Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/WTqY-8xogno47YHGTZbZ1xyZiW8.roa
File: WTqY-8xogno47YHGTZbZ1xyZiW8.roa (raw, json)
Hash identifier: AShZAaNvkBHWvPsr/i08zrHmfEB4WBhyfNvdqmi+WkM=
Subject key identifier: 59:3A:98:FB:CC:68:82:7A:38:ED:81:C6:4D:96:D9:D7:1C:99:89:6F
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 05815E08
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/WTqY-8xogno47YHGTZbZ1xyZiW8.roa
Signing time: Tue 14 Jun 2022 20:17:42 +0000
ROA not before: Tue 14 Jun 2022 20:17:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208888
IP address blocks: 141.136.63.0/24 maxlen: 24
181.41.144.0/22 maxlen: 24
181.41.156.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92364296 (0x5815e08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jun 14 20:17:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=593a98fbcc68827a38ed81c64d96d9d71c99896f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c5:88:fb:13:4f:b4:0e:ed:25:02:c5:b9:32:
f9:0a:3c:39:a9:45:9d:02:11:6c:bb:4d:0d:08:46:
bb:02:4d:09:98:ac:42:4d:1c:fb:2e:8f:1d:9b:87:
31:71:c8:72:d2:d0:47:41:8d:bf:d4:5c:71:08:4a:
37:a4:8f:10:75:c8:fc:36:b0:f5:6b:7e:3b:29:ef:
ab:a4:69:54:1f:01:cd:10:c4:74:55:ff:3b:07:de:
ab:ec:8b:59:dd:a0:2a:24:1a:c0:d3:14:cb:06:1b:
9f:ee:a6:c6:6b:08:04:87:e6:d4:b5:8e:55:88:43:
3b:34:90:1e:8e:bf:f3:fc:7a:16:82:92:79:14:25:
9e:da:ac:1a:8d:8c:02:8d:3a:ce:dd:f2:e4:f0:b7:
f9:18:a3:8e:be:dd:a7:00:4b:78:d9:03:a0:40:4c:
4a:41:42:3f:a7:74:48:6c:02:a6:65:c7:22:a5:a2:
11:52:31:f3:b4:3f:34:a9:b6:a2:25:60:58:fe:ad:
10:ed:c1:23:f2:83:72:59:f2:a4:16:d7:a1:27:5d:
2f:20:05:3a:6d:f1:7f:7f:49:d7:33:e9:50:7d:f1:
c2:c7:5a:6f:3d:0d:03:a7:67:69:76:89:a2:f2:10:
1a:43:e9:1d:39:86:86:a8:9d:2d:c5:31:7c:b5:07:
99:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:3A:98:FB:CC:68:82:7A:38:ED:81:C6:4D:96:D9:D7:1C:99:89:6F
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/WTqY-8xogno47YHGTZbZ1xyZiW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.136.63.0/24
181.41.144.0/22
181.41.156.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:19:79:1e:e9:30:6b:c4:f5:cc:e7:6f:32:a9:38:1c:69:0e:
5a:86:31:88:02:bc:f1:9b:c7:30:be:05:bc:fc:e2:26:80:a6:
1d:21:59:77:24:f2:5d:a6:60:dc:ac:9b:e1:f1:b4:69:26:bd:
7a:d0:c2:1b:6d:85:fd:75:70:e1:f6:a5:d8:cd:1e:fb:39:ec:
5b:05:69:33:6f:86:ac:01:66:85:1a:97:84:80:b2:23:4b:89:
ef:15:7f:e6:bd:f5:60:54:a4:7f:50:61:10:24:87:8c:5b:95:
41:b0:42:0b:72:19:40:e9:fa:00:43:2d:26:09:2b:af:10:04:
60:b4:97:b1:17:06:72:62:0d:82:64:3b:8f:fb:23:24:a2:b7:
d7:8f:ed:0e:9e:63:d0:e5:01:bf:95:7d:5d:81:b2:28:eb:12:
67:d2:33:38:71:21:42:5d:11:ef:64:78:bd:b1:ca:56:fe:68:
dc:37:b9:f6:d2:75:04:4b:96:db:da:7f:31:6a:79:8a:26:d9:
99:0f:10:4c:9c:b0:e3:f5:58:71:56:e1:98:33:e6:66:e0:f9:
9c:dc:a4:af:1e:fe:8f:9d:99:99:58:ca:1c:8b:4f:22:a8:63:
39:19:b3:b0:79:27:ab:83:86:82:10:89:df:00:ef:c5:44:85:
8c:0c:d7:93
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIEBYFeCDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
NTM0YzQ5ZmNmYThhNDUwNDFkOTVlZDRkOGQ0ZmM2OWM3MjdhNDY3MB4XDTIyMDYx
NDIwMTc0MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTkzYTk4ZmJjYzY4
ODI3YTM4ZWQ4MWM2NGQ5NmQ5ZDcxYzk5ODk2ZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMvFiPsTT7QO7SUCxbky+Qo8OalFnQIRbLtNDQhGuwJNCZis
Qk0c+y6PHZuHMXHIctLQR0GNv9RccQhKN6SPEHXI/Daw9Wt+Oynvq6RpVB8BzRDE
dFX/Owfeq+yLWd2gKiQawNMUywYbn+6mxmsIBIfm1LWOVYhDOzSQHo6/8/x6FoKS
eRQlntqsGo2MAo06zt3y5PC3+Rijjr7dpwBLeNkDoEBMSkFCP6d0SGwCpmXHIqWi
EVIx87Q/NKm2oiVgWP6tEO3BI/KDclnypBbXoSddLyAFOm3xf39J1zPpUH3xwsda
bz0NA6dnaXaJovIQGkPpHTmGhqidLcUxfLUHmScCAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBRZOpj7zGiCejjtgcZNltnXHJmJbzAfBgNVHSMEGDAWgBQFNMSfz6ikUEHZ
XtTY1PxpxyekZzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0JUVEVuOC1vcEZCQjJWN1UyTlQ4YWNjbnBHYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWEvMGNjYmRhLWQ2ZjEtNDUyNy04MTA2LWNkN2UwNmNiYjUzMS8x
L1dUcVktOHhvZ25vNDdZSEdUWmJaMXh5WmlXOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWEv
MGNjYmRhLWQ2ZjEtNDUyNy04MTA2LWNkN2UwNmNiYjUzMS8xL0JUVEVuOC1vcEZC
QjJWN1UyTlQ4YWNjbnBHYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAI2IPwMEArUpkAMEArUpnDANBgkq
hkiG9w0BAQsFAAOCAQEAqhl5Hukwa8T1zOdvMqk4HGkOWoYxiAK88ZvHML4FvPzi
JoCmHSFZdyTyXaZg3Kyb4fG0aSa9etDCG22F/XVw4fal2M0e+znsWwVpM2+GrAFm
hRqXhICyI0uJ7xV/5r31YFSkf1BhECSHjFuVQbBCC3IZQOn6AEMtJgkrrxAEYLSX
sRcGcmINgmQ7j/sjJKK314/tDp5j0OUBv5V9XYGyKOsSZ9IzOHEhQl0R72R4vbHK
Vv5o3De59tJ1BEuW29p/MWp5iibZmQ8QTJyw4/VYcVbhmDPmZuD5nNykrx7+j52Z
mVjKHItPIqhjORmzsHknq4OGghCJ3wDvxUSFjAzXkw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:49 2023 by rpki-client on console-fra.rpki-client.org