Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/w4WmG9MGe-br0by5h_ynSK45598.roa
File: w4WmG9MGe-br0by5h_ynSK45598.roa (raw, json)
Hash identifier: mS5Yl13pQpOIRNOUyHa6rypxgcJTIxedbgPATVahG2o=
Subject key identifier: C3:85:A6:1B:D3:06:7B:E6:EB:D1:BC:B9:87:FC:A7:48:AE:39:E7:DF
Certificate issuer: /CN=01335442514d5249b5143cfdf821216bb5c52940
Certificate serial: 05107E8E
Authority key identifier: 01:33:54:42:51:4D:52:49:B5:14:3C:FD:F8:21:21:6B:B5:C5:29:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ATNUQlFNUkm1FDz9-CEha7XFKUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/w4WmG9MGe-br0by5h_ynSK45598.roa
Signing time: Mon 09 May 2022 22:16:58 +0000
ROA not before: Mon 09 May 2022 22:16:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7979
IP address blocks: 23.105.231.0/24 maxlen: 24
23.105.232.0/24 maxlen: 24
23.105.240.0/24 maxlen: 24
23.105.252.0/24 maxlen: 24
23.105.248.0/24 maxlen: 24
23.111.32.0/19 maxlen: 24
23.105.224.0/19 maxlen: 24
23.105.225.0/24 maxlen: 24
23.111.96.0/19 maxlen: 24
23.111.103.0/24 maxlen: 24
23.111.108.0/24 maxlen: 24
23.111.106.0/24 maxlen: 24
23.111.116.0/24 maxlen: 24
23.111.206.0/24 maxlen: 24
23.111.204.0/24 maxlen: 24
23.111.205.0/24 maxlen: 24
23.111.202.0/24 maxlen: 24
23.111.203.0/24 maxlen: 24
23.111.201.0/24 maxlen: 24
23.111.200.0/24 maxlen: 24
23.111.207.0/24 maxlen: 24
23.111.213.0/24 maxlen: 24
23.111.211.0/24 maxlen: 24
23.111.212.0/24 maxlen: 24
23.111.209.0/24 maxlen: 24
23.111.210.0/24 maxlen: 24
23.111.208.0/24 maxlen: 24
88.212.232.0/21 maxlen: 24
23.111.215.0/24 maxlen: 24
23.111.214.0/24 maxlen: 24
88.212.239.0/24 maxlen: 24
88.212.238.0/24 maxlen: 24
88.212.240.0/21 maxlen: 24
88.212.241.0/24 maxlen: 24
88.212.248.0/21 maxlen: 24
23.111.192.0/24 maxlen: 24
23.111.199.0/24 maxlen: 24
23.111.197.0/24 maxlen: 24
23.111.198.0/24 maxlen: 24
23.111.196.0/24 maxlen: 24
23.111.194.0/24 maxlen: 24
23.111.193.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84967054 (0x5107e8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01335442514d5249b5143cfdf821216bb5c52940
Validity
Not Before: May 9 22:16:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c385a61bd3067be6ebd1bcb987fca748ae39e7df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fa:5f:bf:5e:9f:b7:64:40:1b:34:f6:b3:36:
ff:85:32:6d:f0:df:2b:e3:f8:3b:c6:8d:8c:31:10:
40:fb:39:91:70:bc:78:1d:5d:ab:65:9e:2d:c1:c5:
9b:2a:e0:4c:aa:b7:30:a4:5c:5c:77:24:34:96:b1:
64:c1:42:74:f6:ab:21:04:f2:64:fd:48:a2:29:cd:
b7:ec:3b:39:cd:36:ea:5d:df:3d:db:11:f0:61:de:
1c:0e:9e:59:3a:ec:86:f2:c2:b4:0a:5b:12:e1:52:
ca:99:bb:80:5d:ac:05:ba:43:9a:59:0d:b1:9e:15:
65:c3:ef:21:f0:17:98:c0:58:fa:c2:44:2c:8f:bf:
9e:43:56:94:c6:7e:d4:81:a8:d9:de:03:c7:ee:c0:
fa:8c:63:26:81:6e:bb:54:b6:71:d3:28:22:39:57:
f6:34:5f:09:a2:9f:72:95:6e:45:29:0e:da:ec:fa:
59:2b:bd:42:7b:be:7c:b8:19:e5:55:8e:29:b5:e2:
2e:4e:66:47:78:6e:3a:8d:88:9a:5f:db:9b:5f:dd:
2b:32:67:49:19:1c:56:b7:2b:f0:67:b6:b2:1a:3f:
9c:66:cc:0e:a4:f0:f8:a5:9d:89:71:54:dd:a2:7e:
e1:45:31:87:e6:25:63:94:6e:81:ee:2a:d0:f8:71:
e5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:85:A6:1B:D3:06:7B:E6:EB:D1:BC:B9:87:FC:A7:48:AE:39:E7:DF
X509v3 Authority Key Identifier:
keyid:01:33:54:42:51:4D:52:49:B5:14:3C:FD:F8:21:21:6B:B5:C5:29:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ATNUQlFNUkm1FDz9-CEha7XFKUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/w4WmG9MGe-br0by5h_ynSK45598.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/ATNUQlFNUkm1FDz9-CEha7XFKUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.105.224.0/19
23.111.32.0/19
23.111.96.0/19
23.111.192.0-23.111.194.255
23.111.196.0-23.111.215.255
88.212.232.0-88.212.255.255
Signature Algorithm: sha256WithRSAEncryption
85:7f:65:e8:a8:a8:92:62:d1:3e:ff:08:12:8c:72:f4:f0:6f:
9d:34:75:a0:9b:1f:4b:0e:75:8d:e9:4b:7f:e4:2c:da:8e:5b:
f8:4f:2e:cc:d2:ef:8a:58:be:aa:11:d6:73:e0:78:e5:da:28:
a5:fa:4a:e9:61:16:6e:b6:a2:a4:29:1d:1f:08:dc:55:06:6e:
f0:73:ec:f0:62:f2:b9:ea:fb:df:e9:42:90:57:99:fd:d8:af:
31:df:59:b6:c3:c1:a7:64:c4:29:ae:e4:43:f2:5f:a2:ef:61:
cd:e7:0e:a2:d0:de:95:ce:88:2e:15:17:2b:40:0c:3a:c6:b1:
45:9f:f0:93:d8:f6:85:be:6e:a4:53:e3:c4:ae:3a:a4:fe:66:
13:0f:ff:51:4d:3d:80:7a:42:08:38:70:3f:3d:7c:8f:cd:0c:
27:d3:a9:77:4f:97:09:21:7a:1e:5b:6e:55:d4:9b:13:cc:f2:
1b:0a:15:0c:0d:d3:70:3c:9e:b5:7d:12:83:c5:f3:cc:ce:46:
4d:2e:e6:23:b7:06:10:e9:df:c9:6f:fd:bd:d3:17:f4:5e:ea:
2a:f2:95:74:94:25:d5:6f:b5:1e:59:55:6b:c9:6e:d4:a2:46:
dd:aa:52:66:a3:68:fa:42:28:25:4c:f7:1a:29:f9:dd:75:6b:
8d:f6:5b:07
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgIEBRB+jjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
MTMzNTQ0MjUxNGQ1MjQ5YjUxNDNjZmRmODIxMjE2YmI1YzUyOTQwMB4XDTIyMDUw
OTIyMTY1OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzM4NWE2MWJkMzA2
N2JlNmViZDFiY2I5ODdmY2E3NDhhZTM5ZTdkZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAM36X79en7dkQBs09rM2/4UybfDfK+P4O8aNjDEQQPs5kXC8
eB1dq2WeLcHFmyrgTKq3MKRcXHckNJaxZMFCdParIQTyZP1IoinNt+w7Oc026l3f
PdsR8GHeHA6eWTrshvLCtApbEuFSypm7gF2sBbpDmlkNsZ4VZcPvIfAXmMBY+sJE
LI+/nkNWlMZ+1IGo2d4Dx+7A+oxjJoFuu1S2cdMoIjlX9jRfCaKfcpVuRSkO2uz6
WSu9Qnu+fLgZ5VWOKbXiLk5mR3huOo2Iml/bm1/dKzJnSRkcVrcr8Ge2sho/nGbM
DqTw+KWdiXFU3aJ+4UUxh+YlY5Ruge4q0Phx5UsCAwEAAaOCAj4wggI6MB0GA1Ud
DgQWBBTDhaYb0wZ75uvRvLmH/KdIrjnn3zAfBgNVHSMEGDAWgBQBM1RCUU1SSbUU
PP34ISFrtcUpQDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0FUTlVRbEZOVWttMUZEejktQ0VoYTdYRktVQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjAvYzdhNjhmLTdiZjgtNGY4MC1hOWEyLTgxNWQyYzAyNjY0Ni8x
L3c0V21HOU1HZS1icjBieTVoX3luU0s0NTU5OC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjAv
YzdhNjhmLTdiZjgtNGY4MC1hOWEyLTgxNWQyYzAyNjY0Ni8xL0FUTlVRbEZOVWtt
MUZEejktQ0VoYTdYRktVQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBU
BggrBgEFBQcBBwEB/wRFMEMwQQQCAAEwOwMEBRdp4AMEBRdvIAMEBRdvYDAMAwQG
F2/AAwQAF2/CMAwDBAIXb8QDBAMXb9AwCwMEA1jU6AMDAFjUMA0GCSqGSIb3DQEB
CwUAA4IBAQCFf2XoqKiSYtE+/wgSjHL08G+dNHWgmx9LDnWN6Ut/5Czajlv4Ty7M
0u+KWL6qEdZz4Hjl2iil+krpYRZutqKkKR0fCNxVBm7wc+zwYvK56vvf6UKQV5n9
2K8x31m2w8GnZMQpruRD8l+i72HN5w6i0N6VzoguFRcrQAw6xrFFn/CT2PaFvm6k
U+PErjqk/mYTD/9RTT2AekIIOHA/PXyPzQwn06l3T5cJIXoeW25V1JsTzPIbChUM
DdNwPJ61fRKDxfPMzkZNLuYjtwYQ6d/Jb/290xf0Xuoq8pV0lCXVb7UeWVVryW7U
okbdqlJmo2j6QiglTPcaKfnddWuN9lsH
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:16 2023 by rpki-client on console-ams.rpki-client.org