Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/wnuNQce_tlGan188iQqbJVwtWao.roa
File: wnuNQce_tlGan188iQqbJVwtWao.roa (raw, json)
Hash identifier: /1D5re7BHetHDdUxedmOTd60xV083W1OfRJvPUAOCO8=
Subject key identifier: C2:7B:8D:41:C7:BF:B6:51:9A:9F:5F:3C:89:0A:9B:25:5C:2D:59:AA
Certificate issuer: /CN=9da140e8028e6d537600e0888a9af5a971c5db46
Certificate serial: 431CCE2F
Authority key identifier: 9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/wnuNQce_tlGan188iQqbJVwtWao.roa
Signing time: Sat 01 Jan 2022 05:05:29 +0000
ROA not before: Sat 01 Jan 2022 05:05:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205250
IP address blocks: 192.103.92.0/24 maxlen: 24
192.103.105.0/24 maxlen: 24
192.103.111.0/24 maxlen: 24
192.103.110.0/24 maxlen: 24
192.103.106.0/24 maxlen: 24
192.103.116.0/24 maxlen: 24
192.103.85.0/24 maxlen: 24
192.103.86.0/24 maxlen: 24
192.103.91.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1125961263 (0x431cce2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9da140e8028e6d537600e0888a9af5a971c5db46
Validity
Not Before: Jan 1 05:05:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c27b8d41c7bfb6519a9f5f3c890a9b255c2d59aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:10:2e:f9:6f:70:8d:b4:81:56:f7:08:73:39:
2e:55:a7:c7:17:de:04:36:9a:cc:ae:11:93:5e:5f:
93:78:e9:db:5c:92:f0:3d:66:5e:80:f9:80:e4:d9:
59:f3:15:64:57:e5:b2:5b:21:d1:fa:c4:8b:0f:65:
89:42:11:e0:57:69:e5:0c:b0:21:1e:11:65:dc:e4:
40:57:9b:5d:b1:e6:af:92:c0:44:38:54:77:b3:2f:
2e:f9:b2:83:1c:13:b0:94:0c:3f:19:04:e3:f3:e1:
77:0b:c2:8e:f4:d6:f1:00:43:b0:e8:b2:2f:9f:8a:
77:7c:11:74:96:3f:32:19:09:95:9c:ae:b3:a3:1b:
fc:e9:31:b8:13:c0:af:89:80:3b:8e:e4:33:ab:28:
0b:ce:cf:d8:1d:fc:b7:82:94:ba:d0:62:7b:42:04:
88:61:0b:18:52:82:68:09:a8:7b:d6:f7:5f:28:62:
a7:79:9d:db:1f:89:a3:05:2c:58:db:da:3b:9d:fe:
ea:29:1b:ed:14:52:8a:dc:cc:32:d7:64:1d:01:37:
60:10:68:f7:ab:77:5a:ae:65:c2:c1:82:e2:ec:1f:
97:dc:a5:1f:1f:c4:41:ea:bb:18:84:28:e8:c3:f1:
ca:46:fa:0e:4c:a5:cf:c8:62:08:b0:79:30:7a:18:
ab:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:7B:8D:41:C7:BF:B6:51:9A:9F:5F:3C:89:0A:9B:25:5C:2D:59:AA
X509v3 Authority Key Identifier:
keyid:9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/wnuNQce_tlGan188iQqbJVwtWao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.103.85.0-192.103.86.255
192.103.91.0-192.103.92.255
192.103.105.0-192.103.106.255
192.103.110.0/23
192.103.116.0/24
Signature Algorithm: sha256WithRSAEncryption
55:9f:62:6e:e1:1e:1b:b4:72:c9:83:30:7c:54:dc:a9:c9:ae:
f4:ea:8f:d8:13:e6:dd:34:df:03:13:a9:0d:c9:b5:19:7d:65:
e9:f2:30:dc:dd:76:2e:d6:de:eb:ac:93:8f:22:10:2f:f0:5b:
0c:44:08:8b:c1:60:04:48:12:70:26:cb:25:1e:d5:76:16:02:
0b:03:43:01:91:85:67:d7:7f:44:da:12:e1:d3:14:7d:b0:5e:
7f:0c:50:35:38:a2:72:57:6a:64:0f:0e:75:04:6b:95:9d:96:
d3:27:42:6f:5c:f7:71:70:48:b6:9d:0e:6a:cf:b5:7f:cd:98:
0d:94:ce:9c:c1:ce:a2:61:17:65:9c:83:4c:a6:db:05:9d:37:
91:84:27:60:ac:55:60:c3:60:c4:74:2a:b9:59:9d:8f:d4:8e:
55:bf:5c:cf:70:c2:d0:60:7a:1b:a5:1d:b9:a4:94:19:e3:b4:
26:7c:f2:81:d5:fe:6e:f3:8a:ab:e1:f5:0b:3c:0b:f0:96:bf:
35:79:6e:c8:01:26:d5:7e:64:7a:99:a0:d5:3b:5a:5e:5d:05:
bd:39:90:b1:6a:85:10:a7:e4:96:fa:c0:93:f3:e0:4a:68:ed:
37:99:f7:5c:99:6b:fa:85:ce:64:c1:c5:88:ce:1b:53:ea:26:
1c:f7:f4:5a
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgIEQxzOLzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
ZGExNDBlODAyOGU2ZDUzNzYwMGUwODg4YTlhZjVhOTcxYzVkYjQ2MB4XDTIyMDEw
MTA1MDUyOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzI3YjhkNDFjN2Jm
YjY1MTlhOWY1ZjNjODkwYTliMjU1YzJkNTlhYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL4QLvlvcI20gVb3CHM5LlWnxxfeBDaazK4Rk15fk3jp21yS
8D1mXoD5gOTZWfMVZFflslsh0frEiw9liUIR4Fdp5QywIR4RZdzkQFebXbHmr5LA
RDhUd7MvLvmygxwTsJQMPxkE4/PhdwvCjvTW8QBDsOiyL5+Kd3wRdJY/MhkJlZyu
s6Mb/OkxuBPAr4mAO47kM6soC87P2B38t4KUutBie0IEiGELGFKCaAmoe9b3Xyhi
p3md2x+JowUsWNvaO53+6ikb7RRSitzMMtdkHQE3YBBo96t3Wq5lwsGC4uwfl9yl
Hx/EQeq7GIQo6MPxykb6Dkylz8hiCLB5MHoYq5ECAwEAAaOCAjkwggI1MB0GA1Ud
DgQWBBTCe41Bx7+2UZqfXzyJCpslXC1ZqjAfBgNVHSMEGDAWgBSdoUDoAo5tU3YA
4IiKmvWpccXbRjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L25hRkE2QUtPYlZOMkFPQ0lpcHIxcVhIRjIwWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOTAvMTI2NzU1LWVlZGQtNDBiMS05NWU4LWE0Y2E4YjljMjA1Yi8x
L3dudU5RY2VfdGxHYW4xODhpUXFiSlZ3dFdhby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTAv
MTI2NzU1LWVlZGQtNDBiMS05NWU4LWE0Y2E4YjljMjA1Yi8xL25hRkE2QUtPYlZO
MkFPQ0lpcHIxcVhIRjIwWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBP
BggrBgEFBQcBBwEB/wRAMD4wPAQCAAEwNjAMAwQAwGdVAwQAwGdWMAwDBADAZ1sD
BADAZ1wwDAMEAMBnaQMEAMBnagMEAcBnbgMEAMBndDANBgkqhkiG9w0BAQsFAAOC
AQEAVZ9ibuEeG7RyyYMwfFTcqcmu9OqP2BPm3TTfAxOpDcm1GX1l6fIw3N12Ltbe
66yTjyIQL/BbDEQIi8FgBEgScCbLJR7VdhYCCwNDAZGFZ9d/RNoS4dMUfbBefwxQ
NTiicldqZA8OdQRrlZ2W0ydCb1z3cXBItp0Oas+1f82YDZTOnMHOomEXZZyDTKbb
BZ03kYQnYKxVYMNgxHQquVmdj9SOVb9cz3DC0GB6G6UduaSUGeO0JnzygdX+bvOK
q+H1CzwL8Ja/NXluyAEm1X5kepmg1TtaXl0FvTmQsWqFEKfklvrAk/PgSmjtN5n3
XJlr+oXOZMHFiM4bU+omHPf0Wg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:43 2024 by rpki-client on console-ams.rpki-client.org