Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/WmBgNb8SrE0-blttyERFbX1vswc.roa
File: WmBgNb8SrE0-blttyERFbX1vswc.roa (raw, json)
Hash identifier: DLB9Sq+r5WNZVQnvuWaChbZNGsmQa9ZjBsuIEYwos+k=
Subject key identifier: 5A:60:60:35:BF:12:AC:4D:3E:6E:5B:6D:C8:44:45:6D:7D:6F:B3:07
Certificate issuer: /CN=d504e641e55a48aee0141e2c0d26227102caa6d4
Certificate serial: 0116A0E0
Authority key identifier: D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/WmBgNb8SrE0-blttyERFbX1vswc.roa
Signing time: Sat 01 Jan 2022 11:04:56 +0000
ROA not before: Sat 01 Jan 2022 11:04:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39125
IP address blocks: 46.254.94.0/23 maxlen: 24
80.251.112.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18260192 (0x116a0e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d504e641e55a48aee0141e2c0d26227102caa6d4
Validity
Not Before: Jan 1 11:04:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5a606035bf12ac4d3e6e5b6dc844456d7d6fb307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:76:7e:be:5b:39:86:fe:5f:19:d6:7c:8f:96:
c2:0d:96:d2:37:4c:62:2f:8b:fe:59:b2:c2:32:73:
0e:ff:39:c3:1e:b8:f4:a6:10:90:d1:a4:ba:92:bf:
ca:ca:07:08:cc:83:66:2c:8b:d6:95:43:51:c1:18:
18:7a:ec:2a:8a:41:2d:83:46:e3:26:06:ca:7f:ba:
d6:f5:11:e7:24:3f:13:8b:c0:6d:00:50:28:c9:f9:
8b:0e:90:5a:c0:0e:3f:f9:4f:76:0d:68:9b:46:3e:
1c:e3:ec:b3:fc:5c:ac:18:27:7a:2a:a4:92:bc:cd:
8f:25:d0:c9:af:85:d2:b2:0b:0b:36:b4:27:af:4f:
ab:20:e0:bf:b8:52:54:56:60:c6:a1:55:8b:97:0f:
f8:ca:e5:f4:d1:d6:d6:2c:83:21:7f:be:5a:29:ae:
05:23:ab:14:c3:b7:e3:0c:be:63:c4:b9:aa:cc:e6:
10:6f:92:e3:44:e6:e2:b8:dc:5b:60:1e:8e:67:ee:
bf:e2:59:59:1f:1f:7d:a9:80:e3:d8:34:c6:c3:19:
1c:0a:4d:2f:9c:03:37:4a:89:ad:cf:27:67:f4:68:
c0:2c:bb:5e:73:dc:4c:8b:0c:9f:04:00:d5:89:cd:
3e:c8:6e:b8:fd:cf:45:c8:67:5b:21:2a:37:f3:64:
76:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:60:60:35:BF:12:AC:4D:3E:6E:5B:6D:C8:44:45:6D:7D:6F:B3:07
X509v3 Authority Key Identifier:
keyid:D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/WmBgNb8SrE0-blttyERFbX1vswc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.254.94.0/23
80.251.112.0/20
Signature Algorithm: sha256WithRSAEncryption
4f:9a:1e:d6:61:82:76:de:fc:64:da:74:7e:88:cb:73:b1:ca:
5a:e6:42:3c:c2:47:b4:72:6f:2b:1c:8e:76:8b:59:a8:02:4b:
d4:58:48:7e:98:e2:d4:be:89:65:b1:94:f0:6a:a3:d2:78:b4:
99:99:f9:6f:55:34:6a:2d:e1:03:eb:01:57:d8:e5:a4:22:64:
d8:37:cc:c2:0c:97:13:c1:dd:5e:6d:94:fb:35:b3:aa:7b:0d:
fc:57:df:e2:49:41:16:6e:4a:9a:ec:c2:56:68:a5:cb:e2:4e:
5e:06:ca:8d:8f:89:dc:9b:29:40:13:6d:57:43:67:4a:f5:63:
de:10:68:e6:b8:86:6b:cd:ac:4e:ae:c4:31:64:64:a2:61:66:
1e:92:c8:89:cc:c7:23:13:79:fc:39:7c:91:c3:d4:e7:1d:1e:
fe:f7:11:fb:e6:6f:2a:57:3d:bb:b8:74:a8:1d:dd:67:c6:54:
19:a4:93:e0:5f:d8:12:0c:07:47:65:18:19:7c:2e:f8:6b:da:
86:ca:01:ff:ea:1d:6f:02:ff:06:3f:cd:7e:3b:3b:31:0e:79:
3c:8c:d4:d8:61:fb:f1:14:ea:d4:93:48:c2:eb:74:58:7b:82:
ab:78:5c:02:d6:9c:6f:32:8c:8c:33:93:55:48:b2:05:1d:b5:
b4:b3:f3:f2
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEARag4DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
NTA0ZTY0MWU1NWE0OGFlZTAxNDFlMmMwZDI2MjI3MTAyY2FhNmQ0MB4XDTIyMDEw
MTExMDQ1NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNWE2MDYwMzViZjEy
YWM0ZDNlNmU1YjZkYzg0NDQ1NmQ3ZDZmYjMwNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKh2fr5bOYb+XxnWfI+Wwg2W0jdMYi+L/lmywjJzDv85wx64
9KYQkNGkupK/ysoHCMyDZiyL1pVDUcEYGHrsKopBLYNG4yYGyn+61vUR5yQ/E4vA
bQBQKMn5iw6QWsAOP/lPdg1om0Y+HOPss/xcrBgneiqkkrzNjyXQya+F0rILCza0
J69PqyDgv7hSVFZgxqFVi5cP+Mrl9NHW1iyDIX++WimuBSOrFMO34wy+Y8S5qszm
EG+S40Tm4rjcW2Aejmfuv+JZWR8ffamA49g0xsMZHApNL5wDN0qJrc8nZ/RowCy7
XnPcTIsMnwQA1YnNPshuuP3PRchnWyEqN/Nkds8CAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBRaYGA1vxKsTT5uW23IREVtfW+zBzAfBgNVHSMEGDAWgBTVBOZB5VpIruAU
HiwNJiJxAsqm1DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzFRVG1RZVZhU0s3Z0ZCNHNEU1lpY1FMS3B0US5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMWUvZjAxZjM1LTJjY2EtNGU1YS04MjhhLTZiZmZjYjdjMGYwYS8x
L1dtQmdOYjhTckUwLWJsdHR5RVJGYlgxdnN3Yy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWUv
ZjAxZjM1LTJjY2EtNGU1YS04MjhhLTZiZmZjYjdjMGYwYS8xLzFRVG1RZVZhU0s3
Z0ZCNHNEU1lpY1FMS3B0US5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAS7+XgMEBFD7cDANBgkqhkiG9w0B
AQsFAAOCAQEAT5oe1mGCdt78ZNp0fojLc7HKWuZCPMJHtHJvKxyOdotZqAJL1FhI
fpji1L6JZbGU8Gqj0ni0mZn5b1U0ai3hA+sBV9jlpCJk2DfMwgyXE8HdXm2U+zWz
qnsN/Fff4klBFm5KmuzCVmily+JOXgbKjY+J3JspQBNtV0NnSvVj3hBo5riGa82s
Tq7EMWRkomFmHpLIiczHIxN5/Dl8kcPU5x0e/vcR++ZvKlc9u7h0qB3dZ8ZUGaST
4F/YEgwHR2UYGXwu+GvahsoB/+odbwL/Bj/Nfjs7MQ55PIzU2GH78RTq1JNIwut0
WHuCq3hcAtacbzKMjDOTVUiyBR21tLPz8g==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:51 2023 by rpki-client on console-ams.rpki-client.org