Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/wdpB7QSlwSg_gXqHD-oOTnBB8mk.roa
File: wdpB7QSlwSg_gXqHD-oOTnBB8mk.roa (raw, json)
Hash identifier: Pb5zo9J3sx3hYwKQQEbFNUmFehyasHQePOp0WlAMoSQ=
Subject key identifier: C1:DA:41:ED:04:A5:C1:28:3F:81:7A:87:0F:EA:0E:4E:70:41:F2:69
Certificate issuer: /CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Certificate serial: 066D580C
Authority key identifier: 8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/wdpB7QSlwSg_gXqHD-oOTnBB8mk.roa
Signing time: Tue 29 Mar 2022 08:21:18 +0000
ROA not before: Tue 29 Mar 2022 08:21:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209372
IP address blocks: 158.46.251.0/24 maxlen: 24
158.46.250.0/24 maxlen: 24
178.171.69.0/24 maxlen: 24
178.171.88.0/23 maxlen: 23
178.171.104.0/24 maxlen: 24
178.171.100.0/24 maxlen: 24
158.46.200.0/21 maxlen: 21
178.171.36.0/24 maxlen: 24
178.171.37.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107829260 (0x66d580c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Validity
Not Before: Mar 29 08:21:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c1da41ed04a5c1283f817a870fea0e4e7041f269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b9:2e:c7:ca:14:e0:6b:d1:b8:3e:fa:30:82:
eb:92:db:1c:f0:df:a3:64:2f:77:3b:96:0a:f4:8d:
a3:f4:a6:d7:c6:0e:ec:4f:ea:f9:ef:f5:2b:3a:cc:
25:3a:57:08:f8:13:07:a7:57:42:3e:70:c9:b5:c6:
41:28:dd:e6:0a:d5:b1:04:57:cd:bf:24:ff:43:7b:
50:14:d3:50:a6:d7:80:40:5d:fa:c6:84:73:18:c0:
90:37:b6:b5:9c:c9:09:d6:b1:de:08:b1:77:dd:ec:
57:0d:b3:9a:4f:0e:d3:e3:37:6f:6c:e1:f1:97:cf:
0e:5b:32:1e:66:0c:46:b3:61:e8:1d:a7:3e:1a:a7:
a9:1a:cc:b5:34:fa:81:e7:c7:a0:43:cb:0b:88:b3:
56:16:6b:f0:50:43:6c:bf:1f:3c:ee:98:90:6f:5c:
78:df:8d:eb:32:94:b7:f3:e2:2a:00:8c:8e:c3:f8:
6a:43:c4:fc:ba:e7:4d:a8:ae:31:ba:4b:55:6d:c7:
15:88:da:e7:cf:1e:d2:23:5c:f6:89:40:a8:9a:80:
5a:18:bd:7d:24:52:8e:35:c9:9e:6d:af:51:e6:36:
00:94:7f:6c:85:8f:2e:4e:d9:8a:da:2e:a0:2e:5f:
2c:fa:d4:07:f1:ef:2c:ae:a2:f9:06:d3:f4:3c:22:
42:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:DA:41:ED:04:A5:C1:28:3F:81:7A:87:0F:EA:0E:4E:70:41:F2:69
X509v3 Authority Key Identifier:
keyid:8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/wdpB7QSlwSg_gXqHD-oOTnBB8mk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.46.200.0/21
158.46.250.0/23
178.171.36.0/23
178.171.69.0/24
178.171.88.0/23
178.171.100.0/24
178.171.104.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:8d:c9:7b:12:f3:47:e5:86:d2:47:3b:a0:bf:41:f3:16:eb:
ac:37:ff:97:16:c6:09:ce:5f:62:ab:4b:7d:39:3b:1c:6e:36:
49:7a:09:c6:aa:33:b1:93:7a:59:03:78:fb:70:02:1f:61:c7:
de:d0:61:c8:56:3a:30:f7:d8:72:9f:bb:70:d9:da:aa:e0:4a:
fb:53:8e:ed:67:48:b6:c0:d3:be:95:49:40:99:b7:1b:bb:1f:
1d:57:df:5e:50:6f:e3:cc:1f:e2:2c:ce:4d:76:e6:20:4e:7c:
27:fb:ae:a7:7e:4c:1d:07:f2:12:9c:23:03:cc:c9:a2:bd:52:
c0:7f:cb:8c:c0:c2:48:88:25:fe:5d:d6:25:f3:92:20:70:28:
18:1f:12:d4:74:45:1d:90:cc:ff:68:54:cd:b0:63:4a:ba:d1:
66:64:55:8c:c6:fc:2b:86:22:d4:cc:38:6f:ad:b7:ce:00:78:
cc:44:d4:b8:25:ee:9e:a6:a7:f6:56:c1:09:d1:ef:35:4f:28:
65:db:ef:19:25:ff:62:b5:87:96:2d:a3:1b:8f:c9:88:3a:68:
ec:80:92:f4:a1:9e:3a:4e:98:a2:60:0c:39:ff:e5:99:c9:57:
8e:82:b2:19:c6:ea:d9:6f:83:23:c1:f8:06:10:90:f7:5e:15:
78:b2:7d:13
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIEBm1YDDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
ZDExY2IwMTVkZjliYWFiNjEyMjhkYmJjZTE3ZGQ0ZTAwZTYzYzEzMB4XDTIyMDMy
OTA4MjExOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzFkYTQxZWQwNGE1
YzEyODNmODE3YTg3MGZlYTBlNGU3MDQxZjI2OTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANS5LsfKFOBr0bg++jCC65LbHPDfo2QvdzuWCvSNo/Sm18YO
7E/q+e/1KzrMJTpXCPgTB6dXQj5wybXGQSjd5grVsQRXzb8k/0N7UBTTUKbXgEBd
+saEcxjAkDe2tZzJCdax3gixd93sVw2zmk8O0+M3b2zh8ZfPDlsyHmYMRrNh6B2n
PhqnqRrMtTT6gefHoEPLC4izVhZr8FBDbL8fPO6YkG9ceN+N6zKUt/PiKgCMjsP4
akPE/LrnTaiuMbpLVW3HFYja588e0iNc9olAqJqAWhi9fSRSjjXJnm2vUeY2AJR/
bIWPLk7ZitouoC5fLPrUB/HvLK6i+QbT9DwiQpkCAwEAAaOCAi0wggIpMB0GA1Ud
DgQWBBTB2kHtBKXBKD+BeocP6g5OcEHyaTAfBgNVHSMEGDAWgBSNEcsBXfm6q2Ei
jbvOF91OAOY8EzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2pSSExBVjM1dXF0aElvMjd6aGZkVGdEbVBCTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDYvNWQ4OTE1LWM0NDgtNDBlNy04Y2FhLWJhNzcxZmZkMjY5Yy8x
L3dkcEI3UVNsd1NnX2dYcUhELW9PVG5CQjhtay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDYv
NWQ4OTE1LWM0NDgtNDBlNy04Y2FhLWJhNzcxZmZkMjY5Yy8xL2pSSExBVjM1dXF0
aElvMjd6aGZkVGdEbVBCTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBD
BggrBgEFBQcBBwEB/wQ0MDIwMAQCAAEwKgMEA54uyAMEAZ4u+gMEAbKrJAMEALKr
RQMEAbKrWAMEALKrZAMEALKraDANBgkqhkiG9w0BAQsFAAOCAQEAC43JexLzR+WG
0kc7oL9B8xbrrDf/lxbGCc5fYqtLfTk7HG42SXoJxqozsZN6WQN4+3ACH2HH3tBh
yFY6MPfYcp+7cNnaquBK+1OO7WdItsDTvpVJQJm3G7sfHVffXlBv48wf4izOTXbm
IE58J/uup35MHQfyEpwjA8zJor1SwH/LjMDCSIgl/l3WJfOSIHAoGB8S1HRFHZDM
/2hUzbBjSrrRZmRVjMb8K4Yi1Mw4b623zgB4zETUuCXunqan9lbBCdHvNU8oZdvv
GSX/YrWHli2jG4/JiDpo7ICS9KGeOk6YomAMOf/lmclXjoKyGcbq2W+DI8H4BhCQ
914VeLJ9Ew==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:09 2024 by rpki-client on console-ams.rpki-client.org