Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/d520c4-deb4-438b-93bf-768f3d6ee19e/1/waA-LSkE0wKT2vyjdifD8qc7XoA.roa
File: waA-LSkE0wKT2vyjdifD8qc7XoA.roa (raw, json)
Hash identifier: sCc4x7e4acntr4UboaUo9n5ylX8VnTjt7CkgoUO50/0=
Subject key identifier: C1:A0:3E:2D:29:04:D3:02:93:DA:FC:A3:76:27:C3:F2:A7:3B:5E:80
Certificate issuer: /CN=e067a7b9de767eb97db64e516478494633bd54ea
Certificate serial: 01888BEA5D66CDA73517439A1E49761AC90C
Authority key identifier: E0:67:A7:B9:DE:76:7E:B9:7D:B6:4E:51:64:78:49:46:33:BD:54:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Genud52frl9tk5RZHhJRjO9VOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/d520c4-deb4-438b-93bf-768f3d6ee19e/1/waA-LSkE0wKT2vyjdifD8qc7XoA.roa
Signing time: Mon 05 Jun 2023 14:16:12 +0000
ROA not before: Mon 05 Jun 2023 14:16:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39878
IP address blocks: 45.67.168.0/22 maxlen: 22
185.196.240.0/22 maxlen: 22
185.87.238.0/23 maxlen: 23
185.87.237.0/24 maxlen: 24
91.135.160.0/20 maxlen: 20
185.33.8.0/22 maxlen: 22
185.64.48.0/22 maxlen: 22
2a04:40::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8b:ea:5d:66:cd:a7:35:17:43:9a:1e:49:76:1a:c9:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e067a7b9de767eb97db64e516478494633bd54ea
Validity
Not Before: Jun 5 14:16:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c1a03e2d2904d30293dafca37627c3f2a73b5e80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ca:a5:cf:3a:c9:40:1b:c9:91:54:a2:d5:f8:
c3:1f:db:af:48:4a:98:10:76:ff:7b:3f:33:88:9d:
34:d2:64:54:f8:e0:d8:f6:c6:ee:5f:dc:42:e3:92:
8e:9c:83:b7:4b:8b:da:f7:50:4d:93:0f:52:04:0d:
29:8d:c9:2d:1d:5c:3c:f7:3d:c6:d2:bc:d5:9b:32:
b6:1b:8a:ec:b3:49:a8:8a:ce:fa:92:d8:0f:7b:db:
a6:e0:7c:cd:44:ec:f5:c3:02:d0:e3:ea:ee:4a:9a:
64:28:6f:5d:59:97:72:89:0b:c4:c0:4e:59:eb:c6:
81:39:b1:5f:62:5d:5e:fd:d2:29:0b:2b:96:8f:7c:
a5:2e:fc:53:43:36:5a:33:76:d1:db:88:e0:63:ac:
30:66:7e:3f:7f:ca:ba:75:0f:c8:94:a0:f2:87:cd:
de:a8:30:e1:c0:14:e8:c7:79:ab:6d:43:57:0e:ff:
7e:00:d7:3d:ec:1e:f8:74:71:ae:6a:0e:f0:67:ae:
01:f3:c3:0f:97:89:4b:e1:a5:b3:2f:8e:ce:f1:78:
16:b2:39:ef:77:3d:01:c9:2b:bd:87:68:c4:74:03:
85:ac:12:a9:8d:58:a6:f9:bb:a8:ed:6e:59:bc:e3:
70:c0:42:73:f3:27:77:93:2b:1f:c7:70:60:23:23:
f2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:A0:3E:2D:29:04:D3:02:93:DA:FC:A3:76:27:C3:F2:A7:3B:5E:80
X509v3 Authority Key Identifier:
keyid:E0:67:A7:B9:DE:76:7E:B9:7D:B6:4E:51:64:78:49:46:33:BD:54:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Genud52frl9tk5RZHhJRjO9VOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/d520c4-deb4-438b-93bf-768f3d6ee19e/1/waA-LSkE0wKT2vyjdifD8qc7XoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/d520c4-deb4-438b-93bf-768f3d6ee19e/1/4Genud52frl9tk5RZHhJRjO9VOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.168.0/22
91.135.160.0/20
185.33.8.0/22
185.64.48.0/22
185.87.237.0-185.87.239.255
185.196.240.0/22
IPv6:
2a04:40::/29
Signature Algorithm: sha256WithRSAEncryption
3f:53:6e:a9:d7:7a:36:26:1e:65:2d:a4:9d:15:f7:39:70:b7:
59:b1:11:a4:3f:99:73:bf:a0:9b:cd:6b:44:eb:24:c9:79:f7:
1f:0a:2b:d3:e9:ab:2b:b8:a9:2d:fe:6c:17:9c:1a:25:e6:23:
0d:5d:ae:3c:4f:88:59:a5:b2:93:f5:7e:16:b3:79:83:a4:ee:
a5:ec:1b:83:c4:8d:91:51:4b:c0:0b:42:dc:0e:b6:0c:f9:f3:
73:4d:aa:95:92:e0:bb:09:e6:6e:a0:de:58:53:6a:13:93:0c:
fc:e3:24:27:55:a0:3a:a6:c2:87:39:0b:a8:f7:76:dc:87:f4:
d9:c0:e1:d2:38:7d:f2:b0:2e:5a:67:e4:1f:2d:d2:0d:e4:45:
32:b4:e4:43:7d:20:79:7d:3a:14:7d:64:e6:70:22:d3:ed:f3:
50:22:b2:8f:ea:d1:40:8f:a7:31:39:f4:23:79:ef:26:02:05:
49:77:5b:a9:01:dd:9b:f1:e6:83:c4:e1:9b:35:fb:5f:d4:d9:
3d:61:54:32:1e:41:58:f1:db:ba:2f:db:59:16:0a:e5:fe:04:
43:82:07:07:7c:b2:55:fb:ef:24:45:27:d5:00:64:1e:d1:4d:
8c:10:a8:3b:99:6d:7d:88:b5:0a:a8:f1:23:46:1e:6a:3d:57:
cc:66:10:b6
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgISAYiL6l1mzac1F0OaHkl2GskMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNjdhN2I5ZGU3NjdlYjk3ZGI2NGU1MTY0Nzg0OTQ2MzNi
ZDU0ZWEwHhcNMjMwNjA1MTQxNjEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMWEwM2UyZDI5MDRkMzAyOTNkYWZjYTM3NjI3YzNmMmE3M2I1ZTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8qlzzrJQBvJkVSi1fjDH9uvSEqY
EHb/ez8ziJ000mRU+ODY9sbuX9xC45KOnIO3S4va91BNkw9SBA0pjcktHVw89z3G
0rzVmzK2G4rss0mois76ktgPe9um4HzNROz1wwLQ4+ruSppkKG9dWZdyiQvEwE5Z
68aBObFfYl1e/dIpCyuWj3ylLvxTQzZaM3bR24jgY6wwZn4/f8q6dQ/IlKDyh83e
qDDhwBTox3mrbUNXDv9+ANc97B74dHGuag7wZ64B88MPl4lL4aWzL47O8XgWsjnv
dz0BySu9h2jEdAOFrBKpjVim+buo7W5ZvONwwEJz8yd3kysfx3BgIyPyQQIDAQAB
o4ICPjCCAjowHQYDVR0OBBYEFMGgPi0pBNMCk9r8o3Ynw/KnO16AMB8GA1UdIwQY
MBaAFOBnp7nedn65fbZOUWR4SUYzvVTqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEdlbnVkNTJmcmw5dGs1UlpIaEpSak85Vk9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9kNTIwYzQtZGViNC00MzhiLTkzYmYt
NzY4ZjNkNmVlMTllLzEvd2FBLUxTa0Uwd0tUMnZ5amRpZkQ4cWM3WG9BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9kNTIwYzQtZGViNC00MzhiLTkzYmYtNzY4ZjNkNmVlMTll
LzEvNEdlbnVkNTJmcmw5dGs1UlpIaEpSak85Vk9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFQGCCsGAQUFBwEHAQH/BEUwQzAyBAIAATAsAwQCLUOoAwQE
W4egAwQCuSEIAwQCuUAwMAwDBAC5V+0DBAS5V+ADBAK5xPAwDQQCAAIwBwMFAyoE
AEAwDQYJKoZIhvcNAQELBQADggEBAD9TbqnXejYmHmUtpJ0V9zlwt1mxEaQ/mXO/
oJvNa0TrJMl59x8KK9Ppqyu4qS3+bBecGiXmIw1drjxPiFmlspP1fhazeYOk7qXs
G4PEjZFRS8ALQtwOtgz583NNqpWS4LsJ5m6g3lhTahOTDPzjJCdVoDqmwoc5C6j3
dtyH9NnA4dI4ffKwLlpn5B8t0g3kRTK05EN9IHl9OhR9ZOZwItPt81Aiso/q0UCP
pzE59CN57yYCBUl3W6kB3Zvx5oPE4Zs1+1/U2T1hVDIeQVjx27ov21kWCuX+BEOC
Bwd8slX77yRFJ9UAZB7RTYwQqDuZbX2ItQqo8SNGHmo9V8xmELY=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:36 2025 by rpki-client