Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/WCmr9HQ32AY8_inoFW2Qu7ts25c.roa
File: WCmr9HQ32AY8_inoFW2Qu7ts25c.roa (raw, json)
Hash identifier: IqZB7SV4Oi/C5rn2MPSxHcyuVVXBOyHxvGzRlXJI/Io=
Subject key identifier: 58:29:AB:F4:74:37:D8:06:3C:FE:29:E8:15:6D:90:BB:BB:6C:DB:97
Certificate issuer: /CN=c4eb34dda2f8094968494892063351ee0f10e91a
Certificate serial: 020607E4
Authority key identifier: C4:EB:34:DD:A2:F8:09:49:68:49:48:92:06:33:51:EE:0F:10:E9:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/WCmr9HQ32AY8_inoFW2Qu7ts25c.roa
Signing time: Fri 20 May 2022 11:33:30 +0000
ROA not before: Fri 20 May 2022 11:33:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210015
IP address blocks: 193.151.160.0/23 maxlen: 23
193.151.162.0/23 maxlen: 23
45.80.248.0/23 maxlen: 23
2a0d:e7c7:ffff::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33949668 (0x20607e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4eb34dda2f8094968494892063351ee0f10e91a
Validity
Not Before: May 20 11:33:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5829abf47437d8063cfe29e8156d90bbbb6cdb97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:78:de:87:9e:57:1e:c3:5d:1f:76:ce:35:19:
2c:d0:46:d9:1b:c1:1a:0f:6a:58:d9:71:56:4f:6e:
23:e0:84:6e:5e:aa:4e:96:e4:a2:4f:1d:a0:62:e5:
3a:0b:3c:1b:18:9b:ed:25:55:8e:1b:78:4a:46:24:
c2:db:e9:c7:9e:a8:8d:e8:48:5b:a4:35:bf:79:e0:
de:1a:18:86:b1:ad:71:59:e5:5b:0e:37:aa:d0:b8:
4a:26:83:1a:e3:6d:b1:94:c5:3e:74:cb:78:75:c1:
4d:6a:0d:c6:c9:1e:09:ab:dc:62:fd:57:62:7b:14:
fa:e8:2c:2f:6a:04:cd:54:2f:f5:4e:6f:e4:0a:b5:
10:a2:06:4a:80:a0:5d:9d:c0:a7:5b:47:a8:e3:66:
dc:34:c9:b9:5f:fb:b1:1c:8e:c2:fb:28:c9:79:6d:
32:69:21:e9:e2:9c:d4:87:b5:e6:b1:85:0c:bb:33:
e2:51:00:3f:40:7c:d2:2d:e2:bb:85:86:cd:d4:65:
7e:c6:9a:a8:b7:a6:44:6e:22:da:d0:ad:cb:a0:2a:
91:17:c0:9c:1c:73:de:ab:04:c4:3a:43:e9:c3:8a:
ea:4a:25:2e:e3:33:f7:cc:da:99:d9:ee:4a:5b:dd:
9a:79:27:35:0c:f9:44:6d:21:14:38:72:36:2e:44:
d2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:29:AB:F4:74:37:D8:06:3C:FE:29:E8:15:6D:90:BB:BB:6C:DB:97
X509v3 Authority Key Identifier:
keyid:C4:EB:34:DD:A2:F8:09:49:68:49:48:92:06:33:51:EE:0F:10:E9:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/WCmr9HQ32AY8_inoFW2Qu7ts25c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.248.0/23
193.151.160.0/22
IPv6:
2a0d:e7c7:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
3f:e2:98:93:4c:0c:e2:4f:c7:5e:32:66:51:db:83:a7:03:32:
31:28:ee:2d:65:9e:af:0a:8b:00:cf:f7:8f:3c:0b:d0:dd:68:
97:f4:4e:d4:c3:ad:97:3c:e1:5a:a2:b4:43:f7:88:42:55:80:
1e:d9:01:0b:87:08:79:c2:3b:bd:58:79:75:fd:6c:12:73:2e:
ac:4f:27:90:44:08:bc:ce:30:74:18:ae:ee:f0:e6:39:5d:3d:
ad:3c:5c:96:9c:87:59:fa:3d:3f:b0:24:3b:a9:02:46:f0:6f:
da:fb:4b:68:ae:87:e1:c0:ec:42:c9:02:82:f6:b4:d7:37:e9:
d6:14:ca:24:e0:be:6f:e8:36:9a:2a:83:fc:59:44:da:e3:64:
73:c1:7b:ec:11:2d:f5:ff:2d:7e:38:ad:19:1e:a3:b1:9c:8f:
aa:62:b2:74:91:da:1c:5f:a7:8b:78:70:11:e7:85:3b:fc:98:
aa:2e:72:70:18:9d:3a:91:bd:7c:db:7c:39:ab:2a:f3:f8:ce:
d0:bc:9b:33:09:c3:1a:55:aa:b5:32:fb:81:06:32:93:51:63:
45:27:01:09:ac:48:2c:77:39:b5:19:45:00:26:84:f7:ca:ee:
f5:e1:d8:6c:5e:f5:68:f4:74:18:da:85:18:f7:f8:17:25:c4:
f1:fd:00:23
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIEAgYH5DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
NGViMzRkZGEyZjgwOTQ5Njg0OTQ4OTIwNjMzNTFlZTBmMTBlOTFhMB4XDTIyMDUy
MDExMzMzMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTgyOWFiZjQ3NDM3
ZDgwNjNjZmUyOWU4MTU2ZDkwYmJiYjZjZGI5NzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKN43oeeVx7DXR92zjUZLNBG2RvBGg9qWNlxVk9uI+CEbl6q
Tpbkok8doGLlOgs8Gxib7SVVjht4SkYkwtvpx56ojehIW6Q1v3ng3hoYhrGtcVnl
Ww43qtC4SiaDGuNtsZTFPnTLeHXBTWoNxskeCavcYv1XYnsU+ugsL2oEzVQv9U5v
5Aq1EKIGSoCgXZ3Ap1tHqONm3DTJuV/7sRyOwvsoyXltMmkh6eKc1Ie15rGFDLsz
4lEAP0B80i3iu4WGzdRlfsaaqLemRG4i2tCty6AqkRfAnBxz3qsExDpD6cOK6kol
LuMz98zamdnuSlvdmnknNQz5RG0hFDhyNi5E0g0CAwEAAaOCAiAwggIcMB0GA1Ud
DgQWBBRYKav0dDfYBjz+KegVbZC7u2zblzAfBgNVHSMEGDAWgBTE6zTdovgJSWhJ
SJIGM1HuDxDpGjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3hPczAzYUw0Q1Vsb1NVaVNCak5SN2c4UTZSby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzQvYjk2NTg0LTFmNzEtNDhiYi1hMDIxLWEzNDdiNTZmM2I5YS8x
L1dDbXI5SFEzMkFZOF9pbm9GVzJRdTd0czI1Yy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzQv
Yjk2NTg0LTFmNzEtNDhiYi1hMDIxLWEzNDdiNTZmM2I5YS8xL3hPczAzYUw0Q1Vs
b1NVaVNCak5SN2c4UTZSby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA2
BggrBgEFBQcBBwEB/wQnMCUwEgQCAAEwDAMEAS1Q+AMEAsGXoDAPBAIAAjAJAwcA
Kg3nx///MA0GCSqGSIb3DQEBCwUAA4IBAQA/4piTTAziT8deMmZR24OnAzIxKO4t
ZZ6vCosAz/ePPAvQ3WiX9E7Uw62XPOFaorRD94hCVYAe2QELhwh5wju9WHl1/WwS
cy6sTyeQRAi8zjB0GK7u8OY5XT2tPFyWnIdZ+j0/sCQ7qQJG8G/a+0torofhwOxC
yQKC9rTXN+nWFMok4L5v6DaaKoP8WUTa42RzwXvsES31/y1+OK0ZHqOxnI+qYrJ0
kdocX6eLeHAR54U7/JiqLnJwGJ06kb1823w5qyrz+M7QvJszCcMaVaq1MvuBBjKT
UWNFJwEJrEgsdzm1GUUAJoT3yu714dhsXvVo9HQY2oUY9/gXJcTx/QAj
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:07 2023 by rpki-client on console-ams.rpki-client.org