Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/W3OxxtUL5kZTO1AQ0q3cSi_wEcQ.roa
File: W3OxxtUL5kZTO1AQ0q3cSi_wEcQ.roa (raw, json)
Hash identifier: f6Zhy0Fyy6zUNGtHE2UV17FrzIki3J+4CbA+Ozym9Kk=
Subject key identifier: 5B:73:B1:C6:D5:0B:E6:46:53:3B:50:10:D2:AD:DC:4A:2F:F0:11:C4
Certificate issuer: /CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Certificate serial: 01849A291CCA2842A8177C49A01AA1081EEF
Authority key identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/W3OxxtUL5kZTO1AQ0q3cSi_wEcQ.roa
Signing time: Mon 21 Nov 2022 12:28:16 +0000
ROA not before: Mon 21 Nov 2022 12:28:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 194.246.36.0/24 maxlen: 24
194.247.44.0/23 maxlen: 24
45.143.160.0/24 maxlen: 24
45.143.162.0/24 maxlen: 24
45.149.166.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:9a:29:1c:ca:28:42:a8:17:7c:49:a0:1a:a1:08:1e:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Validity
Not Before: Nov 21 12:28:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5b73b1c6d50be646533b5010d2addc4a2ff011c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:aa:4c:1e:3b:70:98:25:97:fe:4d:16:0c:e4:
fc:25:d1:37:8a:30:6c:74:a2:9b:43:b4:bf:be:b2:
e8:af:ea:1a:06:11:cc:fc:fe:2d:ad:b9:d4:eb:cb:
36:c2:f3:2e:8e:39:70:48:ff:b4:c3:94:dd:75:e0:
56:5e:6c:2e:86:4f:4b:ef:ea:84:13:3e:73:77:e7:
26:ad:d9:29:01:18:f8:ec:ec:f5:d9:7c:6b:87:10:
b3:7a:0d:13:bd:98:e5:0d:e9:8b:33:95:ac:f0:5c:
f6:08:fa:a2:92:14:dc:5d:d5:f9:09:01:87:75:0f:
2f:31:06:4a:a0:41:ea:03:3d:3c:28:e3:86:ad:1b:
72:4f:10:ad:4a:c1:2c:fb:fe:f1:cb:49:de:50:56:
28:58:3c:35:7e:8b:98:f8:57:f4:63:c7:75:c5:5c:
a8:59:57:c2:1c:10:82:89:96:2b:db:49:09:dd:63:
6a:02:c1:e2:16:3a:68:5c:30:29:c9:9e:64:ab:3f:
8b:3b:31:e5:89:38:66:1a:30:c0:33:09:33:56:e5:
a9:3f:bb:df:5e:da:20:86:a5:e0:0f:5a:31:70:8f:
0b:a0:fa:00:52:b4:39:8f:52:df:ea:a1:0b:8b:44:
75:15:e6:f8:07:15:cb:a9:ba:b3:42:e6:e4:c0:29:
b7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:73:B1:C6:D5:0B:E6:46:53:3B:50:10:D2:AD:DC:4A:2F:F0:11:C4
X509v3 Authority Key Identifier:
keyid:BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/W3OxxtUL5kZTO1AQ0q3cSi_wEcQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.160.0/24
45.143.162.0/24
45.149.166.0/24
194.246.36.0/24
194.247.44.0/23
Signature Algorithm: sha256WithRSAEncryption
40:81:33:18:d6:52:5f:19:46:4a:f9:c3:71:f9:c6:a7:a7:67:
fd:00:40:a2:fc:3d:43:be:16:67:c6:f0:e9:e9:5f:30:8d:bf:
78:7a:aa:76:1c:cc:88:96:79:2f:69:4b:d5:8f:b2:40:bb:84:
68:0e:f3:94:04:c0:30:78:0b:46:65:1f:87:3e:32:48:91:7b:
03:ef:88:89:a7:8b:bf:3d:02:c1:7f:53:53:95:91:ee:cf:79:
0d:01:d6:23:7a:c9:ee:26:78:03:dc:71:3b:c2:21:46:07:f2:
a2:af:42:cc:31:2c:76:ce:56:5e:e1:3a:78:df:0c:01:66:09:
3c:e7:f6:64:cd:fa:77:85:1d:f2:97:76:40:83:41:18:ed:5a:
73:de:a8:1e:16:fb:2e:99:c5:a6:e2:de:93:02:25:ed:d1:2d:
20:01:c6:62:7a:38:a1:76:9e:30:89:11:73:69:1a:b0:d9:97:
5c:98:f4:cc:d0:9e:ea:3b:e1:85:ee:e7:8b:09:76:40:67:ba:
3b:fc:a2:ff:db:d8:53:99:6f:8b:bc:92:b4:45:b3:97:88:62:
52:31:e3:d3:79:71:36:e4:f1:e0:f4:9a:08:57:8e:cf:90:d8:
08:fa:ad:0f:bb:9a:73:63:72:97:6e:46:e5:c2:21:60:ab:6e:
56:f4:11:fa
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYSaKRzKKEKoF3xJoBqhCB7vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNGQwZTY5YWI3NjlmNjViYjJiMTU1YmRmYTgzYTcxODZl
ZWFjNDQwHhcNMjIxMTIxMTIyODE2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YjczYjFjNmQ1MGJlNjQ2NTMzYjUwMTBkMmFkZGM0YTJmZjAxMWM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKpMHjtwmCWX/k0WDOT8JdE3ijBs
dKKbQ7S/vrLor+oaBhHM/P4trbnU68s2wvMujjlwSP+0w5TddeBWXmwuhk9L7+qE
Ez5zd+cmrdkpARj47Oz12XxrhxCzeg0TvZjlDemLM5Ws8Fz2CPqikhTcXdX5CQGH
dQ8vMQZKoEHqAz08KOOGrRtyTxCtSsEs+/7xy0neUFYoWDw1fouY+Ff0Y8d1xVyo
WVfCHBCCiZYr20kJ3WNqAsHiFjpoXDApyZ5kqz+LOzHliThmGjDAMwkzVuWpP7vf
XtoghqXgD1oxcI8LoPoAUrQ5j1Lf6qELi0R1Feb4BxXLqbqzQubkwCm3xQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFFtzscbVC+ZGUztQENKt3Eov8BHEMB8GA1UdIwQY
MBaAFLpNDmmrdp9luysVW9+oOnGG7qxEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWswT2FhdDJuMlc3S3hWYjM2ZzZjWWJ1ckVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8zZDZkNmMtZjU4ZC00MmU2LWI2ODgt
OGVmZjNmZDNjNDhhLzEvVzNPeHh0VUw1a1pUTzFBUTBxM2NTaV93RWNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC8zZDZkNmMtZjU4ZC00MmU2LWI2ODgtOGVmZjNmZDNjNDhh
LzEvdWswT2FhdDJuMlc3S3hWYjM2ZzZjWWJ1ckVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQALY+gAwQA
LY+iAwQALZWmAwQAwvYkAwQBwvcsMA0GCSqGSIb3DQEBCwUAA4IBAQBAgTMY1lJf
GUZK+cNx+canp2f9AECi/D1DvhZnxvDp6V8wjb94eqp2HMyIlnkvaUvVj7JAu4Ro
DvOUBMAweAtGZR+HPjJIkXsD74iJp4u/PQLBf1NTlZHuz3kNAdYjesnuJngD3HE7
wiFGB/Kir0LMMSx2zlZe4Tp43wwBZgk85/Zkzfp3hR3yl3ZAg0EY7Vpz3qgeFvsu
mcWm4t6TAiXt0S0gAcZiejihdp4wiRFzaRqw2ZdcmPTM0J7qO+GF7ueLCXZAZ7o7
/KL/29hTmW+LvJK0RbOXiGJSMePTeXE25PHg9JoIV47PkNgI+q0Pu5pzY3KXbkbl
wiFgq25W9BH6
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:51 2024 by rpki-client on console-fra.rpki-client.org