Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/WiFHQoqIpopXoggk581KvJvoI7k.roa
File: WiFHQoqIpopXoggk581KvJvoI7k.roa (raw, json)
Hash identifier: sDFEPZKpWOspbXzgbS7nhhg0tsgEcEDPDZ7GrEaPV7U=
Subject key identifier: 5A:21:47:42:8A:88:A6:8A:57:A2:08:24:E7:CD:4A:BC:9B:E8:23:B9
Certificate issuer: /CN=510b419f0c17b4c8be217f64388d268d14dc261e
Certificate serial: 0373002F
Authority key identifier: 51:0B:41:9F:0C:17:B4:C8:BE:21:7F:64:38:8D:26:8D:14:DC:26:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/WiFHQoqIpopXoggk581KvJvoI7k.roa
Signing time: Sun 29 May 2022 11:50:14 +0000
ROA not before: Sun 29 May 2022 11:50:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203020
IP address blocks: 206.204.0.0/18 maxlen: 32
43.252.28.0/22 maxlen: 32
89.184.192.0/19 maxlen: 32
103.211.184.0/23 maxlen: 32
139.5.104.0/22 maxlen: 32
37.61.226.0/24 maxlen: 32
45.114.240.0/22 maxlen: 32
89.104.110.0/23 maxlen: 32
216.194.80.0/20 maxlen: 32
94.46.32.0/21 maxlen: 32
89.223.14.0/23 maxlen: 32
185.10.7.0/24 maxlen: 32
37.61.227.0/24 maxlen: 32
94.46.2.0/23 maxlen: 32
116.212.188.0/22 maxlen: 32
180.94.216.0/22 maxlen: 32
94.46.0.0/21 maxlen: 32
103.30.12.0/22 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57868335 (0x373002f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=510b419f0c17b4c8be217f64388d268d14dc261e
Validity
Not Before: May 29 11:50:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5a2147428a88a68a57a20824e7cd4abc9be823b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e0:19:5b:57:fa:c9:37:3d:d4:47:29:e5:52:
a8:c4:81:5f:80:98:23:bf:ff:57:a9:de:9a:f0:e8:
25:93:9e:94:7d:2d:1b:eb:59:d0:25:4d:88:56:50:
e4:58:73:a6:c9:de:59:1b:f3:8a:ff:29:c4:6b:ff:
91:a9:d8:c7:87:21:c9:1a:25:9b:76:32:e2:ae:71:
b2:d6:e1:d6:9e:41:75:0b:96:d6:b4:41:f5:c9:44:
8d:8e:f5:ed:6d:b2:3d:b8:6a:b1:c8:56:9c:1d:7e:
00:e9:05:c3:94:23:25:e1:d0:c9:9a:98:4c:5f:86:
fb:b6:20:c6:43:7d:46:aa:6d:bb:99:e8:ae:56:4a:
b3:f8:e5:e9:ee:4e:77:b4:c6:0c:a4:f6:ba:5a:28:
c8:c6:7c:b2:82:14:e4:75:10:95:b2:e4:e9:76:61:
92:b1:e6:9f:a3:4c:c5:6a:86:5b:f8:87:f0:91:05:
88:52:67:7a:b9:fd:d1:82:46:7d:9e:dc:3f:e6:52:
6b:13:8b:0c:64:79:bc:80:7b:ec:46:11:4a:bc:bb:
e0:5f:53:e4:c7:f6:58:f7:2d:ad:99:e8:de:d5:25:
38:b6:43:84:0f:10:58:4d:94:d0:59:b6:0a:ae:cd:
81:d2:9f:a0:32:bf:80:80:fc:83:f2:ca:8d:73:f6:
0e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:21:47:42:8A:88:A6:8A:57:A2:08:24:E7:CD:4A:BC:9B:E8:23:B9
X509v3 Authority Key Identifier:
keyid:51:0B:41:9F:0C:17:B4:C8:BE:21:7F:64:38:8D:26:8D:14:DC:26:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/WiFHQoqIpopXoggk581KvJvoI7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.61.226.0/23
43.252.28.0/22
45.114.240.0/22
89.104.110.0/23
89.184.192.0/19
89.223.14.0/23
94.46.0.0/21
94.46.32.0/21
103.30.12.0/22
103.211.184.0/23
116.212.188.0/22
139.5.104.0/22
180.94.216.0/22
185.10.7.0/24
206.204.0.0/18
216.194.80.0/20
Signature Algorithm: sha256WithRSAEncryption
90:62:03:22:32:3f:b2:96:c1:47:80:b3:45:59:95:bd:f7:a7:
0a:cc:55:45:95:a7:b8:68:28:a2:6a:dd:b4:64:65:98:1b:99:
94:47:26:6d:6f:a1:06:94:60:60:09:de:47:6a:d9:6d:5c:54:
80:78:29:7e:46:41:ea:e8:7c:e8:cb:a7:58:2d:84:cd:8e:f9:
d2:55:87:65:29:f3:86:40:d0:5b:50:df:c9:2e:4d:1d:51:7d:
35:cc:94:e3:a3:4d:f5:3c:c6:43:ab:b9:43:cf:e2:3d:d4:48:
7e:d3:c2:d7:1b:42:16:21:87:fb:ea:4d:4b:aa:6c:f3:e3:79:
3c:36:63:cc:a8:f2:12:2a:8f:8c:2f:e6:77:5e:ca:c8:8c:de:
2f:83:8d:e5:61:7b:a2:ff:27:ae:65:aa:1c:b9:55:12:53:f4:
d6:7a:d7:98:bd:2e:8f:21:73:26:41:d9:c4:5a:ef:0f:90:a3:
9d:90:ad:0a:4e:99:c7:2b:e0:e3:fc:99:af:7d:a6:fe:06:f4:
1e:b2:20:fe:40:27:3b:44:48:86:c4:62:e1:03:39:56:73:72:
ee:ee:c6:45:9a:d7:46:7d:a8:47:34:08:7f:60:5a:05:81:92:
5a:4b:89:7e:0f:92:83:ca:89:cc:9a:53:6e:bb:e6:4d:46:a6:
67:81:4c:d6
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIEA3MALzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
MTBiNDE5ZjBjMTdiNGM4YmUyMTdmNjQzODhkMjY4ZDE0ZGMyNjFlMB4XDTIyMDUy
OTExNTAxNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNWEyMTQ3NDI4YTg4
YTY4YTU3YTIwODI0ZTdjZDRhYmM5YmU4MjNiOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKzgGVtX+sk3PdRHKeVSqMSBX4CYI7//V6nemvDoJZOelH0t
G+tZ0CVNiFZQ5FhzpsneWRvziv8pxGv/kanYx4chyRolm3Yy4q5xstbh1p5BdQuW
1rRB9clEjY717W2yPbhqschWnB1+AOkFw5QjJeHQyZqYTF+G+7YgxkN9Rqptu5no
rlZKs/jl6e5Od7TGDKT2ulooyMZ8soIU5HUQlbLk6XZhkrHmn6NMxWqGW/iH8JEF
iFJnern90YJGfZ7cP+ZSaxOLDGR5vIB77EYRSry74F9T5Mf2WPctrZno3tUlOLZD
hA8QWE2U0Fm2Cq7NgdKfoDK/gID8g/LKjXP2DosCAwEAAaOCAmMwggJfMB0GA1Ud
DgQWBBRaIUdCioimileiCCTnzUq8m+gjuTAfBgNVHSMEGDAWgBRRC0GfDBe0yL4h
f2Q4jSaNFNwmHjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1VRdEJud3dYdE1pLUlYOWtPSTBtalJUY0poNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjgvMzBjZDBhLTkzY2YtNDVkYy05MzU2LTE0YTA5OTkzZDY3MS8x
L1dpRkhRb3FJcG9wWG9nZ2s1ODFLdkp2b0k3ay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjgv
MzBjZDBhLTkzY2YtNDVkYy05MzU2LTE0YTA5OTkzZDY3MS8xL1VRdEJud3dYdE1p
LUlYOWtPSTBtalJUY0poNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjB5
BggrBgEFBQcBBwEB/wRqMGgwZgQCAAEwYAMEASU94gMEAiv8HAMEAi1y8AMEAVlo
bgMEBVm4wAMEAVnfDgMEA14uAAMEA14uIAMEAmceDAMEAWfTuAMEAnTUvAMEAosF
aAMEArRe2AMEALkKBwMEBs7MAAMEBNjCUDANBgkqhkiG9w0BAQsFAAOCAQEAkGID
IjI/spbBR4CzRVmVvfenCsxVRZWnuGgoomrdtGRlmBuZlEcmbW+hBpRgYAneR2rZ
bVxUgHgpfkZB6uh86MunWC2EzY750lWHZSnzhkDQW1DfyS5NHVF9NcyU46NN9TzG
Q6u5Q8/iPdRIftPC1xtCFiGH++pNS6ps8+N5PDZjzKjyEiqPjC/md17KyIzeL4ON
5WF7ov8nrmWqHLlVElP01nrXmL0ujyFzJkHZxFrvD5CjnZCtCk6Zxyvg4/yZr32m
/gb0HrIg/kAnO0RIhsRi4QM5VnNy7u7GRZrXRn2oRzQIf2BaBYGSWkuJfg+Sg8qJ
zJpTbrvmTUamZ4FM1g==
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:27:38 2025 by rpki-client