Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/WWVUndIKcoyBfKnaUhcIbZYz5yc.roa
File: WWVUndIKcoyBfKnaUhcIbZYz5yc.roa (raw, json)
Hash identifier: y8iD0h1E3vMBF93aFcM9Tq2tJxpcw+IvcutaJBsCI8c=
Subject key identifier: 59:65:54:9D:D2:0A:72:8C:81:7C:A9:DA:52:17:08:6D:96:33:E7:27
Certificate issuer: /CN=e29b9ac2ef631b92e82f595d73e4792c816ec6e6
Certificate serial: 0182B2AAD6C4F5C6E45163551D941E775D9A
Authority key identifier: E2:9B:9A:C2:EF:63:1B:92:E8:2F:59:5D:73:E4:79:2C:81:6E:C6:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4puawu9jG5LoL1ldc-R5LIFuxuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/WWVUndIKcoyBfKnaUhcIbZYz5yc.roa
Signing time: Thu 18 Aug 2022 20:35:16 +0000
ROA not before: Thu 18 Aug 2022 20:35:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8374
IP address blocks: 5.60.0.0/16 maxlen: 16
5.172.224.0/19 maxlen: 19
46.215.0.0/16 maxlen: 16
37.98.208.0/20 maxlen: 20
37.109.0.0/16 maxlen: 16
93.154.128.0/17 maxlen: 17
84.39.160.0/20 maxlen: 20
87.251.224.0/19 maxlen: 19
77.112.0.0/14 maxlen: 14
193.41.112.0/23 maxlen: 23
92.60.128.0/20 maxlen: 20
37.247.128.0/17 maxlen: 17
78.30.64.0/18 maxlen: 18
46.168.0.0/15 maxlen: 15
95.40.0.0/15 maxlen: 15
185.4.212.0/22 maxlen: 22
46.76.0.0/15 maxlen: 15
37.7.0.0/16 maxlen: 16
31.0.0.0/15 maxlen: 15
37.209.128.0/19 maxlen: 19
212.2.96.0/19 maxlen: 19
37.152.16.0/20 maxlen: 20
37.248.0.0/15 maxlen: 15
188.125.32.0/19 maxlen: 19
151.248.32.0/20 maxlen: 20
5.174.0.0/16 maxlen: 16
2a01:2e0::/28 maxlen: 28
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:b2:aa:d6:c4:f5:c6:e4:51:63:55:1d:94:1e:77:5d:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e29b9ac2ef631b92e82f595d73e4792c816ec6e6
Validity
Not Before: Aug 18 20:35:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5965549dd20a728c817ca9da5217086d9633e727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d3:af:2c:51:94:a5:d3:2c:32:e2:41:2c:bf:
d5:08:d9:eb:2b:03:98:56:bb:57:20:29:9e:a9:69:
82:d3:d2:cd:d1:05:39:64:54:4e:fd:d9:f6:22:ce:
64:59:8b:ea:9c:b4:1a:9a:91:fd:aa:26:5b:05:18:
22:8d:6e:36:3a:14:51:6a:43:40:c8:e4:2f:e6:49:
52:28:25:c9:a1:88:6c:00:3b:03:03:e5:c5:af:0c:
0a:8b:39:d9:2c:09:3d:92:e1:ae:a2:8e:84:11:9f:
51:94:8b:75:c6:c9:fa:6f:33:06:0e:18:82:a0:9b:
31:57:67:74:e6:16:e3:cf:f1:c7:33:22:dc:18:81:
e0:f2:6d:4a:a0:d4:6e:e1:3e:b8:9c:42:6f:1c:15:
08:e9:8d:d6:e7:7f:05:60:a4:ca:cc:be:33:ef:6e:
21:a6:36:1d:f1:11:e1:a7:81:b7:70:79:b5:fe:5f:
0f:65:f4:b6:9c:fa:8f:fe:27:b4:d3:a6:73:27:a4:
ba:43:43:d8:4b:20:85:eb:99:27:c8:3e:dc:f2:2e:
1f:95:ae:e1:a3:4c:62:03:82:22:b8:20:5c:a1:a7:
0c:00:07:cc:f4:8a:d6:33:9d:74:0a:4e:08:82:d3:
67:78:77:88:39:d9:fe:c7:0b:09:a1:17:29:41:84:
5d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:65:54:9D:D2:0A:72:8C:81:7C:A9:DA:52:17:08:6D:96:33:E7:27
X509v3 Authority Key Identifier:
keyid:E2:9B:9A:C2:EF:63:1B:92:E8:2F:59:5D:73:E4:79:2C:81:6E:C6:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4puawu9jG5LoL1ldc-R5LIFuxuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/WWVUndIKcoyBfKnaUhcIbZYz5yc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.60.0.0/16
5.172.224.0/19
5.174.0.0/16
31.0.0.0/15
37.7.0.0/16
37.98.208.0/20
37.109.0.0/16
37.152.16.0/20
37.209.128.0/19
37.247.128.0-37.249.255.255
46.76.0.0/15
46.168.0.0/15
46.215.0.0/16
77.112.0.0/14
78.30.64.0/18
84.39.160.0/20
87.251.224.0/19
92.60.128.0/20
93.154.128.0/17
95.40.0.0/15
151.248.32.0/20
185.4.212.0/22
188.125.32.0/19
193.41.112.0/23
212.2.96.0/19
IPv6:
2a01:2e0::/28
Signature Algorithm: sha256WithRSAEncryption
2a:3b:df:7f:3a:ed:62:ef:dd:2e:32:a1:7f:54:5d:28:05:2c:
28:90:f2:45:c8:ca:08:37:8d:24:39:1b:79:dc:e1:10:a7:af:
dc:94:38:c8:44:8a:f0:6a:19:23:4b:53:ea:c9:04:40:49:45:
fc:4a:e9:86:be:b9:54:d4:6b:43:6d:e2:25:e9:ca:60:20:99:
bf:0a:c7:4a:25:91:27:42:23:0a:9e:49:dd:e3:2a:2e:f9:1e:
e7:34:1b:f1:54:f2:3e:4b:94:c0:b2:7e:a8:96:b2:cf:bf:79:
06:6c:31:98:3f:85:ca:30:da:e6:89:ab:91:30:e2:8f:c4:d3:
e7:8a:3d:6f:20:56:0b:ae:46:8b:ce:cb:77:fa:aa:e2:cf:6b:
94:d7:5c:ca:75:cb:ed:04:11:7a:ab:c1:a7:bc:48:d9:96:17:
ff:54:29:43:d3:fa:e2:79:f7:5a:ed:6b:cc:a2:9f:cc:a3:55:
15:d4:18:38:22:c8:fb:0c:71:8c:5e:df:f8:64:38:1f:b9:3c:
1c:af:e6:32:a4:0e:1d:fd:a2:fd:47:95:55:65:74:8b:94:7d:
fe:9f:f9:0b:fa:9a:10:6d:10:0f:8f:8f:ae:25:48:3a:64:c4:
5a:d0:c4:00:30:59:f7:b8:99:09:c2:9f:e2:d3:09:1d:ad:da:
b4:a3:71:9d
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgISAYKyqtbE9cbkUWNVHZQed12aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyOWI5YWMyZWY2MzFiOTJlODJmNTk1ZDczZTQ3OTJjODE2
ZWM2ZTYwHhcNMjIwODE4MjAzNTE2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OTY1NTQ5ZGQyMGE3MjhjODE3Y2E5ZGE1MjE3MDg2ZDk2MzNlNzI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9OvLFGUpdMsMuJBLL/VCNnrKwOY
VrtXICmeqWmC09LN0QU5ZFRO/dn2Is5kWYvqnLQampH9qiZbBRgijW42OhRRakNA
yOQv5klSKCXJoYhsADsDA+XFrwwKiznZLAk9kuGuoo6EEZ9RlIt1xsn6bzMGDhiC
oJsxV2d05hbjz/HHMyLcGIHg8m1KoNRu4T64nEJvHBUI6Y3W538FYKTKzL4z724h
pjYd8RHhp4G3cHm1/l8PZfS2nPqP/ie006ZzJ6S6Q0PYSyCF65knyD7c8i4fla7h
o0xiA4IiuCBcoacMAAfM9IrWM510Ck4IgtNneHeIOdn+xwsJoRcpQYRdOwIDAQAB
o4ICqjCCAqYwHQYDVR0OBBYEFFllVJ3SCnKMgXyp2lIXCG2WM+cnMB8GA1UdIwQY
MBaAFOKbmsLvYxuS6C9ZXXPkeSyBbsbmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHB1YXd1OWpHNUxvTDFsZGMtUjVMSUZ1eHVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82OTAzNTctZGZiZS00ZDg2LWFmZDYt
OTE2NGUzNTJhODNjLzEvV1dWVW5kSUtjb3lCZktuYVVoY0liWll6NXljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi82OTAzNTctZGZiZS00ZDg2LWFmZDYtOTE2NGUzNTJhODNj
LzEvNHB1YXd1OWpHNUxvTDFsZGMtUjVMSUZ1eHVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIG/BggrBgEFBQcBBwEB/wSBrzCBrDCBmgQCAAEwgZMDAwAF
PAMEBQWs4AMDAAWuAwMBHwADAwAlBwMEBCVi0AMDACVtAwQEJZgQAwQFJdGAMAsD
BAcl94ADAwEl+AMDAS5MAwMBLqgDAwAu1wMDAk1wAwQGTh5AAwQEVCegAwQFV/vg
AwQEXDyAAwQHXZqAAwMBXygDBASX+CADBAK5BNQDBAW8fSADBAHBKXADBAXUAmAw
DQQCAAIwBwMFBCoBAuAwDQYJKoZIhvcNAQELBQADggEBACo733867WLv3S4yoX9U
XSgFLCiQ8kXIygg3jSQ5G3nc4RCnr9yUOMhEivBqGSNLU+rJBEBJRfxK6Ya+uVTU
a0Nt4iXpymAgmb8Kx0olkSdCIwqeSd3jKi75Huc0G/FU8j5LlMCyfqiWss+/eQZs
MZg/hcow2uaJq5Ew4o/E0+eKPW8gVguuRovOy3f6quLPa5TXXMp1y+0EEXqrwae8
SNmWF/9UKUPT+uJ591rta8yin8yjVRXUGDgiyPsMcYxe3/hkOB+5PByv5jKkDh39
ov1HlVVldIuUff6f+Qv6mhBtEA+Pj64lSDpkxFrQxAAwWfe4mQnCn+LTCR2t2rSj
cZ0=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:33 2023 by rpki-client on console-ams.rpki-client.org