Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/WxZkHQzFRxUefgMv5wbROW7rJMY.roa
File: WxZkHQzFRxUefgMv5wbROW7rJMY.roa (raw, json)
Hash identifier: IyakTEOc2fy14g8lxPOGFoHhMSt5bmIuZDG/tRimrKw=
Subject key identifier: 5B:16:64:1D:0C:C5:47:15:1E:7E:03:2F:E7:06:D1:39:6E:EB:24:C6
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 1CCA4D62
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/WxZkHQzFRxUefgMv5wbROW7rJMY.roa
Signing time: Wed 06 Apr 2022 13:32:17 +0000
ROA not before: Wed 06 Apr 2022 13:32:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50835
IP address blocks: 91.193.30.0/23 maxlen: 23
81.161.48.0/22 maxlen: 22
194.33.64.0/23 maxlen: 23
91.246.192.0/22 maxlen: 24
77.36.57.0/24 maxlen: 24
176.113.180.0/22 maxlen: 22
77.36.60.0/24 maxlen: 24
77.36.65.0/24 maxlen: 24
91.246.203.0/24 maxlen: 24
176.118.204.0/23 maxlen: 24
176.110.112.0/23 maxlen: 23
91.246.217.0/24 maxlen: 24
81.161.8.0/22 maxlen: 22
192.162.184.0/23 maxlen: 23
37.97.120.0/24 maxlen: 24
37.97.121.0/24 maxlen: 24
91.232.56.0/23 maxlen: 23
194.33.66.0/23 maxlen: 23
64.43.120.0/22 maxlen: 24
91.233.200.0/24 maxlen: 24
176.115.236.0/22 maxlen: 24
193.36.203.0/24 maxlen: 24
109.207.129.0/24 maxlen: 24
109.207.130.0/24 maxlen: 24
109.207.132.0/24 maxlen: 24
176.96.94.0/24 maxlen: 24
91.229.18.0/23 maxlen: 23
91.200.132.0/24 maxlen: 24
91.200.134.0/23 maxlen: 23
176.121.108.0/23 maxlen: 24
176.121.110.0/23 maxlen: 24
91.238.39.0/24 maxlen: 24
91.239.220.0/22 maxlen: 22
91.239.222.0/23 maxlen: 23
176.116.236.0/24 maxlen: 24
91.239.226.0/24 maxlen: 24
91.224.212.0/24 maxlen: 24
93.120.8.0/23 maxlen: 23
91.232.226.0/24 maxlen: 24
46.173.248.0/22 maxlen: 24
91.236.76.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 483020130 (0x1cca4d62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Apr 6 13:32:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5b16641d0cc547151e7e032fe706d1396eeb24c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:de:67:57:63:4f:ed:eb:4c:0b:4f:fe:ec:79:
19:4c:3b:03:5c:ad:04:3e:d4:da:c7:8b:c2:61:b2:
0c:10:9a:12:13:72:4b:9a:99:2d:8b:f1:1b:0c:f6:
d8:da:ec:40:49:fd:26:29:e2:6f:a5:2b:50:9c:1c:
d7:a6:88:c0:6a:2b:90:bb:42:84:89:cc:47:00:3d:
51:8a:d6:c1:3e:77:d4:01:d7:24:d0:9c:e8:64:7a:
72:56:f5:7b:bf:32:85:2f:61:30:77:e5:41:af:45:
e1:ed:a8:3c:7b:5b:ed:70:3c:f4:3e:83:98:d6:29:
15:c1:c4:00:89:2d:c3:53:98:54:02:0c:3d:51:53:
60:b9:04:d0:60:e4:83:e5:71:9e:a4:a5:54:25:ad:
8e:d0:19:17:19:13:a8:bc:f7:e8:e0:d7:04:be:c1:
12:4e:be:a4:2e:e6:bc:74:27:fb:6c:1a:19:d5:87:
81:4f:b6:98:4e:5b:94:f5:97:97:df:02:13:64:0c:
ac:cd:5f:c1:c7:eb:c1:d8:98:c7:74:47:b9:af:2c:
a2:3a:dc:c9:16:30:d2:5b:dd:a0:40:02:e1:61:87:
87:d4:1b:bd:fb:8a:66:11:6e:67:6d:c5:bd:fc:63:
6a:2f:7d:d8:b0:79:0e:e6:05:2c:7f:fa:9a:6a:35:
a1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:16:64:1D:0C:C5:47:15:1E:7E:03:2F:E7:06:D1:39:6E:EB:24:C6
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/WxZkHQzFRxUefgMv5wbROW7rJMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.97.120.0/23
46.173.248.0/22
64.43.120.0/22
77.36.57.0/24
77.36.60.0/24
77.36.65.0/24
81.161.8.0/22
81.161.48.0/22
91.193.30.0/23
91.200.132.0/24
91.200.134.0/23
91.224.212.0/24
91.229.18.0/23
91.232.56.0/23
91.232.226.0/24
91.233.200.0/24
91.236.76.0/24
91.238.39.0/24
91.239.220.0/22
91.239.226.0/24
91.246.192.0/22
91.246.203.0/24
91.246.217.0/24
93.120.8.0/23
109.207.129.0-109.207.130.255
109.207.132.0/24
176.96.94.0/24
176.110.112.0/23
176.113.180.0/22
176.115.236.0/22
176.116.236.0/24
176.118.204.0/23
176.121.108.0/22
192.162.184.0/23
193.36.203.0/24
194.33.64.0/22
Signature Algorithm: sha256WithRSAEncryption
46:a6:21:b0:30:c6:b9:da:15:58:52:e1:6e:04:ec:a9:1d:17:
cd:ab:d9:54:ed:3c:2b:55:14:5b:db:ea:e1:ab:fd:c8:8c:0b:
b0:24:9a:62:f1:94:c7:bd:7a:5a:9b:c7:dd:a0:49:01:15:c5:
62:3f:03:04:c7:33:1d:c1:61:bd:f5:ae:e5:51:30:52:9c:9f:
09:56:d3:c2:3e:c6:0f:f4:a0:2c:12:20:c8:55:79:15:35:e1:
41:b3:22:11:28:e1:1a:50:f6:e7:c5:72:7d:1c:a4:12:cc:83:
39:df:f7:f9:ca:e9:6c:55:6c:5e:68:22:5d:63:63:f9:a8:e7:
9e:f7:f9:70:2b:2a:e6:ab:53:70:87:a8:1a:67:a9:26:f5:66:
86:e4:0c:1b:fa:d4:de:54:1a:2e:ea:81:f4:5c:c0:5f:31:77:
b4:b6:ba:75:d4:15:be:1d:b2:bf:eb:4d:ea:3c:72:d4:28:5f:
c3:0d:5c:2b:2d:6b:7e:66:db:2e:ab:85:b5:c7:f7:62:94:94:
d8:2a:d5:ff:2a:4f:50:6f:1c:81:fb:23:52:48:f2:b5:b4:fd:
e8:bc:a6:e4:1c:a2:4a:de:65:62:76:62:8f:b7:54:17:05:d0:
0f:b6:c4:e7:9e:73:a5:67:b5:12:37:b6:f0:2d:1f:c2:70:5e:
e2:bb:24:ad
-----BEGIN CERTIFICATE-----
MIIFzjCCBLagAwIBAgIEHMpNYjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
NDljYmJkNWMyY2Y0MTk1Y2M2ZWM3ZjIxZjYwNzU4MWEwMjI0ZGFhMB4XDTIyMDQw
NjEzMzIxN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNWIxNjY0MWQwY2M1
NDcxNTFlN2UwMzJmZTcwNmQxMzk2ZWViMjRjNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALLeZ1djT+3rTAtP/ux5GUw7A1ytBD7U2seLwmGyDBCaEhNy
S5qZLYvxGwz22NrsQEn9Jinib6UrUJwc16aIwGorkLtChInMRwA9UYrWwT531AHX
JNCc6GR6clb1e78yhS9hMHflQa9F4e2oPHtb7XA89D6DmNYpFcHEAIktw1OYVAIM
PVFTYLkE0GDkg+VxnqSlVCWtjtAZFxkTqLz36ODXBL7BEk6+pC7mvHQn+2waGdWH
gU+2mE5blPWXl98CE2QMrM1fwcfrwdiYx3RHua8sojrcyRYw0lvdoEAC4WGHh9Qb
vfuKZhFuZ23Fvfxjai992LB5DuYFLH/6mmo1oeECAwEAAaOCAugwggLkMB0GA1Ud
DgQWBBRbFmQdDMVHFR5+Ay/nBtE5buskxjAfBgNVHSMEGDAWgBQ0nLvVws9Blcxu
x/IfYHWBoCJNqjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L05KeTcxY0xQUVpYTWJzZnlIMkIxZ2FBaVRhby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMmQvY2RmNWY2LTJmMTgtNDJjNy05MzBlLWRjMDZkZDgwNTk2MC8x
L1d4WmtIUXpGUnhVZWZnTXY1d2JST1c3ckpNWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmQv
Y2RmNWY2LTJmMTgtNDJjNy05MzBlLWRjMDZkZDgwNTk2MC8xL05KeTcxY0xQUVpY
TWJzZnlIMkIxZ2FBaVRhby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCB
/QYIKwYBBQUHAQcBAf8Ege0wgeowgecEAgABMIHgAwQBJWF4AwQCLq34AwQCQCt4
AwQATSQ5AwQATSQ8AwQATSRBAwQCUaEIAwQCUaEwAwQBW8EeAwQAW8iEAwQBW8iG
AwQAW+DUAwQBW+USAwQBW+g4AwQAW+jiAwQAW+nIAwQAW+xMAwQAW+4nAwQCW+/c
AwQAW+/iAwQCW/bAAwQAW/bLAwQAW/bZAwQBXXgIMAwDBABtz4EDBABtz4IDBABt
z4QDBACwYF4DBAGwbnADBAKwcbQDBAKwc+wDBACwdOwDBAGwdswDBAKweWwDBAHA
orgDBADBJMsDBALCIUAwDQYJKoZIhvcNAQELBQADggEBAEamIbAwxrnaFVhS4W4E
7KkdF82r2VTtPCtVFFvb6uGr/ciMC7AkmmLxlMe9elqbx92gSQEVxWI/AwTHMx3B
Yb31ruVRMFKcnwlW08I+xg/0oCwSIMhVeRU14UGzIhEo4RpQ9ufFcn0cpBLMgznf
9/nK6WxVbF5oIl1jY/mo5573+XArKuarU3CHqBpnqSb1ZobkDBv61N5UGi7qgfRc
wF8xd7S2unXUFb4dsr/rTeo8ctQoX8MNXCsta35m2y6rhbXH92KUlNgq1f8qT1Bv
HIH7I1JI8rW0/ei8puQcokreZWJ2Yo+3VBcF0A+2xOeec6VntRI3tvAtH8JwXuK7
JK0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:48 2024 by rpki-client on console-ams.rpki-client.org