Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/Tguhmcw1lz_LDmZerA00e1vOxWA.roa
File: Tguhmcw1lz_LDmZerA00e1vOxWA.roa (raw, json)
Hash identifier: YV1Wspo7JKvY/iSxBVV5HwHcqv3eUfbj007fD+6tfoc=
Subject key identifier: 4E:0B:A1:99:CC:35:97:3F:CB:0E:66:5E:AC:0D:34:7B:5B:CE:C5:60
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 16D522E3
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/Tguhmcw1lz_LDmZerA00e1vOxWA.roa
Signing time: Sat 01 Jan 2022 12:01:32 +0000
ROA not before: Sat 01 Jan 2022 12:01:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56676
IP address blocks: 178.170.187.0/24 maxlen: 24
141.101.189.0/24 maxlen: 24
46.243.163.0/24 maxlen: 24
37.230.148.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 383066851 (0x16d522e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 12:01:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4e0ba199cc35973fcb0e665eac0d347b5bcec560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f2:81:8d:c8:d5:20:19:57:03:91:c2:69:65:
6f:50:29:61:d1:bb:3c:55:24:4c:7d:6e:95:78:fa:
99:93:76:19:d0:38:d8:00:21:a6:44:bd:f7:4a:44:
4a:ec:ba:17:09:a0:89:68:0f:fe:9f:b6:9e:49:5b:
1f:3d:09:f4:f1:9f:d9:fd:a4:96:e7:5c:c2:52:04:
39:a3:0f:c8:ee:1a:42:52:06:6c:4a:74:16:e7:0f:
6b:ea:f5:c8:9a:cb:8d:c6:4c:8b:36:b1:95:9d:1d:
ef:68:1b:af:0a:38:e8:ed:b2:cd:ab:c2:74:b4:fb:
f1:83:84:f2:55:7a:ab:a6:08:b2:e2:ba:f3:d8:5d:
f8:90:b0:00:28:f6:0c:30:9e:98:88:41:17:e2:ef:
b5:63:70:d3:a4:60:b1:3f:9d:2f:6c:1b:e3:23:8a:
5a:4a:0c:f8:ce:a7:da:b0:ac:32:8e:7a:ef:2c:8f:
a7:19:b0:cc:74:1d:26:a6:1c:85:bb:01:2d:cd:35:
63:ad:7e:1a:e3:b3:11:57:27:ea:a9:35:2f:1c:19:
59:5e:46:c1:3f:ad:89:b7:c7:7f:1f:e2:17:af:94:
8f:4b:79:00:ff:b0:59:38:d8:b9:2c:fe:41:ef:32:
a6:f6:0e:1b:f4:d5:bc:4c:06:0c:92:ae:db:1a:0a:
cc:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:0B:A1:99:CC:35:97:3F:CB:0E:66:5E:AC:0D:34:7B:5B:CE:C5:60
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/Tguhmcw1lz_LDmZerA00e1vOxWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.230.148.0/24
46.243.163.0/24
141.101.189.0/24
178.170.187.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:d8:54:25:68:75:5f:62:8f:87:95:49:32:d5:a6:36:01:ae:
63:30:48:86:2e:75:80:69:e3:03:a9:18:99:22:45:49:48:f4:
47:a8:ae:51:d4:2b:da:dc:9e:b9:dd:42:81:2a:48:7d:42:5d:
c7:6b:6e:3d:2b:bf:50:84:7c:b6:02:08:ba:de:7d:c0:ae:37:
df:f1:a7:da:17:e4:fc:e2:17:ac:ac:de:9c:f8:27:7e:ec:ee:
c6:b8:36:c7:9a:77:f5:17:f6:af:43:2a:27:24:fb:a0:9c:c3:
3b:1e:d5:9c:98:7a:d3:d6:e8:b9:98:c6:3c:47:18:04:c2:a5:
03:1a:38:10:38:30:c1:e3:ec:a5:bf:c0:90:ff:f9:78:7a:14:
93:69:3c:08:48:8d:5c:0f:c2:fb:5b:84:4a:d0:05:81:64:b2:
62:02:9f:da:6d:ff:90:7e:f7:80:41:da:1f:cf:29:39:26:d1:
fd:08:ab:a6:c9:19:73:ad:a0:83:4a:1e:f8:f4:03:a1:dc:97:
25:e0:23:b0:e5:82:59:53:08:d5:54:bc:e2:db:62:fa:49:0a:
14:2f:04:38:ce:79:e7:65:95:a5:dc:f5:bc:46:e0:27:01:b7:
5a:e3:26:1c:0f:f0:56:6f:d9:98:34:95:d7:8f:0c:e9:da:e1:
17:53:66:fd
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIEFtUi4zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
ODg1ZTg4NGMyZmM3YTc1ZDEyZGQxZGVhNDljZTIzNDljNDcwNjdlMB4XDTIyMDEw
MTEyMDEzMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNGUwYmExOTljYzM1
OTczZmNiMGU2NjVlYWMwZDM0N2I1YmNlYzU2MDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJTygY3I1SAZVwORwmllb1ApYdG7PFUkTH1ulXj6mZN2GdA4
2AAhpkS990pESuy6FwmgiWgP/p+2nklbHz0J9PGf2f2kludcwlIEOaMPyO4aQlIG
bEp0FucPa+r1yJrLjcZMizaxlZ0d72gbrwo46O2yzavCdLT78YOE8lV6q6YIsuK6
89hd+JCwACj2DDCemIhBF+LvtWNw06RgsT+dL2wb4yOKWkoM+M6n2rCsMo567yyP
pxmwzHQdJqYchbsBLc01Y61+GuOzEVcn6qk1LxwZWV5GwT+tibfHfx/iF6+Uj0t5
AP+wWTjYuSz+Qe8ypvYOG/TVvEwGDJKu2xoKzLkCAwEAAaOCAhswggIXMB0GA1Ud
DgQWBBROC6GZzDWXP8sOZl6sDTR7W87FYDAfBgNVHSMEGDAWgBRYheiEwvx6ddEt
0d6knOI0nEcGfjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1dJWG9oTUw4ZW5YUkxkSGVwSnppTkp4SEJuNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODYvNmMwYmY3LTVmMTMtNDRhMi05OTg5LThjOTU4MWQ5NmQ4Zi8x
L1RndWhtY3cxbHpfTERtWmVyQTAwZTF2T3hXQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODYv
NmMwYmY3LTVmMTMtNDRhMi05OTg5LThjOTU4MWQ5NmQ4Zi8xL1dJWG9oTUw4ZW5Y
UkxkSGVwSnppTkp4SEJuNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx
BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEACXmlAMEAC7zowMEAI1lvQMEALKq
uzANBgkqhkiG9w0BAQsFAAOCAQEAsdhUJWh1X2KPh5VJMtWmNgGuYzBIhi51gGnj
A6kYmSJFSUj0R6iuUdQr2tyeud1CgSpIfUJdx2tuPSu/UIR8tgIIut59wK433/Gn
2hfk/OIXrKzenPgnfuzuxrg2x5p39Rf2r0MqJyT7oJzDOx7VnJh609bouZjGPEcY
BMKlAxo4EDgwwePspb/AkP/5eHoUk2k8CEiNXA/C+1uEStAFgWSyYgKf2m3/kH73
gEHaH88pOSbR/QirpskZc62gg0oe+PQDodyXJeAjsOWCWVMI1VS84tti+kkKFC8E
OM5552WVpdz1vEbgJwG3WuMmHA/wVm/ZmDSV148M6drhF1Nm/Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:33 2024 by rpki-client on console-ams.rpki-client.org