Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/wNvgKSRnTsA8Hatp5Q_zqdLAbEA.roa
File: wNvgKSRnTsA8Hatp5Q_zqdLAbEA.roa (raw, json)
Hash identifier: HTJToJL+bONpy3TrRsj/zIM1gx7lE2SaOtR1Mv4BrHo=
Subject key identifier: C0:DB:E0:29:24:67:4E:C0:3C:1D:AB:69:E5:0F:F3:A9:D2:C0:6C:40
Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Certificate serial: 0181F26E64FAB33E9D8D5170E45626DB8C06
Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/wNvgKSRnTsA8Hatp5Q_zqdLAbEA.roa
Signing time: Tue 12 Jul 2022 12:42:09 +0000
ROA not before: Tue 12 Jul 2022 12:42:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48309
IP address blocks: 37.191.92.0/22 maxlen: 22
37.191.64.0/22 maxlen: 22
37.191.68.0/22 maxlen: 22
37.191.74.0/24 maxlen: 24
37.191.72.0/22 maxlen: 22
37.191.76.0/22 maxlen: 22
37.191.80.0/21 maxlen: 24
37.191.88.0/22 maxlen: 22
188.136.161.0/24 maxlen: 24
188.136.163.0/24 maxlen: 24
188.136.165.0/24 maxlen: 24
188.136.160.0/24 maxlen: 24
188.136.162.0/24 maxlen: 24
188.136.164.0/24 maxlen: 24
188.136.166.0/24 maxlen: 24
188.136.167.0/24 maxlen: 24
188.136.169.0/24 maxlen: 24
188.136.171.0/24 maxlen: 24
188.136.168.0/24 maxlen: 24
188.136.170.0/24 maxlen: 24
188.136.172.0/24 maxlen: 24
188.136.173.0/24 maxlen: 24
188.136.175.0/24 maxlen: 24
188.136.176.0/21 maxlen: 21
188.136.174.0/24 maxlen: 24
188.136.185.0/24 maxlen: 24
188.136.184.0/24 maxlen: 24
188.136.186.0/24 maxlen: 24
188.136.192.0/23 maxlen: 23
188.136.187.0/24 maxlen: 24
188.136.188.0/24 maxlen: 24
188.136.190.0/24 maxlen: 24
188.136.189.0/24 maxlen: 24
188.136.191.0/24 maxlen: 24
188.136.194.0/24 maxlen: 24
188.136.196.0/24 maxlen: 24
188.136.196.0/22 maxlen: 22
188.136.195.0/24 maxlen: 24
188.136.200.0/24 maxlen: 24
188.136.202.0/24 maxlen: 24
188.136.204.0/24 maxlen: 24
188.136.206.0/24 maxlen: 24
188.136.201.0/24 maxlen: 24
188.136.203.0/24 maxlen: 24
188.136.205.0/24 maxlen: 24
188.136.208.0/24 maxlen: 24
188.136.210.0/24 maxlen: 24
188.136.212.0/24 maxlen: 24
188.136.207.0/24 maxlen: 24
188.136.209.0/24 maxlen: 24
188.136.211.0/24 maxlen: 24
188.136.213.0/24 maxlen: 24
188.136.129.0/24 maxlen: 24
188.136.131.0/24 maxlen: 24
188.136.128.0/24 maxlen: 24
188.136.130.0/24 maxlen: 24
188.136.132.0/24 maxlen: 24
188.136.133.0/24 maxlen: 24
188.136.135.0/24 maxlen: 24
188.136.134.0/24 maxlen: 24
188.136.141.0/24 maxlen: 24
188.136.143.0/24 maxlen: 24
188.136.145.0/24 maxlen: 24
188.136.144.0/22 maxlen: 22
188.136.140.0/24 maxlen: 24
188.136.142.0/24 maxlen: 24
188.136.144.0/24 maxlen: 24
31.25.104.0/22 maxlen: 22
188.136.149.0/24 maxlen: 24
188.136.147.0/24 maxlen: 24
188.136.151.0/24 maxlen: 24
31.25.108.0/24 maxlen: 24
31.25.110.0/23 maxlen: 23
188.136.146.0/24 maxlen: 24
188.136.150.0/24 maxlen: 24
188.136.152.0/24 maxlen: 24
31.25.109.0/24 maxlen: 24
188.136.153.0/24 maxlen: 24
188.136.155.0/24 maxlen: 24
188.136.157.0/24 maxlen: 24
188.136.159.0/24 maxlen: 24
188.136.154.0/24 maxlen: 24
188.136.156.0/24 maxlen: 24
188.136.158.0/24 maxlen: 24
188.136.214.0/24 maxlen: 24
188.136.216.0/22 maxlen: 22
188.136.215.0/24 maxlen: 24
188.136.220.0/24 maxlen: 24
188.136.222.0/24 maxlen: 24
188.136.221.0/24 maxlen: 24
188.136.223.0/24 maxlen: 24
185.85.68.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f2:6e:64:fa:b3:3e:9d:8d:51:70:e4:56:26:db:8c:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Validity
Not Before: Jul 12 12:42:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c0dbe02924674ec03c1dab69e50ff3a9d2c06c40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1b:fd:18:f2:53:2a:1f:85:ce:fb:b2:38:40:
12:2c:f7:e3:cb:1d:bc:35:d8:0e:c2:aa:cc:19:bc:
04:68:de:f7:43:9d:85:13:34:e1:03:a9:92:99:c8:
ea:0e:5d:ad:40:6a:25:29:eb:12:07:88:76:86:2d:
20:39:91:43:f9:cd:2f:34:7d:1c:4d:0e:74:39:ce:
61:c9:80:95:95:20:9d:ee:b5:74:f6:53:4b:99:df:
8c:d1:6e:50:83:17:98:c3:8f:9a:07:56:b4:f8:10:
de:65:f6:cd:96:54:8a:a0:f3:56:6e:ae:ea:29:22:
35:73:f6:de:e6:a4:e4:7f:c6:69:1e:08:cb:6e:4d:
95:1a:9b:a6:d2:c2:ec:2b:89:66:9f:54:a7:40:82:
9d:a4:e6:e1:b8:24:de:ad:e7:4c:2b:4b:b4:49:ad:
5e:15:54:64:d9:87:ec:44:c9:22:62:d0:58:04:38:
b8:fb:df:e5:6a:49:d6:cf:bb:80:a9:ae:00:d5:ac:
68:5b:1f:18:ba:a7:0b:e0:87:ee:da:eb:7d:c3:90:
b8:bf:2f:3a:df:d6:a3:d3:7d:c6:8e:1e:15:93:0f:
69:75:50:35:3c:49:33:ce:0f:30:11:a0:b0:19:62:
e7:a9:ad:39:65:13:3c:fd:85:b9:e4:17:cf:e4:26:
1b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:DB:E0:29:24:67:4E:C0:3C:1D:AB:69:E5:0F:F3:A9:D2:C0:6C:40
X509v3 Authority Key Identifier:
keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/wNvgKSRnTsA8Hatp5Q_zqdLAbEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.104.0/21
37.191.64.0/19
185.85.68.0/22
188.136.128.0/21
188.136.140.0-188.136.147.255
188.136.149.0-188.136.223.255
Signature Algorithm: sha256WithRSAEncryption
35:37:50:14:dc:05:ae:6b:1d:71:e6:90:1e:e0:67:4e:18:78:
35:7a:0d:9e:7d:c6:b3:da:5e:01:05:25:9e:10:6a:5f:98:df:
8f:89:cb:39:61:4b:86:23:cf:7e:de:f2:27:81:98:26:eb:58:
f7:26:c2:14:a7:fd:e0:e0:e9:3e:9f:69:48:b6:65:c0:84:f3:
2b:1b:47:39:ad:6a:17:8c:25:81:f1:5b:a6:27:20:9c:6c:4b:
92:c7:ec:16:e8:7c:ad:ca:8d:a6:39:5b:1e:77:23:62:a0:1d:
2f:4f:5b:71:01:84:d2:78:90:e7:65:60:6a:f3:79:e2:ce:a6:
55:4d:0d:ad:48:dc:3b:f4:53:a8:73:8b:10:c1:cb:3e:bf:48:
cf:a7:14:61:ef:97:d1:7f:70:96:98:35:4d:63:be:29:80:1c:
5b:bb:10:24:3c:4a:3f:6e:cc:63:ab:31:ed:57:35:50:ac:46:
84:c2:66:8c:1b:6d:af:74:4b:17:44:a0:36:8c:bb:67:bd:c3:
6e:06:dc:f5:06:b5:41:78:88:2f:56:2c:d6:2d:4e:5c:b2:cf:
63:8c:2b:03:30:cd:9c:55:e5:7e:5a:dd:14:fe:d0:2b:77:ae:
74:e5:88:86:e8:30:10:44:bb:bd:4f:1f:86:d6:59:fd:7e:3e:
40:c0:93:7e
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgISAYHybmT6sz6djVFw5FYm24wGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViNjk4YzRiNjEyYWZlZTJjYmIxY2RkNTA5ZTRmMDI0NmZi
YjgwZTEwHhcNMjIwNzEyMTI0MjA5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMGRiZTAyOTI0Njc0ZWMwM2MxZGFiNjllNTBmZjNhOWQyYzA2YzQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxv9GPJTKh+FzvuyOEASLPfjyx28
NdgOwqrMGbwEaN73Q52FEzThA6mSmcjqDl2tQGolKesSB4h2hi0gOZFD+c0vNH0c
TQ50Oc5hyYCVlSCd7rV09lNLmd+M0W5QgxeYw4+aB1a0+BDeZfbNllSKoPNWbq7q
KSI1c/be5qTkf8ZpHgjLbk2VGpum0sLsK4lmn1SnQIKdpObhuCTeredMK0u0Sa1e
FVRk2YfsRMkiYtBYBDi4+9/laknWz7uAqa4A1axoWx8YuqcL4Ifu2ut9w5C4vy86
39aj033Gjh4Vkw9pdVA1PEkzzg8wEaCwGWLnqa05ZRM8/YW55BfP5CYbBQIDAQAB
o4ICNzCCAjMwHQYDVR0OBBYEFMDb4CkkZ07APB2raeUP86nSwGxAMB8GA1UdIwQY
MBaAFFtpjEthKv7iy7HN1Qnk8CRvu4DhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzJtTVMyRXFfdUxMc2MzVkNlVHdKRy03Z09FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9jMTZmNTUtYjQ0ZC00MGMzLTlkYWMt
Y2MyZmFmZTNhOGI0LzEvd052Z0tTUm5Uc0E4SGF0cDVRX3pxZExBYkVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9jMTZmNTUtYjQ0ZC00MGMzLTlkYWMtY2MyZmFmZTNhOGI0
LzEvVzJtTVMyRXFfdUxMc2MzVkNlVHdKRy03Z09FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME0GCCsGAQUFBwEHAQH/BD4wPDA6BAIAATA0AwQDHxloAwQF
Jb9AAwQCuVVEAwQDvIiAMAwDBAK8iIwDBAK8iJAwDAMEALyIlQMEBbyIwDANBgkq
hkiG9w0BAQsFAAOCAQEANTdQFNwFrmsdceaQHuBnThh4NXoNnn3Gs9peAQUlnhBq
X5jfj4nLOWFLhiPPft7yJ4GYJutY9ybCFKf94ODpPp9pSLZlwITzKxtHOa1qF4wl
gfFbpicgnGxLksfsFuh8rcqNpjlbHncjYqAdL09bcQGE0niQ52VgavN54s6mVU0N
rUjcO/RTqHOLEMHLPr9Iz6cUYe+X0X9wlpg1TWO+KYAcW7sQJDxKP27MY6sx7Vc1
UKxGhMJmjBttr3RLF0SgNoy7Z73Dbgbc9Qa1QXiIL1Ys1i1OXLLPY4wrAzDNnFXl
flrdFP7QK3eudOWIhugwEES7vU8fhtZZ/X4+QMCTfg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:02 2024 by rpki-client on console-fra.rpki-client.org