Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/pW4L6kFii6XMkl4CO0Xx-pzh0wU.roa
File: pW4L6kFii6XMkl4CO0Xx-pzh0wU.roa (raw, json)
Hash identifier: oXhWzZcXMLVPVRflVV1cUpXUSSxaHNdauaVq+Oly0tg=
Subject key identifier: A5:6E:0B:EA:41:62:8B:A5:CC:92:5E:02:3B:45:F1:FA:9C:E1:D3:05
Certificate issuer: /CN=d50962035c5e951013ca0670ca569e79f8d63c15
Certificate serial: 0271C51D
Authority key identifier: D5:09:62:03:5C:5E:95:10:13:CA:06:70:CA:56:9E:79:F8:D6:3C:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QliA1xelRATygZwylaeefjWPBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/pW4L6kFii6XMkl4CO0Xx-pzh0wU.roa
Signing time: Thu 17 Feb 2022 14:40:58 +0000
ROA not before: Thu 17 Feb 2022 14:40:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35393
IP address blocks: 185.100.4.0/22 maxlen: 24
194.110.192.0/24 maxlen: 24
91.207.254.0/23 maxlen: 23
91.207.254.0/24 maxlen: 24
91.207.255.0/24 maxlen: 24
195.144.11.0/24 maxlen: 24
46.255.160.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41010461 (0x271c51d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50962035c5e951013ca0670ca569e79f8d63c15
Validity
Not Before: Feb 17 14:40:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a56e0bea41628ba5cc925e023b45f1fa9ce1d305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8d:ea:f7:a8:4c:f2:a6:09:43:c8:f4:2f:eb:
bc:a7:3e:07:9a:b0:4b:8a:d7:27:6b:3a:9d:0f:39:
cb:32:9a:f2:40:0f:56:16:ea:fc:f3:bf:ae:38:25:
99:06:62:3e:ba:bf:dc:14:33:89:eb:d3:eb:66:88:
5a:2b:d1:46:93:88:c4:57:e2:1e:a0:e9:9c:e7:41:
fb:a2:bf:c2:05:0f:52:53:c0:67:ad:60:e8:03:bb:
a9:b0:50:e6:d3:6c:eb:f6:de:8b:7a:fd:6a:61:bd:
c1:c4:69:b1:e3:27:c6:55:86:23:22:1a:cc:c3:70:
b9:d7:97:a0:71:0b:b4:f9:95:f8:f8:f3:d5:28:62:
fc:81:e6:19:fa:a0:36:12:0b:13:9e:d4:ef:d3:11:
dd:58:95:ef:ab:03:e3:bc:79:98:7a:ad:32:13:09:
ef:7e:99:d1:5c:2b:90:3b:35:dd:c2:41:56:78:2c:
f2:e3:d2:cc:fd:fa:93:6b:f6:c7:50:87:31:3d:fc:
9c:4d:78:f7:92:f7:6b:de:ca:c9:8f:9a:ce:a1:ae:
b5:ef:6b:cc:f5:3a:3d:cb:e8:74:ce:bc:6d:46:f5:
7f:16:05:bf:52:13:04:43:71:47:3d:02:df:6f:e2:
e0:46:67:d8:f0:f0:fb:f0:1a:0e:a1:2b:bc:3b:48:
d2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:6E:0B:EA:41:62:8B:A5:CC:92:5E:02:3B:45:F1:FA:9C:E1:D3:05
X509v3 Authority Key Identifier:
keyid:D5:09:62:03:5C:5E:95:10:13:CA:06:70:CA:56:9E:79:F8:D6:3C:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QliA1xelRATygZwylaeefjWPBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/pW4L6kFii6XMkl4CO0Xx-pzh0wU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.255.160.0/21
91.207.254.0/23
185.100.4.0/22
194.110.192.0/24
195.144.11.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:44:13:27:f6:cb:4c:08:05:32:8b:ec:5e:23:a1:b4:a1:2f:
ac:ef:84:ec:97:dd:30:86:9e:29:5f:55:2f:32:48:0d:68:2f:
3e:56:0d:d7:a4:2f:91:77:eb:3b:cc:1b:ce:8e:4b:39:5a:1f:
d3:09:c4:5d:55:eb:e3:0e:de:b7:2c:76:8d:f5:3f:9b:28:24:
37:e0:66:1a:da:b5:3b:c0:32:7a:06:c3:14:a6:7d:95:47:65:
13:a4:c8:78:8f:5b:3f:42:9a:26:71:1d:5c:09:33:e5:38:74:
80:aa:29:c9:6e:5e:f1:9b:22:9b:6a:53:07:98:8c:6b:a2:d7:
65:67:0c:c6:f3:22:99:0a:79:77:5c:31:cb:59:f3:10:44:6c:
1c:03:66:f0:f0:6d:ca:e7:c5:0f:12:c9:19:ae:78:08:f3:0d:
6b:0b:3a:0f:65:e9:f9:2d:19:80:f5:3b:89:eb:96:52:f5:91:
57:6e:0e:53:ed:ab:90:4d:73:69:77:74:89:7f:28:8a:d1:da:
21:f6:93:6a:69:72:7e:8d:a3:e0:88:6a:1a:a5:b3:b3:8b:22:
19:5b:41:d2:4d:19:52:28:9f:3f:9f:e8:5e:49:d5:2c:4f:ad:
b8:fa:64:94:61:a2:0c:24:7f:a8:ba:c9:72:03:84:a3:a6:ce:
c5:22:3e:e1
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIEAnHFHTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
NTA5NjIwMzVjNWU5NTEwMTNjYTA2NzBjYTU2OWU3OWY4ZDYzYzE1MB4XDTIyMDIx
NzE0NDA1OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTU2ZTBiZWE0MTYy
OGJhNWNjOTI1ZTAyM2I0NWYxZmE5Y2UxZDMwNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKKN6veoTPKmCUPI9C/rvKc+B5qwS4rXJ2s6nQ85yzKa8kAP
Vhbq/PO/rjglmQZiPrq/3BQzievT62aIWivRRpOIxFfiHqDpnOdB+6K/wgUPUlPA
Z61g6AO7qbBQ5tNs6/bei3r9amG9wcRpseMnxlWGIyIazMNwudeXoHELtPmV+Pjz
1Shi/IHmGfqgNhILE57U79MR3ViV76sD47x5mHqtMhMJ736Z0VwrkDs13cJBVngs
8uPSzP36k2v2x1CHMT38nE1495L3a97KyY+azqGute9rzPU6PcvodM68bUb1fxYF
v1ITBENxRz0C32/i4EZn2PDw+/AaDqErvDtI0hkCAwEAAaOCAiEwggIdMB0GA1Ud
DgQWBBSlbgvqQWKLpcySXgI7RfH6nOHTBTAfBgNVHSMEGDAWgBTVCWIDXF6VEBPK
BnDKVp55+NY8FTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzFRbGlBMXhlbFJBVHlnWnd5bGFlZWZqV1BCVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTQvZDRlOGU5LTBkNDctNDE5Yi1iM2UyLTA1NGEzNjMxMTVmNS8x
L3BXNEw2a0ZpaTZYTWtsNENPMFh4LXB6aDB3VS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTQv
ZDRlOGU5LTBkNDctNDE5Yi1iM2UyLTA1NGEzNjMxMTVmNS8xLzFRbGlBMXhlbFJB
VHlnWnd5bGFlZWZqV1BCVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA3
BggrBgEFBQcBBwEB/wQoMCYwJAQCAAEwHgMEAy7/oAMEAVvP/gMEArlkBAMEAMJu
wAMEAMOQCzANBgkqhkiG9w0BAQsFAAOCAQEAbkQTJ/bLTAgFMovsXiOhtKEvrO+E
7JfdMIaeKV9VLzJIDWgvPlYN16QvkXfrO8wbzo5LOVof0wnEXVXr4w7etyx2jfU/
mygkN+BmGtq1O8AyegbDFKZ9lUdlE6TIeI9bP0KaJnEdXAkz5Th0gKopyW5e8Zsi
m2pTB5iMa6LXZWcMxvMimQp5d1wxy1nzEERsHANm8PBtyufFDxLJGa54CPMNaws6
D2Xp+S0ZgPU7ieuWUvWRV24OU+2rkE1zaXd0iX8oitHaIfaTamlyfo2j4IhqGqWz
s4siGVtB0k0ZUiifP5/oXknVLE+tuPpklGGiDCR/qLrJcgOEo6bOxSI+4Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:31 2024 by rpki-client on console-ams.rpki-client.org