Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/WPHEcQDw_BDQ5IzuRvOQ5MVT0tU.roa
File: WPHEcQDw_BDQ5IzuRvOQ5MVT0tU.roa (raw, json)
Hash identifier: 3nZbKT1G+0Quk3hRi8yv4Ogtk3FdMMmv3Brh690tWSo=
Subject key identifier: 58:F1:C4:71:00:F0:FC:10:D0:E4:8C:EE:46:F3:90:E4:C5:53:D2:D5
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 0722A93C
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/WPHEcQDw_BDQ5IzuRvOQ5MVT0tU.roa
Signing time: Fri 11 Mar 2022 06:27:37 +0000
ROA not before: Fri 11 Mar 2022 06:27:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 194.15.96.0/22 maxlen: 24
188.209.128.0/20 maxlen: 24
185.83.200.0/22 maxlen: 24
45.154.156.0/22 maxlen: 24
45.65.112.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119712060 (0x722a93c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Mar 11 06:27:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=58f1c47100f0fc10d0e48cee46f390e4c553d2d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f4:9f:3e:88:f1:67:60:27:a5:91:b3:04:2c:
90:ab:05:ef:7a:fe:2f:f7:d0:26:e1:c0:78:f2:be:
5a:ff:fe:26:e8:e6:95:bd:47:f8:b9:51:40:ec:83:
8d:af:a8:c4:ca:7b:fa:fb:13:28:79:40:51:9e:df:
64:1b:6f:3e:b4:a7:34:66:ed:60:0f:55:d4:74:2e:
df:f8:8c:24:79:83:b1:22:ae:1d:66:0e:72:0b:84:
9c:30:11:7e:2c:51:07:a0:5f:db:8e:06:c0:73:48:
97:e3:03:11:9b:e1:6a:08:d5:d0:ba:26:d3:a3:39:
a6:69:12:b4:f7:9e:03:f3:20:c1:1f:91:59:c6:9f:
52:ee:39:d4:97:d2:30:69:fe:8d:ad:3d:6f:15:08:
7b:c0:7f:c8:99:c5:b0:58:d4:06:29:7d:7c:e6:45:
0d:52:fa:19:50:a0:54:08:ca:e6:5f:3a:9a:f6:b1:
03:71:8e:7c:e8:1a:8a:47:83:e3:50:cd:c6:d9:55:
88:e5:04:49:b1:a9:80:3e:4f:d6:e5:29:de:6a:af:
72:88:c3:d8:71:ac:0d:c3:0d:44:5b:d5:32:51:05:
1f:52:fa:3c:ce:95:14:37:4a:92:b2:e2:a7:15:2e:
d0:40:1b:19:68:40:07:fb:3d:64:13:53:28:3d:45:
8b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:F1:C4:71:00:F0:FC:10:D0:E4:8C:EE:46:F3:90:E4:C5:53:D2:D5
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/WPHEcQDw_BDQ5IzuRvOQ5MVT0tU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.112.0/22
45.154.156.0/22
185.83.200.0/22
188.209.128.0/20
194.15.96.0/22
Signature Algorithm: sha256WithRSAEncryption
32:86:d0:75:0f:81:95:44:20:9e:5d:b4:ac:17:fa:8c:07:94:
c9:27:a5:95:78:e0:84:11:0e:2c:20:79:22:55:ee:d7:25:00:
7b:ec:b1:2b:fd:87:e2:87:43:1b:74:7e:a6:e9:62:01:7e:20:
46:18:73:bb:34:c6:21:aa:01:b8:19:63:98:d9:4b:6d:40:0d:
14:d6:5b:7e:60:a7:78:f4:36:69:58:df:00:14:6d:f0:4e:4e:
88:6c:dd:57:d0:28:a6:ab:36:73:2b:04:d7:16:01:c4:fc:1e:
27:ba:58:99:21:f4:12:6c:07:40:dc:bb:ab:08:ac:a5:7e:d9:
b0:42:7a:f9:22:32:99:b2:f5:7c:6d:2f:d4:af:cf:d2:0b:bd:
eb:ca:39:b8:17:40:04:71:0b:9e:bd:d8:b5:d3:ad:9e:20:f5:
55:69:56:9b:1d:da:bd:60:57:1d:fb:88:c5:e2:1e:86:dc:fe:
34:6e:5e:0b:cf:ab:2d:66:3b:f2:50:24:12:2e:22:97:fa:7d:
e7:3d:75:e5:15:23:d7:dd:9f:d8:e9:92:f3:53:f3:d6:87:8c:
30:7d:76:08:74:e3:f7:77:a1:ab:23:51:47:72:34:df:30:c5:
16:d2:b8:fb:fb:37:c7:c5:9e:e9:20:cf:80:05:68:c5:4e:32:
b5:55:9a:13
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIEByKpPDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
OTNkYTIwMTk5MDlkOWZjMzc4MjlmZDllYzI5ZDk0OGVjZmY3YzkyMB4XDTIyMDMx
MTA2MjczN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNThmMWM0NzEwMGYw
ZmMxMGQwZTQ4Y2VlNDZmMzkwZTRjNTUzZDJkNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANr0nz6I8WdgJ6WRswQskKsF73r+L/fQJuHAePK+Wv/+Jujm
lb1H+LlRQOyDja+oxMp7+vsTKHlAUZ7fZBtvPrSnNGbtYA9V1HQu3/iMJHmDsSKu
HWYOcguEnDARfixRB6Bf244GwHNIl+MDEZvhagjV0Lom06M5pmkStPeeA/MgwR+R
WcafUu451JfSMGn+ja09bxUIe8B/yJnFsFjUBil9fOZFDVL6GVCgVAjK5l86mvax
A3GOfOgaikeD41DNxtlViOUESbGpgD5P1uUp3mqvcojD2HGsDcMNRFvVMlEFH1L6
PM6VFDdKkrLipxUu0EAbGWhAB/s9ZBNTKD1Fi6cCAwEAAaOCAiEwggIdMB0GA1Ud
DgQWBBRY8cRxAPD8ENDkjO5G85DkxVPS1TAfBgNVHSMEGDAWgBTZPaIBmQnZ/DeC
n9nsKdlI7P98kjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzJUMmlBWmtKMmZ3M2dwX1o3Q25aU096X2ZKSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzIvNDdhZmEzLWNlMzEtNDA2MC1hMDc4LWY1YWRkZGRmMWVjNS8x
L1dQSEVjUUR3X0JEUTVJenVSdk9RNU1WVDB0VS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzIv
NDdhZmEzLWNlMzEtNDA2MC1hMDc4LWY1YWRkZGRmMWVjNS8xLzJUMmlBWmtKMmZ3
M2dwX1o3Q25aU096X2ZKSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA3
BggrBgEFBQcBBwEB/wQoMCYwJAQCAAEwHgMEAi1BcAMEAi2anAMEArlTyAMEBLzR
gAMEAsIPYDANBgkqhkiG9w0BAQsFAAOCAQEAMobQdQ+BlUQgnl20rBf6jAeUySel
lXjghBEOLCB5IlXu1yUAe+yxK/2H4odDG3R+puliAX4gRhhzuzTGIaoBuBljmNlL
bUANFNZbfmCnePQ2aVjfABRt8E5OiGzdV9Aopqs2cysE1xYBxPweJ7pYmSH0EmwH
QNy7qwispX7ZsEJ6+SIymbL1fG0v1K/P0gu968o5uBdABHELnr3YtdOtniD1VWlW
mx3avWBXHfuIxeIehtz+NG5eC8+rLWY78lAkEi4il/p95z115RUj192f2OmS81Pz
1oeMMH12CHTj93ehqyNRR3I03zDFFtK4+/s3x8We6SDPgAVoxU4ytVWaEw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:14 2023 by rpki-client on console-fra.rpki-client.org