Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/WKSBuUj4bO_kM1uYPmF-3WimO8I.roa
File: WKSBuUj4bO_kM1uYPmF-3WimO8I.roa (raw, json)
Hash identifier: pIasvzf5ch+DkO5BUp0aEjVmfq388P/aW5wQlGOV0Dg=
Subject key identifier: 58:A4:81:B9:48:F8:6C:EF:E4:33:5B:98:3E:61:7E:DD:68:A6:3B:C2
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 01850C0A8234236D72C9126371B7E7051524
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/WKSBuUj4bO_kM1uYPmF-3WimO8I.roa
Signing time: Tue 13 Dec 2022 15:11:33 +0000
ROA not before: Tue 13 Dec 2022 15:11:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6282
IP address blocks: 77.36.24.0/22 maxlen: 22
176.116.36.0/22 maxlen: 22
176.116.32.0/22 maxlen: 22
64.43.100.0/22 maxlen: 22
64.43.104.0/22 maxlen: 22
64.43.108.0/22 maxlen: 22
64.43.116.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0c:0a:82:34:23:6d:72:c9:12:63:71:b7:e7:05:15:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Dec 13 15:11:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=58a481b948f86cefe4335b983e617edd68a63bc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9c:af:31:0e:fa:ab:d5:0b:4d:36:86:25:9e:
6f:30:c8:ac:de:87:0e:7f:24:8e:cb:4f:c6:9e:71:
b9:50:8e:9e:e4:f7:02:a3:c4:85:53:2f:eb:70:c4:
63:81:81:51:b4:58:82:d1:66:5b:2a:7e:88:33:4a:
78:49:95:93:70:a1:94:e8:5e:25:39:63:8f:30:0e:
18:1d:9f:ab:01:e8:67:44:f1:77:1b:a9:56:a1:ac:
55:26:49:cb:c7:f7:29:15:8b:81:e6:82:8a:b5:3b:
38:76:18:21:b1:f5:b9:1f:89:ec:ad:05:51:e0:27:
fa:75:32:79:19:77:54:04:47:3e:31:a2:b6:f8:90:
e5:1e:28:c6:f1:8d:6f:51:33:06:c2:b9:7b:4c:f2:
48:1c:0a:64:c6:a0:88:1b:40:30:bd:c4:b5:8f:b5:
a7:c3:f7:79:f8:bd:65:26:7f:4b:7a:7e:84:a9:8b:
aa:02:68:d0:f3:98:d8:dd:f5:72:3f:98:cf:36:0d:
8c:8c:66:8a:27:cf:54:64:c3:7c:86:04:9f:d3:b0:
52:5c:71:38:2f:cb:e1:5c:fa:56:dc:25:1e:3f:b4:
96:8d:1d:a1:cf:a3:1b:3e:c2:e7:9f:75:9e:03:42:
f9:ca:56:66:94:cf:e0:79:f9:19:e3:0c:62:2c:a5:
a4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:A4:81:B9:48:F8:6C:EF:E4:33:5B:98:3E:61:7E:DD:68:A6:3B:C2
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/WKSBuUj4bO_kM1uYPmF-3WimO8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.43.100.0-64.43.111.255
64.43.116.0/22
77.36.24.0/22
176.116.32.0/21
Signature Algorithm: sha256WithRSAEncryption
3e:c5:36:6b:3d:1a:00:cf:86:00:50:0b:d2:44:f4:e3:ad:9b:
57:15:aa:06:b4:fa:fc:9f:c1:8c:2b:40:41:5b:03:47:b9:21:
23:1a:c6:f7:fa:c0:8a:a3:a4:55:34:c5:bf:c4:32:d7:9d:ad:
40:ee:3f:87:7d:8d:ee:a1:bd:d6:eb:a5:bf:c9:b6:e2:d4:db:
c2:6c:25:37:bd:9f:ba:e2:75:22:2b:ea:c4:61:41:69:33:a4:
80:77:18:03:a6:48:49:21:39:6f:5b:7d:4a:06:c9:55:cb:ad:
20:5a:14:aa:a8:e7:36:d2:e4:a1:9e:06:5a:66:13:9d:15:41:
4f:99:76:ad:b0:df:78:b1:d2:93:29:b7:6e:10:60:81:4a:fa:
60:1d:fe:86:e1:09:65:96:d5:d3:98:d3:a6:f3:ab:74:71:68:
de:57:ab:4d:f1:ad:ce:5d:ec:61:9f:38:ac:34:56:4f:92:de:
2d:5f:1b:89:fb:80:1b:b1:39:9a:fa:78:71:13:d3:bf:ea:17:
e4:34:04:6d:04:dc:16:c1:bf:53:a2:e4:24:fb:77:1e:1e:a7:
5b:08:75:13:45:4e:7c:57:6b:8d:a2:cd:25:bc:4c:1d:3a:a4:
3b:b3:5a:25:6d:22:31:bd:f5:c8:d5:e3:73:92:c4:0f:2a:09:
9b:b8:17:f0
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAYUMCoI0I21yyRJjcbfnBRUkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0OWNiYmQ1YzJjZjQxOTVjYzZlYzdmMjFmNjA3NTgxYTAy
MjRkYWEwHhcNMjIxMjEzMTUxMTMzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OGE0ODFiOTQ4Zjg2Y2VmZTQzMzViOTgzZTYxN2VkZDY4YTYzYmMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5yvMQ76q9ULTTaGJZ5vMMis3ocO
fySOy0/GnnG5UI6e5PcCo8SFUy/rcMRjgYFRtFiC0WZbKn6IM0p4SZWTcKGU6F4l
OWOPMA4YHZ+rAehnRPF3G6lWoaxVJknLx/cpFYuB5oKKtTs4dhghsfW5H4nsrQVR
4Cf6dTJ5GXdUBEc+MaK2+JDlHijG8Y1vUTMGwrl7TPJIHApkxqCIG0AwvcS1j7Wn
w/d5+L1lJn9Len6EqYuqAmjQ85jY3fVyP5jPNg2MjGaKJ89UZMN8hgSf07BSXHE4
L8vhXPpW3CUeP7SWjR2hz6MbPsLnn3WeA0L5ylZmlM/gefkZ4wxiLKWkfwIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFFikgblI+Gzv5DNbmD5hft1opjvCMB8GA1UdIwQY
MBaAFDScu9XCz0GVzG7H8h9gdYGgIk2qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUt
ZGMwNmRkODA1OTYwLzEvV0tTQnVVajRiT19rTTF1WVBtRi0zV2ltTzhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUtZGMwNmRkODA1OTYw
LzEvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgMAwDBAJAK2QD
BARAK2ADBAJAK3QDBAJNJBgDBAOwdCAwDQYJKoZIhvcNAQELBQADggEBAD7FNms9
GgDPhgBQC9JE9OOtm1cVqga0+vyfwYwrQEFbA0e5ISMaxvf6wIqjpFU0xb/EMted
rUDuP4d9je6hvdbrpb/JtuLU28JsJTe9n7ridSIr6sRhQWkzpIB3GAOmSEkhOW9b
fUoGyVXLrSBaFKqo5zbS5KGeBlpmE50VQU+Zdq2w33ix0pMpt24QYIFK+mAd/obh
CWWW1dOY06bzq3RxaN5Xq03xrc5d7GGfOKw0Vk+S3i1fG4n7gBuxOZr6eHET07/q
F+Q0BG0E3BbBv1Oi5CT7dx4ep1sIdRNFTnxXa42izSW8TB06pDuzWiVtIjG99cjV
43OSxA8qCZu4F/A=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:57 2024 by rpki-client on console-fra.rpki-client.org