Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/WwYMl1aLGL2fujb6JWPKp2R5DL8.roa
File: WwYMl1aLGL2fujb6JWPKp2R5DL8.roa (raw, json)
Hash identifier: QKo2ZDET9gZE2NDeFw0szKW2jw3LijwAKGCSridazt4=
Subject key identifier: 5B:06:0C:97:56:8B:18:BD:9F:BA:36:FA:25:63:CA:A7:64:79:0C:BF
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 018CA85FC7482E95BC7051E2C2C746D8BA9A
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/WwYMl1aLGL2fujb6JWPKp2R5DL8.roa
Signing time: Tue 26 Dec 2023 23:04:58 +0000
ROA not before: Tue 26 Dec 2023 23:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48449
IP address blocks: 46.20.110.0/24 maxlen: 24
46.20.108.0/24 maxlen: 24
185.160.195.0/24 maxlen: 24
185.160.194.0/24 maxlen: 24
185.100.171.0/24 maxlen: 24
185.169.221.0/24 maxlen: 24
46.20.104.0/24 maxlen: 24
185.169.222.0/24 maxlen: 24
185.169.223.0/24 maxlen: 24
46.20.101.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:a8:5f:c7:48:2e:95:bc:70:51:e2:c2:c7:46:d8:ba:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: Dec 26 23:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5b060c97568b18bd9fba36fa2563caa764790cbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8d:ab:22:40:9a:f0:4f:96:40:40:e2:a6:77:
8c:3a:e3:f6:3f:ae:d7:d4:3d:ad:5d:11:10:c0:c7:
b8:57:9f:4f:d8:56:7f:ba:6f:3c:ba:1b:cb:5e:cb:
05:89:ad:68:7a:6d:67:fd:f0:f6:86:1a:e2:a9:27:
94:9b:ff:7f:36:f3:86:46:77:a8:50:1a:24:ab:36:
b4:1b:9a:c9:ae:03:ab:e6:01:1f:20:f8:66:26:0a:
26:8e:f0:ea:e2:28:11:70:e6:75:14:83:29:a4:fe:
b2:95:26:94:c5:f1:aa:ee:0c:c9:d3:46:85:3e:a2:
02:2b:54:98:ec:44:20:10:41:3f:97:05:ab:71:08:
e1:d7:49:39:7b:72:b9:b4:7e:e7:e7:61:69:ef:c9:
15:d2:74:0e:75:6b:60:10:02:b4:ce:8e:ae:d5:60:
b9:a0:1d:a6:01:b8:be:3e:f5:ee:96:85:38:66:f3:
55:36:73:ad:ec:68:2c:28:19:cb:28:6d:97:b8:ad:
29:fb:75:f5:ed:0d:2b:a9:aa:9b:aa:df:a2:8a:28:
b6:3b:c5:22:38:6c:9b:58:94:26:d3:e4:d8:8a:74:
67:6b:93:ba:f0:c5:dc:85:f0:2b:f9:07:e4:23:14:
bf:b0:e7:12:c5:94:bb:21:5b:e7:8e:e9:18:22:81:
a1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:06:0C:97:56:8B:18:BD:9F:BA:36:FA:25:63:CA:A7:64:79:0C:BF
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/WwYMl1aLGL2fujb6JWPKp2R5DL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.101.0/24
46.20.104.0/24
46.20.108.0/24
46.20.110.0/24
185.100.171.0/24
185.160.194.0/23
185.169.221.0-185.169.223.255
Signature Algorithm: sha256WithRSAEncryption
8d:f4:2f:e5:83:59:19:8d:a7:18:a8:5b:9b:3b:f1:52:ef:e1:
fe:ac:b4:c1:61:c1:57:43:8a:99:d8:95:57:03:5e:2d:4f:f2:
e3:44:0c:25:f1:b4:ff:b8:1f:7e:29:e2:a7:62:db:c4:44:b7:
92:d2:85:03:46:37:95:92:93:5d:78:59:27:8b:2e:b3:b1:1a:
9f:aa:3e:b5:1d:19:b9:e3:7f:d3:50:2b:91:b6:79:e1:e8:e2:
46:92:9b:7b:0e:73:6a:cc:0a:14:84:a9:26:1c:5b:ef:4c:64:
89:59:e0:a9:00:b1:39:62:b7:dd:9b:ab:fa:01:c8:02:d9:72:
9c:eb:8d:94:f8:8e:89:1d:6b:1f:0c:2c:27:2b:c0:96:e1:43:
ac:0d:cc:46:13:81:ca:be:34:38:6e:c8:a7:95:f3:51:4e:38:
7a:2b:26:83:5f:4f:e3:eb:eb:73:e9:42:5c:c3:e1:d7:25:2c:
fe:27:f0:75:02:e7:61:e3:0f:43:cd:e9:48:0d:0a:3b:dc:d8:
02:6f:8c:32:a2:0d:78:03:41:00:88:3c:2f:a6:57:a7:b9:4a:
32:0e:bd:a5:c0:77:10:76:13:7b:83:92:fc:ac:39:ff:d2:31:
18:2f:a8:cc:9c:bf:48:43:b4:29:ad:f7:85:7d:68:e6:42:72:
c6:fb:a5:d3
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgISAYyoX8dILpW8cFHiwsdG2LqaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3NDk5NTk1YTY1YWFiMGI1Mzc2OGRlZjA4MDkxZTMxMDYx
ZTllNjUwHhcNMjMxMjI2MjMwNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YjA2MGM5NzU2OGIxOGJkOWZiYTM2ZmEyNTYzY2FhNzY0NzkwY2JmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnY2rIkCa8E+WQEDipneMOuP2P67X
1D2tXREQwMe4V59P2FZ/um88uhvLXssFia1oem1n/fD2hhriqSeUm/9/NvOGRneo
UBokqza0G5rJrgOr5gEfIPhmJgomjvDq4igRcOZ1FIMppP6ylSaUxfGq7gzJ00aF
PqICK1SY7EQgEEE/lwWrcQjh10k5e3K5tH7n52Fp78kV0nQOdWtgEAK0zo6u1WC5
oB2mAbi+PvXuloU4ZvNVNnOt7GgsKBnLKG2XuK0p+3X17Q0rqaqbqt+iiii2O8Ui
OGybWJQm0+TYinRna5O68MXchfAr+QfkIxS/sOcSxZS7IVvnjukYIoGhVwIDAQAB
o4ICNTCCAjEwHQYDVR0OBBYEFFsGDJdWixi9n7o2+iVjyqdkeQy/MB8GA1UdIwQY
MBaAFGdJlZWmWqsLU3aN7wgJHjEGHp5lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTct
MzU1MDgwNDE2NTJkLzEvV3dZTWwxYUxHTDJmdWpiNkpXUEtwMlI1REw4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTctMzU1MDgwNDE2NTJk
LzEvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyAwQALhRlAwQA
LhRoAwQALhRsAwQALhRuAwQAuWSrAwQBuaDCMAwDBAC5qd0DBAW5qcAwDQYJKoZI
hvcNAQELBQADggEBAI30L+WDWRmNpxioW5s78VLv4f6stMFhwVdDipnYlVcDXi1P
8uNEDCXxtP+4H34p4qdi28REt5LShQNGN5WSk114WSeLLrOxGp+qPrUdGbnjf9NQ
K5G2eeHo4kaSm3sOc2rMChSEqSYcW+9MZIlZ4KkAsTlit92bq/oByALZcpzrjZT4
jokdax8MLCcrwJbhQ6wNzEYTgcq+NDhuyKeV81FOOHorJoNfT+Pr63PpQlzD4dcl
LP4n8HUC52HjD0PN6UgNCjvc2AJvjDKiDXgDQQCIPC+mV6e5SjIOvaXAdxB2E3uD
kvysOf/SMRgvqMycv0hDtCmt94V9aOZCcsb7pdM=
-----END CERTIFICATE-----
Generated at Sat Apr 19 07:13:09 2025 by rpki-client