Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/WZlS1GtJvPAcsfkbfxYJ-y3KfcU.roa
File: WZlS1GtJvPAcsfkbfxYJ-y3KfcU.roa (raw, json)
Hash identifier: TWkFwTu5c52PeykLCcYw93CO43RYEjYQ3w6rivDEpmA=
Subject key identifier: 59:99:52:D4:6B:49:BC:F0:1C:B1:F9:1B:7F:16:09:FB:2D:CA:7D:C5
Certificate issuer: /CN=2532a5cf2ba18c753edc95ee20b666293df02d5b
Certificate serial: 0200F596
Authority key identifier: 25:32:A5:CF:2B:A1:8C:75:3E:DC:95:EE:20:B6:66:29:3D:F0:2D:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTKlzyuhjHU-3JXuILZmKT3wLVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/WZlS1GtJvPAcsfkbfxYJ-y3KfcU.roa
Signing time: Sat 01 Jan 2022 06:58:12 +0000
ROA not before: Sat 01 Jan 2022 06:58:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 33849
IP address blocks: 77.32.225.0/24 maxlen: 24
195.211.14.0/24 maxlen: 24
195.211.15.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33617302 (0x200f596)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2532a5cf2ba18c753edc95ee20b666293df02d5b
Validity
Not Before: Jan 1 06:58:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=599952d46b49bcf01cb1f91b7f1609fb2dca7dc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6f:0e:7f:43:69:b5:b4:37:e0:0e:10:26:ac:
71:92:b8:99:47:8f:05:b7:fb:41:ec:8f:11:b9:66:
7e:d4:40:3e:d2:2f:ba:97:8d:50:1f:1f:d4:ac:f3:
50:a2:52:13:0a:e6:af:f0:0f:fd:d7:03:2a:d9:7c:
ac:f5:e8:30:10:0b:35:2c:79:27:cf:8a:72:86:89:
80:38:ca:75:15:83:f6:55:fc:95:cc:b5:09:27:ed:
6b:47:46:ab:29:7d:80:b3:1f:d5:7c:21:91:68:ba:
b2:04:c3:d5:83:1e:ea:23:f5:d0:cb:31:83:ea:de:
a4:5f:ea:a2:81:6c:03:ae:82:97:a5:e1:21:2b:13:
4c:5d:bb:93:e8:fa:a2:11:44:a4:d3:83:f4:2f:1f:
52:f6:54:45:0d:6c:72:7e:76:05:6d:33:39:74:af:
2a:82:d0:b0:8c:e6:a0:52:54:96:ad:14:57:74:27:
0a:a8:71:5c:7f:f6:5c:f3:a1:28:d8:38:30:33:93:
63:2c:76:55:ee:28:4b:8a:2b:7f:ec:92:94:51:b5:
43:e8:89:54:f2:b5:06:da:a0:83:c9:50:ae:ce:cb:
60:b0:13:d3:ae:3a:9c:de:bc:a6:c0:23:f0:25:81:
0e:ef:2b:c5:76:87:c8:c2:a5:c1:1f:27:dd:b3:1a:
0d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:99:52:D4:6B:49:BC:F0:1C:B1:F9:1B:7F:16:09:FB:2D:CA:7D:C5
X509v3 Authority Key Identifier:
keyid:25:32:A5:CF:2B:A1:8C:75:3E:DC:95:EE:20:B6:66:29:3D:F0:2D:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTKlzyuhjHU-3JXuILZmKT3wLVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/WZlS1GtJvPAcsfkbfxYJ-y3KfcU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.32.225.0/24
195.211.14.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:1f:45:95:9c:56:97:9c:d0:f2:66:6c:7a:e6:25:cc:0e:0c:
12:52:c0:09:3f:70:40:e2:03:67:9f:37:16:f4:47:9c:77:c5:
14:3c:58:15:8b:0e:94:9c:8d:03:0a:d1:4d:7d:b3:64:cf:92:
2a:f8:b6:cc:04:e3:9d:c3:17:a1:8b:fd:b6:1b:30:dd:9c:d5:
25:3a:57:6c:5c:3c:7c:d6:5c:1b:ac:15:ce:d0:ad:e5:3f:06:
06:2c:4d:34:54:b4:7c:3e:9e:b9:83:e5:36:76:94:e2:4c:9f:
38:92:4d:e0:1f:b3:64:45:35:a2:ab:5f:86:a2:ef:bc:b4:a2:
ae:2e:7f:fc:2a:1f:9b:d2:14:b0:ed:d3:94:91:57:8b:97:1f:
96:f0:be:8e:9d:fe:71:1c:c0:2c:93:1c:28:de:97:b3:3b:39:
62:e0:b7:10:50:70:1a:f5:56:27:8c:cc:d5:42:6f:64:e8:88:
a6:0c:4b:54:9e:77:56:4c:c0:14:cf:86:98:a6:c1:01:32:a7:
35:ee:37:c0:37:69:31:ec:bc:51:b9:e5:0e:0b:d3:52:14:b7:
08:18:ab:1b:f0:4d:ca:f8:b6:fa:27:d9:38:fd:23:73:b6:d0:
8d:dc:31:75:e8:f7:11:49:af:fc:c5:42:27:2c:4e:a1:c9:c5:
8f:4f:62:5d
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEAgD1ljANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
NTMyYTVjZjJiYTE4Yzc1M2VkYzk1ZWUyMGI2NjYyOTNkZjAyZDViMB4XDTIyMDEw
MTA2NTgxMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTk5OTUyZDQ2YjQ5
YmNmMDFjYjFmOTFiN2YxNjA5ZmIyZGNhN2RjNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMBvDn9DabW0N+AOECascZK4mUePBbf7QeyPEblmftRAPtIv
upeNUB8f1KzzUKJSEwrmr/AP/dcDKtl8rPXoMBALNSx5J8+KcoaJgDjKdRWD9lX8
lcy1CSfta0dGqyl9gLMf1XwhkWi6sgTD1YMe6iP10Msxg+repF/qooFsA66Cl6Xh
ISsTTF27k+j6ohFEpNOD9C8fUvZURQ1scn52BW0zOXSvKoLQsIzmoFJUlq0UV3Qn
CqhxXH/2XPOhKNg4MDOTYyx2Ve4oS4orf+ySlFG1Q+iJVPK1Btqgg8lQrs7LYLAT
0646nN68psAj8CWBDu8rxXaHyMKlwR8n3bMaDb8CAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBRZmVLUa0m88Byx+Rt/Fgn7Lcp9xTAfBgNVHSMEGDAWgBQlMqXPK6GMdT7c
le4gtmYpPfAtWzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0pUS2x6eXVoakhVLTNKWHVJTFptS1Qzd0xWcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvMWUwMmZhLWY4MjMtNDFjOC04NmIyLTE1MWNmNjFkZTgzZS8x
L1dabFMxR3RKdlBBY3Nma2JmeFlKLXkzS2ZjVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
MWUwMmZhLWY4MjMtNDFjOC04NmIyLTE1MWNmNjFkZTgzZS8xL0pUS2x6eXVoakhV
LTNKWHVJTFptS1Qzd0xWcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAE0g4QMEAcPTDjANBgkqhkiG9w0B
AQsFAAOCAQEAfR9FlZxWl5zQ8mZseuYlzA4MElLACT9wQOIDZ583FvRHnHfFFDxY
FYsOlJyNAwrRTX2zZM+SKvi2zATjncMXoYv9thsw3ZzVJTpXbFw8fNZcG6wVztCt
5T8GBixNNFS0fD6euYPlNnaU4kyfOJJN4B+zZEU1oqtfhqLvvLSiri5//Cofm9IU
sO3TlJFXi5cflvC+jp3+cRzALJMcKN6Xszs5YuC3EFBwGvVWJ4zM1UJvZOiIpgxL
VJ53VkzAFM+GmKbBATKnNe43wDdpMey8UbnlDgvTUhS3CBirG/BNyvi2+ifZOP0j
c7bQjdwxdej3EUmv/MVCJyxOocnFj09iXQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:07 2023 by rpki-client on console-fra.rpki-client.org