Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/WyTlRO38j03INZyIXtyCot2fmn4.roa
File: WyTlRO38j03INZyIXtyCot2fmn4.roa (raw, json)
Hash identifier: XLgzKyR32x/pZn1Kr34AgKxby5RwPWFYhsdWLdS+Pgs=
Subject key identifier: 5B:24:E5:44:ED:FC:8F:4D:C8:35:9C:88:5E:DC:82:A2:DD:9F:9A:7E
Certificate issuer: /CN=4da4d6199aec828f6989e2e84cec17765bac5cd5
Certificate serial: 06C90EE4
Authority key identifier: 4D:A4:D6:19:9A:EC:82:8F:69:89:E2:E8:4C:EC:17:76:5B:AC:5C:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TaTWGZrsgo9pieLoTOwXdlusXNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/WyTlRO38j03INZyIXtyCot2fmn4.roa
Signing time: Wed 06 Apr 2022 08:44:20 +0000
ROA not before: Wed 06 Apr 2022 08:44:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20776
IP address blocks: 89.16.0.0/19 maxlen: 19
89.16.0.0/20 maxlen: 20
89.16.16.0/21 maxlen: 21
89.16.16.0/20 maxlen: 20
89.16.24.0/21 maxlen: 21
82.197.96.0/19 maxlen: 23
92.49.64.0/19 maxlen: 19
92.49.64.0/20 maxlen: 20
82.197.112.0/20 maxlen: 20
109.62.80.0/20 maxlen: 20
109.62.80.0/21 maxlen: 21
109.62.88.0/21 maxlen: 21
109.62.96.0/20 maxlen: 20
92.49.125.0/24 maxlen: 24
92.49.120.0/21 maxlen: 21
82.197.126.0/24 maxlen: 24
92.49.80.0/20 maxlen: 20
92.49.96.0/19 maxlen: 19
92.49.96.0/20 maxlen: 20
92.49.96.0/21 maxlen: 21
92.49.104.0/24 maxlen: 24
92.49.105.0/24 maxlen: 24
92.49.108.0/22 maxlen: 22
92.49.107.0/24 maxlen: 24
92.49.106.0/24 maxlen: 24
92.49.112.0/20 maxlen: 20
92.49.112.0/21 maxlen: 21
188.115.96.0/21 maxlen: 21
188.115.96.0/19 maxlen: 19
93.176.0.0/20 maxlen: 20
93.176.0.0/19 maxlen: 19
188.115.104.0/21 maxlen: 21
93.176.16.0/20 maxlen: 20
188.115.112.0/22 maxlen: 22
188.115.116.0/22 maxlen: 22
188.115.120.0/21 maxlen: 21
109.62.27.0/24 maxlen: 24
109.62.28.0/22 maxlen: 22
109.62.26.0/24 maxlen: 24
109.62.56.0/21 maxlen: 21
109.62.56.0/22 maxlen: 22
109.62.64.0/24 maxlen: 24
109.62.60.0/22 maxlen: 22
109.62.66.0/24 maxlen: 24
109.62.67.0/24 maxlen: 24
109.62.68.0/22 maxlen: 23
109.62.68.0/23 maxlen: 23
109.62.70.0/23 maxlen: 23
109.62.76.0/22 maxlen: 22
109.62.72.0/21 maxlen: 21
109.62.72.0/22 maxlen: 22
109.62.0.0/17 maxlen: 24
109.62.4.0/22 maxlen: 22
109.62.0.0/19 maxlen: 19
109.62.0.0/21 maxlen: 21
109.62.10.0/23 maxlen: 23
109.62.9.0/24 maxlen: 24
109.62.8.0/24 maxlen: 24
109.62.12.0/23 maxlen: 23
80.243.240.0/20 maxlen: 20
80.243.240.0/21 maxlen: 21
109.62.16.0/21 maxlen: 21
109.62.15.0/24 maxlen: 24
109.62.14.0/24 maxlen: 24
109.62.24.0/23 maxlen: 23
80.243.248.0/21 maxlen: 21
188.115.64.0/20 maxlen: 20
188.115.64.0/19 maxlen: 19
188.115.64.0/18 maxlen: 18
188.115.80.0/20 maxlen: 20
217.175.160.0/19 maxlen: 24
217.175.171.0/24 maxlen: 24
217.175.170.0/24 maxlen: 24
217.175.172.0/24 maxlen: 24
217.175.168.0/24 maxlen: 24
217.175.169.0/24 maxlen: 24
217.175.168.0/21 maxlen: 21
217.175.174.0/23 maxlen: 23
217.175.176.0/21 maxlen: 21
217.175.176.0/22 maxlen: 22
217.175.180.0/22 maxlen: 22
217.175.184.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113839844 (0x6c90ee4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4da4d6199aec828f6989e2e84cec17765bac5cd5
Validity
Not Before: Apr 6 08:44:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5b24e544edfc8f4dc8359c885edc82a2dd9f9a7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7d:c1:6a:73:a0:14:f8:0a:22:9a:6e:c4:7e:
69:a9:9e:53:87:25:2c:0a:fc:e0:96:53:1c:89:6e:
44:3f:0f:38:e6:8c:af:86:a1:1f:7d:bf:eb:92:cb:
d2:f8:06:e1:ce:0f:70:c1:74:98:27:b1:a6:c3:9d:
4d:c4:48:d3:4f:f7:aa:fa:9f:59:d0:97:20:db:14:
d6:14:be:52:e2:44:c4:bb:74:b2:d6:6e:1e:c7:55:
f8:47:04:55:d9:16:0b:8f:2e:3e:6d:c7:86:c5:7f:
5f:02:78:2f:65:db:93:3f:e1:bc:87:a8:ea:d2:64:
4e:b4:8a:58:a1:ae:cb:72:1c:43:ee:46:e5:19:a8:
d6:16:31:97:f7:9a:b1:5c:39:ac:a5:75:13:09:ee:
9f:78:f9:38:80:46:5a:79:ed:16:7b:10:ee:a3:f8:
37:fc:e1:92:06:6e:12:f9:97:32:56:cc:88:8e:14:
b9:d1:d8:16:96:87:f9:fb:6b:ec:ed:da:e8:03:f9:
8e:88:2d:e7:dc:9b:9b:13:86:75:a4:7b:70:65:8c:
80:74:51:1b:74:7d:69:53:47:28:2d:6c:c9:cb:9e:
90:ff:d4:42:c6:22:50:ff:2c:a3:be:04:d0:2b:38:
03:1d:e7:0b:e5:4e:7e:ff:e7:0c:7d:49:52:70:27:
0d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:24:E5:44:ED:FC:8F:4D:C8:35:9C:88:5E:DC:82:A2:DD:9F:9A:7E
X509v3 Authority Key Identifier:
keyid:4D:A4:D6:19:9A:EC:82:8F:69:89:E2:E8:4C:EC:17:76:5B:AC:5C:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TaTWGZrsgo9pieLoTOwXdlusXNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/WyTlRO38j03INZyIXtyCot2fmn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.243.240.0/20
82.197.96.0/19
89.16.0.0/19
92.49.64.0/18
93.176.0.0/19
109.62.0.0/17
188.115.64.0/18
217.175.160.0/19
Signature Algorithm: sha256WithRSAEncryption
54:84:cf:9a:ba:c1:c4:be:4f:db:34:3c:96:31:d0:a8:ed:df:
d7:00:7f:84:08:36:7b:38:cd:85:09:b3:32:a1:71:08:cf:c9:
72:7d:8a:81:c4:ec:37:bf:cd:4f:15:28:da:12:57:75:d4:fe:
66:70:3c:d5:9c:2d:44:84:1e:7b:89:c4:9e:c7:00:04:9c:38:
41:a6:eb:af:ea:a5:90:eb:85:63:14:46:66:f7:9e:bb:7c:a4:
2a:c1:f3:7c:4a:dd:bc:d4:a5:78:3d:c8:03:73:1b:97:8b:dd:
3e:9f:45:42:7f:64:dc:dc:82:17:ec:16:33:ac:9f:95:c2:38:
78:c4:8a:85:8f:f4:ef:eb:6e:3d:72:88:c4:a5:b3:68:01:ff:
20:7c:6f:99:5f:b8:fe:b7:2c:90:43:f3:90:73:d7:59:26:33:
91:99:a8:82:52:3e:63:44:7e:4f:a6:0e:f3:2d:c0:9a:2a:d0:
be:cd:7c:99:5f:36:c3:6f:3a:b3:a3:4b:fb:a4:30:a6:8d:f9:
57:78:28:34:39:22:39:bf:18:52:e8:ae:a0:c7:39:e9:62:7d:
5b:f8:bd:30:90:a0:08:b7:95:1e:8b:89:50:b7:62:ef:c7:f2:
f7:f2:4b:48:00:98:07:70:6e:32:19:9e:eb:b1:66:06:dd:e6:
58:c2:0f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:39 2025 by rpki-client