Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/wU-3zFQ91AXY8pJiNnYujlQP8HU.roa
File: wU-3zFQ91AXY8pJiNnYujlQP8HU.roa (raw, json)
Hash identifier: 1OZIbcVakjC1MpE6PMT3lvJYpZ7KpRq/1njtjLYzB5Y=
Subject key identifier: C1:4F:B7:CC:54:3D:D4:05:D8:F2:92:62:36:76:2E:8E:54:0F:F0:75
Certificate issuer: /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Certificate serial: 1F96B0CD
Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/wU-3zFQ91AXY8pJiNnYujlQP8HU.roa
Signing time: Sat 01 Jan 2022 14:06:40 +0000
ROA not before: Sat 01 Jan 2022 14:06:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60461
IP address blocks: 176.100.37.0/24 maxlen: 24
176.100.36.0/24 maxlen: 24
176.100.39.0/24 maxlen: 24
37.114.39.0/24 maxlen: 24
94.154.50.0/24 maxlen: 24
2a00:ccc3::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 529969357 (0x1f96b0cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Validity
Not Before: Jan 1 14:06:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c14fb7cc543dd405d8f2926236762e8e540ff075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e0:6e:f4:44:48:f0:66:42:94:90:e8:3f:c3:
f9:c1:05:27:f9:9a:c9:6a:7d:57:6b:c7:37:e6:b1:
29:a9:3b:66:f7:04:42:39:93:50:17:9e:79:8d:fb:
94:e3:90:43:2a:86:75:66:ed:ea:cb:36:b4:8e:19:
ff:1a:34:49:d2:78:a5:6f:cd:23:eb:89:48:26:19:
12:c3:27:08:d0:26:4a:c0:f8:1e:dd:1e:f5:ee:ef:
43:84:70:c2:27:3e:6e:12:0d:60:b3:32:af:dc:81:
12:d9:70:3f:32:0d:13:a6:63:21:0b:b7:f6:1e:14:
e3:b3:67:8e:cd:5c:ab:ba:04:88:a4:11:f7:8d:a3:
ac:f6:b5:50:36:af:7d:01:e5:b6:44:15:68:a3:bc:
0e:46:d9:57:67:3d:d5:96:1b:85:61:b3:af:37:57:
3e:f4:ba:8d:e4:0b:da:af:19:ed:3e:97:18:ec:d6:
4d:a6:93:52:ee:b4:63:7f:31:69:93:2d:fb:32:e5:
58:63:0e:e5:e1:f9:1c:71:5d:1b:d0:c0:79:b7:98:
23:6c:da:13:8f:73:3e:b2:66:a1:70:e6:f7:2e:cf:
29:c2:bd:4c:59:aa:aa:b8:b3:30:99:ca:60:34:70:
35:3c:4a:60:9c:3c:a6:a3:09:7f:b4:47:18:fa:28:
6c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:4F:B7:CC:54:3D:D4:05:D8:F2:92:62:36:76:2E:8E:54:0F:F0:75
X509v3 Authority Key Identifier:
keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/wU-3zFQ91AXY8pJiNnYujlQP8HU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.114.39.0/24
94.154.50.0/24
176.100.36.0/23
176.100.39.0/24
IPv6:
2a00:ccc3::/32
Signature Algorithm: sha256WithRSAEncryption
95:6c:16:9d:30:a5:49:99:3b:fa:12:ea:cf:25:3a:15:7a:7e:
91:29:4b:61:e3:44:37:f3:df:30:b9:47:b4:96:19:f4:21:27:
d9:92:61:b6:4e:10:59:2e:71:c5:38:9e:9a:aa:93:2c:37:9b:
ea:41:12:45:89:42:df:fc:fc:0c:92:b4:51:da:43:52:79:c0:
62:c5:7d:e8:32:0d:49:c6:f3:a7:ec:7a:01:8e:78:67:b0:12:
19:a4:3a:95:39:3d:ba:62:49:c8:2c:23:ec:e3:0b:ff:4d:ac:
13:5b:76:5d:de:d7:87:f9:db:ab:f7:db:8b:2b:ab:74:ea:c6:
71:28:b0:16:dc:d7:0b:dd:ae:a9:e3:80:bf:88:d6:d3:b8:95:
6c:24:4b:3d:1f:d3:df:ba:9e:8c:76:54:08:28:a1:3b:bc:17:
eb:5e:af:d1:ed:6e:a2:22:50:3f:08:d8:d6:6b:d6:79:1d:d3:
ee:5d:7f:a7:22:f2:93:7f:0b:96:c6:5c:5e:dc:44:de:37:7c:
46:aa:90:cf:4c:ba:96:01:c5:80:8a:ee:a5:86:93:8f:d2:4f:
e0:6f:45:88:88:1d:ee:57:43:c8:1d:c5:b1:30:7a:45:9e:23:
60:f4:24:12:42:18:76:47:f2:6d:94:70:70:0b:fe:2b:4e:40:
96:b8:28:35
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIEH5awzTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
OTY1OTNiNzQ3ZTc2YTU2NDkyNTExYmIzNjEyZTRkNWU0Y2JlN2VjMB4XDTIyMDEw
MTE0MDY0MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzE0ZmI3Y2M1NDNk
ZDQwNWQ4ZjI5MjYyMzY3NjJlOGU1NDBmZjA3NTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANDgbvRESPBmQpSQ6D/D+cEFJ/mayWp9V2vHN+axKak7ZvcE
QjmTUBeeeY37lOOQQyqGdWbt6ss2tI4Z/xo0SdJ4pW/NI+uJSCYZEsMnCNAmSsD4
Ht0e9e7vQ4Rwwic+bhINYLMyr9yBEtlwPzINE6ZjIQu39h4U47Nnjs1cq7oEiKQR
942jrPa1UDavfQHltkQVaKO8DkbZV2c91ZYbhWGzrzdXPvS6jeQL2q8Z7T6XGOzW
TaaTUu60Y38xaZMt+zLlWGMO5eH5HHFdG9DAebeYI2zaE49zPrJmoXDm9y7PKcK9
TFmqqrizMJnKYDRwNTxKYJw8pqMJf7RHGPoobJcCAwEAAaOCAiowggImMB0GA1Ud
DgQWBBTBT7fMVD3UBdjykmI2di6OVA/wdTAfBgNVHSMEGDAWgBQpZZO3R+dqVkkl
Ebs2EuTV5Mvn7DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0tXV1R0MGZuYWxaSkpSRzdOaExrMWVUTDUtdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGUvYzU4YmRjLTE0ZTctNDk5Yy05ZDljLTFiN2NiYjA4ZDczZi8x
L3dVLTN6RlE5MUFYWThwSmlObll1amxRUDhIVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGUv
YzU4YmRjLTE0ZTctNDk5Yy05ZDljLTFiN2NiYjA4ZDczZi8xL0tXV1R0MGZuYWxa
SkpSRzdOaExrMWVUTDUtdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBA
BggrBgEFBQcBBwEB/wQxMC8wHgQCAAEwGAMEACVyJwMEAF6aMgMEAbBkJAMEALBk
JzANBAIAAjAHAwUAKgDMwzANBgkqhkiG9w0BAQsFAAOCAQEAlWwWnTClSZk7+hLq
zyU6FXp+kSlLYeNEN/PfMLlHtJYZ9CEn2ZJhtk4QWS5xxTiemqqTLDeb6kESRYlC
3/z8DJK0UdpDUnnAYsV96DINScbzp+x6AY54Z7ASGaQ6lTk9umJJyCwj7OML/02s
E1t2Xd7Xh/nbq/fbiyurdOrGcSiwFtzXC92uqeOAv4jW07iVbCRLPR/T37qejHZU
CCihO7wX616v0e1uoiJQPwjY1mvWeR3T7l1/pyLyk38LlsZcXtxE3jd8RqqQz0y6
lgHFgIrupYaTj9JP4G9FiIgd7ldDyB3FsTB6RZ4jYPQkEkIYdkfybZRwcAv+K05A
lrgoNQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:00 2023 by rpki-client on console-fra.rpki-client.org