Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/WYO7am13m_TfE6zr9ZP8MQQo-Ss.roa
File: WYO7am13m_TfE6zr9ZP8MQQo-Ss.roa (raw, json)
Hash identifier: K9iVRDwTJIQuFWxDp5dg1uKeePlcjQKg3OAHxL+qMCI=
Subject key identifier: 59:83:BB:6A:6D:77:9B:F4:DF:13:AC:EB:F5:93:FC:31:04:28:F9:2B
Certificate issuer: /CN=95b30111b0b720a209f788c8b90f60380b465c2e
Certificate serial: 018437C7770509BD0F45215E23D45FCAFCAC
Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/WYO7am13m_TfE6zr9ZP8MQQo-Ss.roa
Signing time: Wed 02 Nov 2022 09:58:49 +0000
ROA not before: Wed 02 Nov 2022 09:58:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34471
IP address blocks: 185.228.124.0/22 maxlen: 24
185.5.84.0/22 maxlen: 24
185.176.104.0/22 maxlen: 24
46.28.160.0/21 maxlen: 24
185.10.248.0/22 maxlen: 24
91.242.148.0/22 maxlen: 24
109.235.16.0/21 maxlen: 24
176.56.64.0/19 maxlen: 24
193.246.154.0/23 maxlen: 24
193.246.156.0/23 maxlen: 24
89.40.84.0/22 maxlen: 24
185.4.32.0/22 maxlen: 24
31.25.176.0/21 maxlen: 24
185.239.160.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:37:c7:77:05:09:bd:0f:45:21:5e:23:d4:5f:ca:fc:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e
Validity
Not Before: Nov 2 09:58:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5983bb6a6d779bf4df13acebf593fc310428f92b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:24:2e:86:7b:ec:bf:50:a8:d3:42:68:a0:9d:
0e:d7:4f:5b:15:ee:4a:de:dd:bb:27:12:4b:4b:4a:
79:43:6f:03:a0:fa:1c:16:e9:56:46:73:e6:64:53:
40:e3:e3:7a:b3:d4:be:fc:c0:0f:55:2c:ad:61:e8:
7c:01:40:42:b7:90:fd:e7:dd:04:0d:8e:52:42:e5:
17:73:b6:c4:e4:0a:6f:2a:91:43:d4:36:63:90:c1:
2f:e4:b1:19:30:a1:e9:41:f2:a6:0a:b4:ec:35:40:
73:ec:dd:4c:c2:ed:cc:79:1a:cb:59:ba:27:f0:38:
f4:3a:51:85:79:57:69:47:51:e3:f5:f6:59:a6:e1:
03:ca:3c:ed:01:12:0a:fb:ac:aa:06:cb:db:b2:dd:
b2:77:07:5b:ed:b9:14:65:26:1b:82:92:d3:1e:2d:
78:a3:60:a7:43:3b:70:f5:fd:7c:1d:42:2a:2a:c3:
ca:3a:d3:42:51:9c:03:a9:99:e7:24:89:18:ca:12:
8c:9a:0d:57:26:6a:ed:23:87:d1:bb:0f:d3:34:6e:
b4:01:77:76:58:d7:fd:f9:02:d9:6a:2b:59:50:e1:
ec:56:d3:e8:c9:84:49:c6:9a:d6:c7:71:5f:51:87:
53:71:02:d2:db:60:b3:42:6d:dc:c6:03:a0:e4:86:
e9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:83:BB:6A:6D:77:9B:F4:DF:13:AC:EB:F5:93:FC:31:04:28:F9:2B
X509v3 Authority Key Identifier:
keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/WYO7am13m_TfE6zr9ZP8MQQo-Ss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.176.0/21
46.28.160.0/21
89.40.84.0/22
91.242.148.0/22
109.235.16.0/21
176.56.64.0/19
185.4.32.0/22
185.5.84.0/22
185.10.248.0/22
185.176.104.0/22
185.228.124.0/22
185.239.160.0/22
193.246.154.0-193.246.157.255
Signature Algorithm: sha256WithRSAEncryption
2e:7c:6d:d7:c9:74:dc:90:ae:94:22:32:2f:23:d3:88:11:26:
64:c3:85:d9:ad:7f:ef:b3:c1:e0:23:a8:c1:f4:d1:01:f5:d0:
c8:99:0c:0c:d0:28:98:78:78:33:db:41:e2:7b:1b:cd:fd:af:
7d:38:6c:f9:4c:07:d8:12:62:16:8b:4a:cc:83:82:17:9b:f9:
a1:08:38:42:07:e1:ac:c2:08:8a:2b:9d:7e:60:4c:1b:10:dc:
0e:cf:83:a0:92:31:08:31:d2:0f:91:e2:0a:7a:14:f1:5b:42:
62:79:0d:d5:f0:a8:2e:71:23:b9:2b:04:67:3c:1b:67:82:8b:
d0:a8:a2:56:92:b5:8d:5b:2f:d3:5c:ef:bb:3a:14:3b:2f:b4:
a8:9a:fb:19:f3:5d:3e:e1:1a:ee:1a:40:37:8e:35:d6:bd:a7:
44:ec:b1:36:1a:02:de:21:e6:e8:62:da:2d:b0:4b:ce:68:af:
19:82:33:ac:5c:69:cb:3c:06:a1:e2:bf:9c:15:a2:a1:94:cd:
05:9f:84:f6:16:ca:23:d4:0e:56:50:dd:53:2b:79:4a:19:df:
28:83:02:a7:06:28:76:04:56:48:53:13:1b:b5:bf:df:9e:5c:
f1:65:3e:25:eb:1c:da:ee:4f:1e:5a:5c:92:b5:05:81:af:ac:
42:39:95:4c
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgISAYQ3x3cFCb0PRSFeI9RfyvysMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1YjMwMTExYjBiNzIwYTIwOWY3ODhjOGI5MGY2MDM4MGI0
NjVjMmUwHhcNMjIxMTAyMDk1ODQ5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OTgzYmI2YTZkNzc5YmY0ZGYxM2FjZWJmNTkzZmMzMTA0MjhmOTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCQuhnvsv1Co00JooJ0O109bFe5K
3t27JxJLS0p5Q28DoPocFulWRnPmZFNA4+N6s9S+/MAPVSytYeh8AUBCt5D9590E
DY5SQuUXc7bE5ApvKpFD1DZjkMEv5LEZMKHpQfKmCrTsNUBz7N1Mwu3MeRrLWbon
8Dj0OlGFeVdpR1Hj9fZZpuEDyjztARIK+6yqBsvbst2ydwdb7bkUZSYbgpLTHi14
o2CnQztw9f18HUIqKsPKOtNCUZwDqZnnJIkYyhKMmg1XJmrtI4fRuw/TNG60AXd2
WNf9+QLZaitZUOHsVtPoyYRJxprWx3FfUYdTcQLS22CzQm3cxgOg5IbpswIDAQAB
o4ICWTCCAlUwHQYDVR0OBBYEFFmDu2ptd5v03xOs6/WT/DEEKPkrMB8GA1UdIwQY
MBaAFJWzARGwtyCiCfeIyLkPYDgLRlwuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wM2JmMjgtYzU1ZC00YzdhLTkxYmIt
OTE2NDZiZjAxNTNkLzEvV1lPN2FtMTNtX1RmRTZ6cjlaUDhNUVFvLVNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8wM2JmMjgtYzU1ZC00YzdhLTkxYmItOTE2NDZiZjAxNTNk
LzEvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG8GCCsGAQUFBwEHAQH/BGAwXjBcBAIAATBWAwQDHxmwAwQD
LhygAwQCWShUAwQCW/KUAwQDbesQAwQFsDhAAwQCuQQgAwQCuQVUAwQCuQr4AwQC
ubBoAwQCueR8AwQCue+gMAwDBAHB9poDBAHB9pwwDQYJKoZIhvcNAQELBQADggEB
AC58bdfJdNyQrpQiMi8j04gRJmTDhdmtf++zweAjqMH00QH10MiZDAzQKJh4eDPb
QeJ7G839r304bPlMB9gSYhaLSsyDgheb+aEIOEIH4azCCIornX5gTBsQ3A7Pg6CS
MQgx0g+R4gp6FPFbQmJ5DdXwqC5xI7krBGc8G2eCi9CoolaStY1bL9Nc77s6FDsv
tKia+xnzXT7hGu4aQDeONda9p0TssTYaAt4h5uhi2i2wS85orxmCM6xcacs8BqHi
v5wVoqGUzQWfhPYWyiPUDlZQ3VMreUoZ3yiDAqcGKHYEVkhTExu1v9+eXPFlPiXr
HNruTx5aXJK1BYGvrEI5lUw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:18 2024 by rpki-client on console-fra.rpki-client.org