Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/862232-58d7-4c1d-b198-660411b9d167/1/awglcYCTFcdBubuLQNffCgb5jt8.roa
File: awglcYCTFcdBubuLQNffCgb5jt8.roa (raw, json)
Hash identifier: cViWqIj+f6d30PhejS9vzcj90aiW/6MPaUi0Jvwvw5E=
Subject key identifier: 6B:08:25:71:80:93:15:C7:41:B9:BB:8B:40:D7:DF:0A:06:F9:8E:DF
Certificate issuer: /CN=5c76eff26884bf006207d722b3b01a44d2b56199
Certificate serial: 0184F612D6DDBFA9B7DAC76E86F9049355FD
Authority key identifier: 5C:76:EF:F2:68:84:BF:00:62:07:D7:22:B3:B0:1A:44:D2:B5:61:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHbv8miEvwBiB9cis7AaRNK1YZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/862232-58d7-4c1d-b198-660411b9d167/1/awglcYCTFcdBubuLQNffCgb5jt8.roa
Signing time: Fri 09 Dec 2022 08:49:00 +0000
ROA not before: Fri 09 Dec 2022 08:49:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202949
IP address blocks: 185.174.58.0/24 maxlen: 24
185.174.57.0/24 maxlen: 24
185.174.59.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f6:12:d6:dd:bf:a9:b7:da:c7:6e:86:f9:04:93:55:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c76eff26884bf006207d722b3b01a44d2b56199
Validity
Not Before: Dec 9 08:49:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6b082571809315c741b9bb8b40d7df0a06f98edf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b0:88:e8:70:b8:58:8b:82:6e:8a:58:2a:20:
34:83:fe:93:90:be:98:c5:4a:1d:63:1c:4e:cf:50:
ad:02:0e:49:83:25:3e:ce:39:2c:da:92:ae:36:35:
ef:6c:a8:cf:65:ce:53:02:02:29:ab:fb:25:c1:12:
11:83:97:6e:b0:ed:b0:e9:05:61:71:ab:4c:3b:8e:
dd:ed:ff:48:0e:e7:48:cb:af:8e:88:a5:02:a7:a2:
4b:5e:ba:c5:89:1c:95:d2:59:49:03:14:c7:e9:7f:
ff:36:bb:2b:21:13:66:98:45:e5:27:cc:07:c4:4b:
28:42:46:53:a6:e4:6e:d0:b8:b1:aa:5f:c3:69:3a:
d3:20:26:32:e1:a5:1c:19:80:d0:65:47:20:ff:3f:
3f:9c:ec:96:80:44:8e:d3:82:85:0a:5e:11:13:8d:
6c:be:70:90:1e:7b:ac:f5:c6:43:fa:cf:a5:65:e3:
93:20:ce:77:57:ad:00:d6:b3:e6:95:b3:a0:52:1e:
a3:d0:dc:c7:aa:cc:0f:60:73:32:15:e6:76:25:6d:
4c:8b:f6:08:08:84:eb:c5:c2:21:b7:b8:a5:ca:d2:
81:15:81:45:90:fd:70:dc:ad:6e:ed:9e:50:ec:de:
98:f2:59:8e:01:d2:42:34:3c:c1:ee:72:8b:44:ce:
b8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:08:25:71:80:93:15:C7:41:B9:BB:8B:40:D7:DF:0A:06:F9:8E:DF
X509v3 Authority Key Identifier:
keyid:5C:76:EF:F2:68:84:BF:00:62:07:D7:22:B3:B0:1A:44:D2:B5:61:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHbv8miEvwBiB9cis7AaRNK1YZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/862232-58d7-4c1d-b198-660411b9d167/1/awglcYCTFcdBubuLQNffCgb5jt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/862232-58d7-4c1d-b198-660411b9d167/1/XHbv8miEvwBiB9cis7AaRNK1YZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.174.57.0-185.174.59.255
Signature Algorithm: sha256WithRSAEncryption
76:2b:86:c2:c6:b4:8b:99:a2:73:2e:c6:c7:b0:7e:af:23:be:
9f:70:5a:12:4d:a8:4d:09:7e:00:8e:d0:d3:ab:39:9f:71:e1:
c3:d3:bc:de:1f:a9:91:93:e9:fa:88:d1:5a:3b:69:d6:6d:fb:
17:be:91:f1:37:d2:91:5c:60:f8:81:23:41:ba:24:02:fa:69:
c1:4f:bb:ff:a5:3a:ad:e0:fe:ec:dd:09:51:9d:69:a4:f4:8e:
82:63:8c:9a:61:cf:2e:ab:e2:2d:de:61:0d:0b:b5:01:d3:b6:
3c:54:d7:4a:ab:a3:7c:b1:a2:6b:d9:6f:f4:98:27:eb:c8:7c:
7b:b1:06:b7:19:c1:cc:f7:95:37:9a:87:48:54:0b:6b:f1:83:
a3:a2:09:03:d4:c4:1b:f6:5f:b8:b0:39:d6:17:dc:d5:0e:a4:
28:15:6d:14:d0:5c:15:2a:59:ee:29:36:96:1e:da:b9:09:ee:
82:4c:ed:bc:f7:7c:5c:b8:cd:a4:33:04:98:07:e3:45:cf:77:
bd:b7:be:0d:31:7b:3e:ce:bb:53:a1:20:1a:0e:34:a0:e8:bb:
14:47:44:08:5a:ff:5d:0b:38:40:1f:15:80:76:40:6c:3f:91:
db:71:43:dd:be:ee:ec:e7:f4:a9:26:a4:99:d5:03:2f:37:a9:
89:eb:b1:db
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYT2Etbdv6m32sduhvkEk1X9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNzZlZmYyNjg4NGJmMDA2MjA3ZDcyMmIzYjAxYTQ0ZDJi
NTYxOTkwHhcNMjIxMjA5MDg0OTAwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YjA4MjU3MTgwOTMxNWM3NDFiOWJiOGI0MGQ3ZGYwYTA2Zjk4ZWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrCI6HC4WIuCbopYKiA0g/6TkL6Y
xUodYxxOz1CtAg5JgyU+zjks2pKuNjXvbKjPZc5TAgIpq/slwRIRg5dusO2w6QVh
catMO47d7f9IDudIy6+OiKUCp6JLXrrFiRyV0llJAxTH6X//NrsrIRNmmEXlJ8wH
xEsoQkZTpuRu0Lixql/DaTrTICYy4aUcGYDQZUcg/z8/nOyWgESO04KFCl4RE41s
vnCQHnus9cZD+s+lZeOTIM53V60A1rPmlbOgUh6j0NzHqswPYHMyFeZ2JW1Mi/YI
CITrxcIht7ilytKBFYFFkP1w3K1u7Z5Q7N6Y8lmOAdJCNDzB7nKLRM64UwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFGsIJXGAkxXHQbm7i0DX3woG+Y7fMB8GA1UdIwQY
MBaAFFx27/JohL8AYgfXIrOwGkTStWGZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEhidjhtaUV2d0JpQjljaXM3QWFSTksxWVprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny84NjIyMzItNThkNy00YzFkLWIxOTgt
NjYwNDExYjlkMTY3LzEvYXdnbGNZQ1RGY2RCdWJ1TFFOZmZDZ2I1anQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny84NjIyMzItNThkNy00YzFkLWIxOTgtNjYwNDExYjlkMTY3
LzEvWEhidjhtaUV2d0JpQjljaXM3QWFSTksxWVprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAC5rjkD
BAK5rjgwDQYJKoZIhvcNAQELBQADggEBAHYrhsLGtIuZonMuxsewfq8jvp9wWhJN
qE0JfgCO0NOrOZ9x4cPTvN4fqZGT6fqI0Vo7adZt+xe+kfE30pFcYPiBI0G6JAL6
acFPu/+lOq3g/uzdCVGdaaT0joJjjJphzy6r4i3eYQ0LtQHTtjxU10qro3yxomvZ
b/SYJ+vIfHuxBrcZwcz3lTeah0hUC2vxg6OiCQPUxBv2X7iwOdYX3NUOpCgVbRTQ
XBUqWe4pNpYe2rkJ7oJM7bz3fFy4zaQzBJgH40XPd723vg0xez7Ou1OhIBoONKDo
uxRHRAha/10LOEAfFYB2QGw/kdtxQ92+7uzn9KkmpJnVAy83qYnrsds=
-----END CERTIFICATE-----
Generated at Tue Apr 8 03:51:18 2025 by rpki-client