Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/wpYVdiazj0c2PpkQRh5GX8H_A8g.roa
File: wpYVdiazj0c2PpkQRh5GX8H_A8g.roa (raw, json)
Hash identifier: KQJRTe4HPiOxpa6n4at7QHFx1UUHy9kPd1Auja1ljRs=
Subject key identifier: C2:96:15:76:26:B3:8F:47:36:3E:99:10:46:1E:46:5F:C1:FF:03:C8
Certificate issuer: /CN=e39f1a6e84c0277efcb56d942b0eb5e456471129
Certificate serial: 0181DDCC02B93786738BC017EDBA14B2D2CC
Authority key identifier: E3:9F:1A:6E:84:C0:27:7E:FC:B5:6D:94:2B:0E:B5:E4:56:47:11:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/wpYVdiazj0c2PpkQRh5GX8H_A8g.roa
Signing time: Fri 08 Jul 2022 12:32:23 +0000
ROA not before: Fri 08 Jul 2022 12:32:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39835
IP address blocks: 81.20.112.0/20 maxlen: 20
5.34.224.0/21 maxlen: 21
188.74.36.0/24 maxlen: 24
188.74.37.0/24 maxlen: 24
2a03:6880::/32 maxlen: 32
2a03:4b22::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:dd:cc:02:b9:37:86:73:8b:c0:17:ed:ba:14:b2:d2:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e39f1a6e84c0277efcb56d942b0eb5e456471129
Validity
Not Before: Jul 8 12:32:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c296157626b38f47363e9910461e465fc1ff03c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6c:dc:8c:1e:a4:71:96:6d:4c:a7:4d:14:20:
ce:15:75:fb:87:95:67:19:66:1c:b9:35:8a:a5:ac:
de:29:a9:ce:08:79:1a:00:87:4a:36:15:75:b4:2d:
bb:73:ff:0a:d9:cd:67:6c:50:6a:c8:e5:60:cc:66:
e1:7d:f8:45:e8:8e:4f:31:c0:31:d0:76:21:03:97:
92:5a:c2:f3:8e:14:67:fd:6f:d4:d2:fb:3c:c1:dc:
a4:f2:da:61:33:b6:b9:6a:b4:39:0c:28:da:d7:ff:
81:41:f0:62:8e:c3:28:e9:d2:10:92:2d:e9:65:89:
61:ac:77:0e:b7:fd:19:13:83:1d:16:94:cf:48:45:
5d:a8:4e:f1:bf:9b:69:70:88:2b:f1:e1:0d:62:33:
be:dc:5c:ad:48:31:e0:25:63:c0:86:26:98:6a:bd:
f2:b5:ac:02:3e:62:5d:c2:49:3f:2f:35:f5:2f:08:
41:ad:96:fe:1e:91:d7:87:57:7c:ef:85:93:71:7b:
e0:af:9c:e5:da:03:f5:b7:04:28:c5:09:c4:75:e3:
25:c4:52:45:c4:5c:b6:0d:f1:c0:e0:6b:d7:1c:d2:
f4:3c:f2:27:a5:eb:e6:34:fd:b2:6e:e8:42:ee:f3:
52:e5:b3:ff:cd:f1:ef:0b:6d:e9:d6:3d:28:71:8d:
65:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:96:15:76:26:B3:8F:47:36:3E:99:10:46:1E:46:5F:C1:FF:03:C8
X509v3 Authority Key Identifier:
keyid:E3:9F:1A:6E:84:C0:27:7E:FC:B5:6D:94:2B:0E:B5:E4:56:47:11:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/wpYVdiazj0c2PpkQRh5GX8H_A8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.34.224.0/21
81.20.112.0/20
188.74.36.0/23
IPv6:
2a03:4b22::/32
2a03:6880::/32
Signature Algorithm: sha256WithRSAEncryption
4c:83:45:62:da:ba:eb:cb:ed:5c:42:50:38:98:b6:32:9f:de:
63:dc:4e:f9:65:18:13:30:11:67:54:31:4c:0e:72:dc:4c:c6:
40:58:0d:14:44:23:45:f2:c9:90:7a:7a:9b:22:36:3a:cc:26:
91:3c:c0:f2:84:d5:3d:5d:ee:7a:10:d4:e6:0f:1d:8b:75:da:
96:aa:aa:1c:96:8a:15:9c:ab:3c:a2:e7:bd:ac:3f:8d:fb:ba:
66:6c:5a:09:8a:33:62:2a:11:19:09:d8:89:82:1d:98:5d:e0:
e3:64:11:f6:10:75:6b:99:50:62:ca:fb:08:08:03:4d:a4:60:
f2:5b:9a:a8:3e:59:5d:7c:70:91:6e:bb:20:53:06:2d:90:db:
a5:41:59:d4:13:ee:e8:77:4b:51:72:dc:8c:cd:93:72:e0:bd:
4e:f3:30:94:c4:a0:15:56:63:1b:c6:83:bc:71:a9:37:cf:64:
0a:48:32:5f:b8:19:47:73:ea:e9:c1:7d:6d:38:dc:a7:88:5f:
14:89:f1:99:d6:51:7b:3c:8e:15:24:03:86:c1:a4:21:de:ec:
80:7a:23:32:cd:8c:47:ff:f7:9f:14:ff:32:7f:e0:e6:70:8e:
92:b3:5b:b9:d1:94:f5:37:cf:5e:14:40:f5:7e:b7:23:8d:da:
2c:90:c2:a8
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgISAYHdzAK5N4Zzi8AX7boUstLMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzOWYxYTZlODRjMDI3N2VmY2I1NmQ5NDJiMGViNWU0NTY0
NzExMjkwHhcNMjIwNzA4MTIzMjIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMjk2MTU3NjI2YjM4ZjQ3MzYzZTk5MTA0NjFlNDY1ZmMxZmYwM2M4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWzcjB6kcZZtTKdNFCDOFXX7h5Vn
GWYcuTWKpazeKanOCHkaAIdKNhV1tC27c/8K2c1nbFBqyOVgzGbhffhF6I5PMcAx
0HYhA5eSWsLzjhRn/W/U0vs8wdyk8tphM7a5arQ5DCja1/+BQfBijsMo6dIQki3p
ZYlhrHcOt/0ZE4MdFpTPSEVdqE7xv5tpcIgr8eENYjO+3FytSDHgJWPAhiaYar3y
tawCPmJdwkk/LzX1LwhBrZb+HpHXh1d874WTcXvgr5zl2gP1twQoxQnEdeMlxFJF
xFy2DfHA4GvXHNL0PPInpevmNP2ybuhC7vNS5bP/zfHvC23p1j0ocY1llwIDAQAB
o4ICKzCCAicwHQYDVR0OBBYEFMKWFXYms49HNj6ZEEYeRl/B/wPIMB8GA1UdIwQY
MBaAFOOfGm6EwCd+/LVtlCsOteRWRxEpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDU4YWJvVEFKMzc4dFcyVUt3NjE1RlpIRVNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8xNjBhNzctNzU2ZC00NDFhLTg2YzMt
MGU1MzkyNzU3ZjgyLzEvd3BZVmRpYXpqMGMyUHBrUVJoNUdYOEhfQThnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS8xNjBhNzctNzU2ZC00NDFhLTg2YzMtMGU1MzkyNzU3Zjgy
LzEvNDU4YWJvVEFKMzc4dFcyVUt3NjE1RlpIRVNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAYBAIAATASAwQDBSLgAwQE
URRwAwQBvEokMBQEAgACMA4DBQAqA0siAwUAKgNogDANBgkqhkiG9w0BAQsFAAOC
AQEATINFYtq668vtXEJQOJi2Mp/eY9xO+WUYEzARZ1QxTA5y3EzGQFgNFEQjRfLJ
kHp6myI2OswmkTzA8oTVPV3uehDU5g8di3XalqqqHJaKFZyrPKLnvaw/jfu6Zmxa
CYozYioRGQnYiYIdmF3g42QR9hB1a5lQYsr7CAgDTaRg8luaqD5ZXXxwkW67IFMG
LZDbpUFZ1BPu6HdLUXLcjM2TcuC9TvMwlMSgFVZjG8aDvHGpN89kCkgyX7gZR3Pq
6cF9bTjcp4hfFInxmdZRezyOFSQDhsGkId7sgHojMs2MR//3nxT/Mn/g5nCOkrNb
udGU9TfPXhRA9X63I43aLJDCqA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:27 2024 by rpki-client on console-ams.rpki-client.org