZob7_rGQI.roa (raw, json)
Hash identifier: slJAwQIL/UqNhv/TPJmztbCTHUi4voc8zXnMsFjjZcM=
Subject key identifier: 7F:F6:A8:99:61:7F:E7:F9:FD:B6:0E:83:28:F6:68:6F:BF:EB:19:02
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 388DF19D
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/f_aomWF_5_n9tg6DKPZob7_rGQI.roa
Signing time: Sat 01 Jan 2022 05:54:23 +0000
ROA not before: Sat 01 Jan 2022 05:54:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199558
IP address blocks: 159.148.218.0/24 maxlen: 24
85.254.144.0/24 maxlen: 24
159.148.233.0/24 maxlen: 24
85.254.41.0/24 maxlen: 24
159.148.128.0/24 maxlen: 24
85.254.45.0/24 maxlen: 24
85.254.46.0/24 maxlen: 24
159.148.27.0/24 maxlen: 24
85.254.52.0/22 maxlen: 22
85.254.70.0/24 maxlen: 24
159.148.58.0/24 maxlen: 24
159.148.89.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 948826525 (0x388df19d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 1 05:54:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7ff6a899617fe7f9fdb60e8328f6686fbfeb1902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:38:eb:8b:98:b3:f8:3e:96:44:16:6c:46:ae:
2b:27:21:c9:22:1c:3c:5d:55:cd:ef:ea:1b:14:2e:
22:9a:25:7f:c4:bf:58:8d:26:41:b0:80:c9:2f:25:
b4:68:8b:ed:89:02:df:91:ce:2b:ff:1c:82:96:b1:
ae:e1:c8:27:35:22:37:87:c3:12:9b:6d:17:b6:41:
c0:1c:bd:a7:77:16:6b:1f:a2:8f:57:0c:3a:a3:f2:
f7:52:ac:4a:ac:d5:00:07:db:ad:cf:4c:0e:3b:d7:
65:4d:b7:09:24:ed:5a:00:17:f2:a8:e4:0c:63:8f:
ed:8c:50:22:ef:71:f2:15:92:9b:44:5f:6e:ac:10:
4c:85:10:8b:12:86:0f:9e:46:d6:7b:01:91:78:e2:
94:ea:39:48:2b:af:b9:5f:20:a2:ff:7b:bf:10:84:
ef:c8:ec:94:7d:7b:70:70:6c:2a:68:b8:1a:a0:a1:
d8:39:f2:4d:aa:63:a8:31:fc:8b:79:88:4d:5a:8d:
09:10:f1:c4:8f:3f:fe:ea:a0:c1:d1:ad:d2:14:ea:
a8:1c:59:38:67:a1:3e:d9:96:8c:68:a1:6c:2d:94:
eb:25:3e:c1:29:3d:91:79:1a:27:8f:7c:03:99:eb:
7c:cd:1c:0c:0b:44:11:db:d9:c7:14:82:08:f9:c7:
53:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F6:A8:99:61:7F:E7:F9:FD:B6:0E:83:28:F6:68:6F:BF:EB:19:02
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/f_aomWF_5_n9tg6DKPZob7_rGQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.254.41.0/24
85.254.45.0-85.254.46.255
85.254.52.0/22
85.254.70.0/24
85.254.144.0/24
159.148.27.0/24
159.148.58.0/24
159.148.89.0/24
159.148.128.0/24
159.148.218.0/24
159.148.233.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:53:c1:67:7d:36:cd:3e:3f:d2:a5:9b:5f:02:fc:54:e8:8e:
a7:78:90:1c:b3:b7:dd:9b:a1:20:52:3f:76:27:a3:5e:35:fd:
51:ea:25:14:00:09:a0:de:68:72:88:1b:45:08:d6:f6:1a:12:
e2:5b:b2:f3:6a:98:bf:c7:9e:de:ba:5b:32:3f:c4:01:a7:6a:
64:bb:ca:29:7a:30:d3:b4:95:8f:34:3f:da:81:8d:7d:59:ef:
24:a4:e6:e0:e0:4f:6a:da:d9:4a:78:2c:a8:cf:41:39:23:4e:
cc:6f:41:f4:88:52:e7:de:65:45:1b:e0:07:8e:4d:cf:c5:4a:
6f:3d:78:9b:c7:b6:e6:0c:c2:b6:36:45:bc:87:59:31:fb:a7:
b7:a2:e0:58:ae:1a:8f:c8:ef:46:e2:e9:3f:bc:53:c6:34:64:
a5:f8:80:72:9f:33:c5:46:20:a5:d2:e5:98:29:ed:9d:c6:23:
ec:25:c6:1f:96:08:da:8f:a7:b9:68:79:97:8f:b9:c7:61:60:
8a:d5:63:ae:3b:f5:b2:55:37:7b:75:21:36:a9:55:29:2c:d2:
8d:27:05:c7:f5:f6:f2:69:45:d8:64:90:e8:4e:e2:79:3c:71:
1f:38:a6:a3:d0:a3:8c:4a:4f:ff:48:23:ea:08:81:24:3e:22:
60:b9:e2:d8
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIEOI3xnTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
YjA5NTJjOGJhOGRhZGIxZDM0ZGU2YzZhOTM4NjRhNjA5ZmM0MWVjMB4XDTIyMDEw
MTA1NTQyM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoN2ZmNmE4OTk2MTdm
ZTdmOWZkYjYwZTgzMjhmNjY4NmZiZmViMTkwMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK4464uYs/g+lkQWbEauKychySIcPF1Vze/qGxQuIpolf8S/
WI0mQbCAyS8ltGiL7YkC35HOK/8cgpaxruHIJzUiN4fDEpttF7ZBwBy9p3cWax+i
j1cMOqPy91KsSqzVAAfbrc9MDjvXZU23CSTtWgAX8qjkDGOP7YxQIu9x8hWSm0Rf
bqwQTIUQixKGD55G1nsBkXjilOo5SCuvuV8gov97vxCE78jslH17cHBsKmi4GqCh
2DnyTapjqDH8i3mITVqNCRDxxI8//uqgwdGt0hTqqBxZOGehPtmWjGihbC2U6yU+
wSk9kXkaJ498A5nrfM0cDAtEEdvZxxSCCPnHUy0CAwEAAaOCAk0wggJJMB0GA1Ud
DgQWBBR/9qiZYX/n+f22DoMo9mhvv+sZAjAfBgNVHSMEGDAWgBSrCVLIuo2tsdNN
5sapOGSmCfxB7DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3F3bFN5THFOcmJIVFRlYkdxVGhrcGduOFFldy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMGUvMzU1NWZlLTEyY2QtNDAyYS1hODEwLTU1NTRkNmUxNjg2Zi8x
L2ZfYW9tV0ZfNV9uOXRnNkRLUFpvYjdfckdRSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGUv
MzU1NWZlLTEyY2QtNDAyYS1hODEwLTU1NTRkNmUxNjg2Zi8xL3F3bFN5THFOcmJI
VFRlYkdxVGhrcGduOFFldy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBj
BggrBgEFBQcBBwEB/wRUMFIwUAQCAAEwSgMEAFX+KTAMAwQAVf4tAwQAVf4uAwQC
Vf40AwQAVf5GAwQAVf6QAwQAn5QbAwQAn5Q6AwQAn5RZAwQAn5SAAwQAn5TaAwQA
n5TpMA0GCSqGSIb3DQEBCwUAA4IBAQAtU8FnfTbNPj/SpZtfAvxU6I6neJAcs7fd
m6EgUj92J6NeNf1R6iUUAAmg3mhyiBtFCNb2GhLiW7Lzapi/x57eulsyP8QBp2pk
u8opejDTtJWPND/agY19We8kpObg4E9q2tlKeCyoz0E5I07Mb0H0iFLn3mVFG+AH
jk3PxUpvPXibx7bmDMK2NkW8h1kx+6e3ouBYrhqPyO9G4uk/vFPGNGSl+IBynzPF
RiCl0uWYKe2dxiPsJcYflgjaj6e5aHmXj7nHYWCK1WOuO/WyVTd7dSE2qVUpLNKN
JwXH9fbyaUXYZJDoTuJ5PHEfOKaj0KOMSk//SCPqCIEkPiJgueLY
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:38 2023 by rpki-client on console-ams.rpki-client.org