Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/WUKMdLxdRaLaJ3gRSYBhzoMMn-c.roa
File: WUKMdLxdRaLaJ3gRSYBhzoMMn-c.roa (raw, json)
Hash identifier: f9645Ds0c+4gI3bvleEXfix5CorCg10TzW/pf/h991g=
Subject key identifier: 59:42:8C:74:BC:5D:45:A2:DA:27:78:11:49:80:61:CE:83:0C:9F:E7
Certificate issuer: /CN=2f24d0592ae12e950d88f8c6ae0a92f0b35cd0e4
Certificate serial: 6A46EC
Authority key identifier: 2F:24:D0:59:2A:E1:2E:95:0D:88:F8:C6:AE:0A:92:F0:B3:5C:D0:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/WUKMdLxdRaLaJ3gRSYBhzoMMn-c.roa
Signing time: Sat 01 Jan 2022 01:59:22 +0000
ROA not before: Sat 01 Jan 2022 01:59:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56426
IP address blocks: 178.215.152.0/24 maxlen: 24
178.215.146.0/24 maxlen: 24
178.215.151.0/24 maxlen: 24
178.215.149.0/24 maxlen: 24
178.215.150.0/24 maxlen: 24
178.215.147.0/24 maxlen: 24
178.215.148.0/24 maxlen: 24
178.215.159.0/24 maxlen: 24
178.215.153.0/24 maxlen: 24
178.215.158.0/24 maxlen: 24
178.215.156.0/24 maxlen: 24
178.215.157.0/24 maxlen: 24
178.215.154.0/24 maxlen: 24
178.215.155.0/24 maxlen: 24
178.215.144.0/20 maxlen: 20
178.215.145.0/24 maxlen: 24
178.215.144.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6964972 (0x6a46ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f24d0592ae12e950d88f8c6ae0a92f0b35cd0e4
Validity
Not Before: Jan 1 01:59:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=59428c74bc5d45a2da277811498061ce830c9fe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f4:54:10:3e:a9:6e:80:24:af:a4:74:ad:99:
40:27:6a:aa:e9:95:9d:75:fa:4e:b3:2e:1b:b8:03:
15:84:d7:c7:7e:5c:78:67:ea:16:94:87:3e:40:49:
2b:90:40:47:af:94:4d:0a:96:69:85:8c:ab:77:d6:
8b:e0:67:b0:1c:9b:06:3e:c7:af:a7:20:09:98:b9:
c1:31:19:0e:35:fb:46:46:d6:69:39:52:43:4a:56:
67:90:96:07:7e:b7:6b:46:54:5f:3a:d9:c6:f9:14:
35:93:ff:3a:05:35:1b:50:dc:7d:0d:27:5b:13:70:
ad:88:40:60:a0:86:3e:3e:a9:b9:e0:6f:a8:13:7b:
c3:ac:6d:f9:54:3c:c3:3c:eb:8b:44:d4:00:98:d4:
79:a7:41:16:da:ff:14:49:21:f6:81:6c:49:e7:ca:
72:b2:a0:a7:73:17:86:20:a9:2f:59:e8:d2:e5:d4:
35:3d:25:4e:a9:bd:7c:5f:4e:c9:25:7e:0d:a1:36:
da:63:bf:fb:3c:45:7c:76:c4:e4:b0:52:9f:6f:ae:
69:0e:cb:4d:14:e1:91:1a:a9:82:15:f7:14:05:a6:
f9:0f:ee:98:eb:a3:09:ee:7c:f0:2f:5f:01:f6:60:
41:f2:dd:a0:04:6c:df:c8:87:5f:bf:4d:df:c1:dd:
f5:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:42:8C:74:BC:5D:45:A2:DA:27:78:11:49:80:61:CE:83:0C:9F:E7
X509v3 Authority Key Identifier:
keyid:2F:24:D0:59:2A:E1:2E:95:0D:88:F8:C6:AE:0A:92:F0:B3:5C:D0:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/WUKMdLxdRaLaJ3gRSYBhzoMMn-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.215.144.0/20
Signature Algorithm: sha256WithRSAEncryption
52:57:21:8a:d2:bf:10:5a:25:9d:5c:32:01:5c:9a:b9:df:c7:
b4:16:62:3d:85:b3:8b:6c:ce:c9:b7:e3:97:4b:6b:ad:d3:ab:
72:9a:a0:b0:03:46:d0:80:fe:c5:11:ea:e2:00:d9:d2:67:0e:
e3:4d:a5:46:a8:b7:76:55:bc:15:d6:e7:0c:7c:31:e8:32:6b:
c4:46:05:a8:2f:e0:64:b7:d8:70:ec:b4:f4:36:f7:bc:10:5e:
a3:83:66:e6:e3:7d:4f:45:e8:10:af:ee:f8:7a:0d:26:0b:3a:
de:40:fb:0f:56:e9:03:f5:83:46:32:97:51:eb:8b:11:27:f2:
b9:57:c6:31:0c:fb:8f:d4:fc:38:83:56:d0:c6:15:eb:c7:4d:
05:cd:69:0f:fe:88:65:60:6b:8f:f1:bd:7b:c6:9a:b1:5c:f6:
d6:6e:9d:88:e8:7d:49:ad:74:03:f4:2c:1e:e5:eb:25:13:27:
e9:23:c9:f0:6c:c6:5b:af:e9:b1:0e:f8:e0:5b:8d:5c:5a:c1:
6b:31:de:a3:c0:67:5c:19:10:cb:b9:45:7f:28:59:c9:f5:0b:
f5:a3:83:d8:e0:01:b1:89:20:a1:c9:37:f7:5a:7d:28:61:c7:
d1:3d:02:c4:4b:0b:23:82:d8:36:e8:97:6d:85:23:15:6f:d9:
00:e2:c6:dd
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDakbsMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDJm
MjRkMDU5MmFlMTJlOTUwZDg4ZjhjNmFlMGE5MmYwYjM1Y2QwZTQwHhcNMjIwMTAx
MDE1OTIyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg1OTQyOGM3NGJjNWQ0
NWEyZGEyNzc4MTE0OTgwNjFjZTgzMGM5ZmU3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAwvRUED6pboAkr6R0rZlAJ2qq6ZWddfpOsy4buAMVhNfHflx4
Z+oWlIc+QEkrkEBHr5RNCpZphYyrd9aL4GewHJsGPsevpyAJmLnBMRkONftGRtZp
OVJDSlZnkJYHfrdrRlRfOtnG+RQ1k/86BTUbUNx9DSdbE3CtiEBgoIY+Pqm54G+o
E3vDrG35VDzDPOuLRNQAmNR5p0EW2v8USSH2gWxJ58pysqCncxeGIKkvWejS5dQ1
PSVOqb18X07JJX4NoTbaY7/7PEV8dsTksFKfb65pDstNFOGRGqmCFfcUBab5D+6Y
66MJ7nzwL18B9mBB8t2gBGzfyIdfv03fwd31/QIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFFlCjHS8XUWi2id4EUmAYc6DDJ/nMB8GA1UdIwQYMBaAFC8k0Fkq4S6VDYj4
xq4KkvCzXNDkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
THlUUVdTcmhMcFVOaVBqR3JncVM4TE5jME9RLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC8yZi9mOWMwMWMtN2I3Yy00ZTA0LWE4NjUtMzMxNGQxOTQwYmY5LzEv
V1VLTWRMeGRSYUxhSjNnUlNZQmh6b01Nbi1jLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9m
OWMwMWMtN2I3Yy00ZTA0LWE4NjUtMzMxNGQxOTQwYmY5LzEvTHlUUVdTcmhMcFVO
aVBqR3JncVM4TE5jME9RLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEsteQMA0GCSqGSIb3DQEBCwUAA4IB
AQBSVyGK0r8QWiWdXDIBXJq538e0FmI9hbOLbM7Jt+OXS2ut06tymqCwA0bQgP7F
EeriANnSZw7jTaVGqLd2VbwV1ucMfDHoMmvERgWoL+Bkt9hw7LT0Nve8EF6jg2bm
431PRegQr+74eg0mCzreQPsPVukD9YNGMpdR64sRJ/K5V8YxDPuP1Pw4g1bQxhXr
x00FzWkP/ohlYGuP8b17xpqxXPbWbp2I6H1JrXQD9Cwe5eslEyfpI8nwbMZbr+mx
DvjgW41cWsFrMd6jwGdcGRDLuUV/KFnJ9Qv1o4PY4AGxiSChyTf3Wn0oYcfRPQLE
Swsjgtg26JdthSMVb9kA4sbd
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:49 2023 by rpki-client on console-ams.rpki-client.org