Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/Wl10dsc8te1CmgI17FQeUTis_GQ.roa
File: Wl10dsc8te1CmgI17FQeUTis_GQ.roa (raw, json)
Hash identifier: pCbKj/0LHZYS+/Xtl4x9c041sCn/iILswvM99YWVDwA=
Subject key identifier: 5A:5D:74:76:C7:3C:B5:ED:42:9A:02:35:EC:54:1E:51:38:AC:FC:64
Certificate issuer: /CN=4c37f27eb4997b3bef9f28266a39694050fe74f9
Certificate serial: 0183CB4CEC0D167E665207BFA8D06ABF0097
Authority key identifier: 4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/Wl10dsc8te1CmgI17FQeUTis_GQ.roa
Signing time: Wed 12 Oct 2022 08:25:59 +0000
ROA not before: Wed 12 Oct 2022 08:25:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12975
IP address blocks: 103.215.4.0/22 maxlen: 22
43.255.108.0/22 maxlen: 22
182.161.60.0/22 maxlen: 22
1.178.112.0/20 maxlen: 20
1.178.128.0/20 maxlen: 20
45.127.179.0/24 maxlen: 24
45.127.178.0/24 maxlen: 24
45.127.177.0/24 maxlen: 24
45.127.176.0/22 maxlen: 22
45.127.176.0/24 maxlen: 24
213.244.121.0/24 maxlen: 24
139.190.176.0/20 maxlen: 20
213.244.71.0/24 maxlen: 24
213.244.70.0/23 maxlen: 24
213.244.70.0/24 maxlen: 24
83.244.78.0/24 maxlen: 24
213.244.76.0/24 maxlen: 24
83.244.75.0/24 maxlen: 24
144.48.236.0/22 maxlen: 22
83.244.74.0/24 maxlen: 24
83.244.73.0/24 maxlen: 24
213.244.73.0/24 maxlen: 24
213.244.72.0/21 maxlen: 24
213.244.72.0/24 maxlen: 24
83.244.79.0/24 maxlen: 24
24.42.64.0/18 maxlen: 18
103.231.105.0/24 maxlen: 24
103.231.104.0/24 maxlen: 24
103.231.107.0/24 maxlen: 24
103.231.106.0/24 maxlen: 24
103.53.4.0/22 maxlen: 24
103.53.4.0/24 maxlen: 24
103.248.38.0/24 maxlen: 24
103.248.37.0/24 maxlen: 24
103.248.36.0/24 maxlen: 24
193.227.236.0/23 maxlen: 23
103.248.39.0/24 maxlen: 24
103.196.120.0/22 maxlen: 22
103.206.108.0/22 maxlen: 22
103.193.132.0/22 maxlen: 22
193.223.252.0/23 maxlen: 23
203.189.236.0/22 maxlen: 22
103.239.96.0/22 maxlen: 22
103.37.85.0/24 maxlen: 24
103.37.84.0/24 maxlen: 24
103.37.84.0/22 maxlen: 22
103.37.87.0/24 maxlen: 24
103.37.86.0/24 maxlen: 24
113.212.64.0/22 maxlen: 22
45.121.105.0/24 maxlen: 24
45.121.104.0/22 maxlen: 22
45.121.106.0/23 maxlen: 23
1.179.40.0/21 maxlen: 21
103.206.36.0/22 maxlen: 22
1.179.72.0/21 maxlen: 21
1.179.88.0/21 maxlen: 21
43.243.24.0/22 maxlen: 22
103.27.144.0/22 maxlen: 22
43.243.35.0/24 maxlen: 24
43.243.34.0/24 maxlen: 24
43.243.32.0/24 maxlen: 24
43.243.32.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:cb:4c:ec:0d:16:7e:66:52:07:bf:a8:d0:6a:bf:00:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c37f27eb4997b3bef9f28266a39694050fe74f9
Validity
Not Before: Oct 12 08:25:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5a5d7476c73cb5ed429a0235ec541e5138acfc64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:f6:14:a7:1c:4b:12:ad:47:72:6f:72:5c:0c:
1f:56:c8:e4:23:2b:f9:11:7b:40:c3:4b:21:9b:d4:
1c:be:44:5a:49:49:67:16:4e:dd:f8:22:24:be:a9:
42:19:b4:59:a7:d6:3c:4f:1a:8e:41:29:4c:a6:0b:
80:d3:6e:5c:8a:26:0e:c5:9d:b8:e8:4f:bf:7b:e0:
d5:a9:99:c8:f5:ce:3a:91:0f:fd:2a:c5:d0:78:c3:
a2:68:74:19:aa:53:23:76:8a:5a:ca:d6:d2:1a:7c:
85:0a:0d:18:c2:81:dc:4f:12:75:ee:76:f9:ca:32:
7b:86:64:b5:54:95:e3:e2:e0:43:5a:36:97:b7:b4:
d4:8e:b1:97:bd:2d:da:39:2d:b5:ea:04:55:e4:85:
89:ac:38:a8:d2:2e:0e:5b:e0:40:36:b2:4b:ad:88:
0e:07:af:11:e3:32:b5:fd:9b:3b:17:23:fa:ae:49:
73:cd:61:b5:42:84:56:b3:3e:95:ef:f1:1b:f0:75:
32:7f:8c:14:4a:16:e8:c3:8f:5d:0c:56:94:68:89:
7d:cc:64:c8:1d:77:ad:3f:6f:19:61:93:bf:ea:c3:
fa:e8:b4:a6:91:c5:76:44:fa:a7:45:e5:6a:11:fe:
10:75:c9:cd:d6:b2:c0:9a:6a:25:43:7d:08:96:61:
7b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:5D:74:76:C7:3C:B5:ED:42:9A:02:35:EC:54:1E:51:38:AC:FC:64
X509v3 Authority Key Identifier:
keyid:4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/Wl10dsc8te1CmgI17FQeUTis_GQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
1.178.112.0-1.178.143.255
1.179.40.0/21
1.179.72.0/21
1.179.88.0/21
24.42.64.0/18
43.243.24.0/22
43.243.32.0/22
43.255.108.0/22
45.121.104.0/22
45.127.176.0/22
83.244.73.0-83.244.75.255
83.244.78.0/23
103.27.144.0/22
103.37.84.0/22
103.53.4.0/22
103.193.132.0/22
103.196.120.0/22
103.206.36.0/22
103.206.108.0/22
103.215.4.0/22
103.231.104.0/22
103.239.96.0/22
103.248.36.0/22
113.212.64.0/22
139.190.176.0/20
144.48.236.0/22
182.161.60.0/22
193.223.252.0/23
193.227.236.0/23
203.189.236.0/22
213.244.70.0-213.244.79.255
213.244.121.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:8c:49:37:7c:43:dd:ea:4e:84:d3:24:94:73:11:19:21:10:
51:43:7b:10:a0:29:ef:f0:39:39:53:32:4c:13:4e:4c:12:6a:
cf:99:c4:c8:81:87:ef:91:16:6b:a1:21:d1:ba:e8:90:ae:28:
2c:1b:e2:82:ae:95:45:4d:9d:2f:48:77:48:29:7c:f3:b3:29:
38:81:d6:ca:f8:61:6e:43:38:32:ed:4a:72:a4:56:60:2b:f1:
6e:f5:eb:06:fa:a1:30:71:e2:3b:dd:b8:53:8e:27:aa:ec:e4:
35:0a:86:21:d7:76:63:9b:b7:38:52:98:d0:36:d2:35:4a:d7:
07:08:ba:7b:8c:bb:ae:e4:18:38:a4:7b:d0:f5:89:69:30:c9:
ad:a6:6b:56:5d:ae:ed:78:ac:08:0d:6f:7d:a6:45:7b:19:1f:
6e:6d:e1:56:51:88:8c:29:da:15:df:39:5d:29:5b:8a:1c:ca:
43:88:c0:1d:2d:76:f2:e0:af:f5:ba:30:a4:1e:95:45:f7:a1:
9d:14:72:58:c5:49:19:4a:9e:2f:61:61:fc:67:bf:b8:e7:51:
e8:37:c5:c9:1b:3b:bf:02:19:08:c1:dd:34:4e:e9:d2:02:a3:
64:fd:99:5c:04:05:18:aa:f1:f7:4a:7d:66:68:9d:ed:f3:71:
08:69:b0:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:12:10 2024 by rpki-client on console-ams.rpki-client.org