Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/WX0wYZwa_YcYbGM854sENahmjrs.roa
File: WX0wYZwa_YcYbGM854sENahmjrs.roa (raw, json)
Hash identifier: MFROGfdTEAtSc2QEv0e+aonijLSaEAyw5DDMNRX97/o=
Subject key identifier: 59:7D:30:61:9C:1A:FD:87:18:6C:63:3C:E7:8B:04:35:A8:66:8E:BB
Certificate issuer: /CN=7445ddeedfbd72d313e9ee8cceeae8403cc34146
Certificate serial: 0182342BD1F375116251E6534BA318E3BAE9
Authority key identifier: 74:45:DD:EE:DF:BD:72:D3:13:E9:EE:8C:CE:EA:E8:40:3C:C3:41:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dEXd7t-9ctMT6e6MzuroQDzDQUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/WX0wYZwa_YcYbGM854sENahmjrs.roa
Signing time: Mon 25 Jul 2022 07:04:23 +0000
ROA not before: Mon 25 Jul 2022 07:04:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 88.202.210.0/24 maxlen: 24
88.202.208.0/24 maxlen: 24
88.202.208.0/23 maxlen: 23
88.212.158.0/24 maxlen: 24
88.212.159.0/24 maxlen: 24
88.212.156.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:34:2b:d1:f3:75:11:62:51:e6:53:4b:a3:18:e3:ba:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7445ddeedfbd72d313e9ee8cceeae8403cc34146
Validity
Not Before: Jul 25 07:04:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=597d30619c1afd87186c633ce78b0435a8668ebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:de:4b:41:50:99:7d:8a:3d:78:2b:f6:90:50:
be:2a:d3:18:6b:2a:c0:31:a9:a8:9f:b6:bc:5f:c9:
5b:7e:f6:e4:e0:62:94:3c:c5:7b:16:97:e4:f0:c0:
b3:cb:0e:b3:6a:d5:16:c4:64:e3:56:2d:d7:f5:34:
03:50:6a:1d:5d:75:4f:56:90:85:18:3e:86:b2:5c:
a1:18:c6:b6:0d:94:15:48:94:a5:c4:89:4e:8a:cf:
27:fd:48:c0:84:28:fe:bc:39:a9:f9:c5:e2:3f:16:
9a:e7:66:31:e1:57:45:cf:0a:f1:10:19:8c:d3:a6:
fa:c4:59:f7:98:c0:87:74:76:f7:6d:22:c0:df:dd:
07:78:c7:32:d3:5d:98:cf:ba:90:c1:bf:b5:a3:94:
e4:cd:16:06:0e:66:14:a7:d0:37:c2:b0:c9:7f:8c:
fd:39:1a:81:67:26:8b:75:cb:8f:e6:1c:27:95:17:
ea:88:17:47:62:17:91:52:0d:5b:ad:e3:58:ee:20:
45:ea:4e:c0:92:02:29:cd:bf:0c:c2:56:51:df:2e:
2e:88:d3:79:44:34:d1:ac:f1:79:0a:ef:2a:ba:ed:
53:ee:0c:da:14:ef:94:b4:d9:3a:d2:6a:4d:c2:70:
ce:f7:2d:83:cf:bd:c1:c3:57:6e:f9:90:bf:f7:da:
77:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:7D:30:61:9C:1A:FD:87:18:6C:63:3C:E7:8B:04:35:A8:66:8E:BB
X509v3 Authority Key Identifier:
keyid:74:45:DD:EE:DF:BD:72:D3:13:E9:EE:8C:CE:EA:E8:40:3C:C3:41:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEXd7t-9ctMT6e6MzuroQDzDQUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/WX0wYZwa_YcYbGM854sENahmjrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/dEXd7t-9ctMT6e6MzuroQDzDQUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.202.208.0-88.202.210.255
88.212.156.0/24
88.212.158.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:a8:60:97:bd:54:bf:19:1a:53:41:f5:16:93:7a:31:e5:3e:
71:ab:f1:10:55:24:54:fd:25:87:4f:fd:1a:21:a1:ac:96:58:
82:08:32:85:97:ad:df:8b:4e:50:35:a9:80:a4:fb:cc:c0:bc:
38:a0:6f:17:13:ad:c4:e5:f1:b8:c9:59:5e:b2:48:5f:5e:3c:
aa:87:c8:a9:7d:25:b8:9b:47:fc:b2:4a:73:8a:f5:3e:a2:14:
ca:c7:e7:b0:f7:dd:6b:47:e4:44:7d:e6:af:46:74:69:20:aa:
87:cb:fe:f6:51:9e:31:ba:45:79:34:42:49:ba:1c:e9:21:0f:
fa:d1:8d:0a:55:b4:b2:57:6d:70:a5:7f:b0:c4:36:31:01:e8:
d8:fb:a9:ba:8b:bb:db:e8:86:45:f4:65:f0:11:e0:9a:78:87:
a3:b3:8a:48:a7:d5:33:22:b7:d7:5a:94:85:b4:4c:29:ca:69:
58:e8:0e:41:ca:4e:a3:ab:87:1d:45:08:a5:cc:ae:7e:d0:e9:
7a:d9:ea:67:46:b1:c7:6f:fa:c5:33:55:e3:b6:2c:62:e7:36:
81:14:5c:b2:74:0f:47:96:d2:ee:2b:09:ff:42:b3:42:c6:68:
6e:6d:e1:d6:89:43:ab:39:c0:ae:f4:9f:c7:6b:80:79:69:6c:
df:8a:c7:67
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYI0K9HzdRFiUeZTS6MY47rpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NDVkZGVlZGZiZDcyZDMxM2U5ZWU4Y2NlZWFlODQwM2Nj
MzQxNDYwHhcNMjIwNzI1MDcwNDIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OTdkMzA2MTljMWFmZDg3MTg2YzYzM2NlNzhiMDQzNWE4NjY4ZWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm95LQVCZfYo9eCv2kFC+KtMYayrA
Mamon7a8X8lbfvbk4GKUPMV7Fpfk8MCzyw6zatUWxGTjVi3X9TQDUGodXXVPVpCF
GD6GslyhGMa2DZQVSJSlxIlOis8n/UjAhCj+vDmp+cXiPxaa52Yx4VdFzwrxEBmM
06b6xFn3mMCHdHb3bSLA390HeMcy012Yz7qQwb+1o5TkzRYGDmYUp9A3wrDJf4z9
ORqBZyaLdcuP5hwnlRfqiBdHYheRUg1breNY7iBF6k7AkgIpzb8MwlZR3y4uiNN5
RDTRrPF5Cu8quu1T7gzaFO+UtNk60mpNwnDO9y2Dz73Bw1du+ZC/99p3fwIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFFl9MGGcGv2HGGxjPOeLBDWoZo67MB8GA1UdIwQY
MBaAFHRF3e7fvXLTE+nujM7q6EA8w0FGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEVYZDd0LTljdE1UNmU2TXp1cm9RRHpEUVVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9jMTc2NWItZTNhNS00MTBjLTljZDMt
NmNhMzQwZmE3NDkzLzEvV1gwd1lad2FfWWNZYkdNODU0c0VOYWhtanJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9jMTc2NWItZTNhNS00MTBjLTljZDMtNmNhMzQwZmE3NDkz
LzEvZEVYZDd0LTljdE1UNmU2TXp1cm9RRHpEUVVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBARYytAD
BABYytIDBABY1JwDBAFY1J4wDQYJKoZIhvcNAQELBQADggEBAEuoYJe9VL8ZGlNB
9RaTejHlPnGr8RBVJFT9JYdP/RohoayWWIIIMoWXrd+LTlA1qYCk+8zAvDigbxcT
rcTl8bjJWV6ySF9ePKqHyKl9JbibR/yySnOK9T6iFMrH57D33WtH5ER95q9GdGkg
qofL/vZRnjG6RXk0Qkm6HOkhD/rRjQpVtLJXbXClf7DENjEB6Nj7qbqLu9vohkX0
ZfAR4Jp4h6Ozikin1TMit9dalIW0TCnKaVjoDkHKTqOrhx1FCKXMrn7Q6XrZ6mdG
scdv+sUzVeO2LGLnNoEUXLJ0D0eW0u4rCf9Cs0LGaG5t4daJQ6s5wK70n8drgHlp
bN+Kx2c=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:39 2024 by rpki-client on console-fra.rpki-client.org