Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/adcd18-eb22-4031-be5d-4287346c7f18/1/wc1rOXwp7i5bumwArQTOuuqGph8.roa
File: wc1rOXwp7i5bumwArQTOuuqGph8.roa (raw, json)
Hash identifier: z3X2Kq/PgVgaAzwTwEmWygFs7AvvXEvlchI2DvgvqZU=
Subject key identifier: C1:CD:6B:39:7C:29:EE:2E:5B:BA:6C:00:AD:04:CE:BA:EA:86:A6:1F
Certificate issuer: /CN=0eae204b66eb4ecfeac2d2e180f2ee686b9aa7d7
Certificate serial: 078E77B9
Authority key identifier: 0E:AE:20:4B:66:EB:4E:CF:EA:C2:D2:E1:80:F2:EE:68:6B:9A:A7:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dq4gS2brTs_qwtLhgPLuaGuap9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/adcd18-eb22-4031-be5d-4287346c7f18/1/wc1rOXwp7i5bumwArQTOuuqGph8.roa
Signing time: Sat 01 Jan 2022 13:58:22 +0000
ROA not before: Sat 01 Jan 2022 13:58:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205460
IP address blocks: 185.218.10.0/24 maxlen: 24
185.218.11.0/24 maxlen: 24
185.218.8.0/22 maxlen: 22
185.218.8.0/24 maxlen: 24
185.218.9.0/24 maxlen: 24
194.55.142.0/24 maxlen: 24
194.55.140.0/24 maxlen: 24
194.55.143.0/24 maxlen: 24
194.55.140.0/22 maxlen: 22
194.55.141.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126777273 (0x78e77b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eae204b66eb4ecfeac2d2e180f2ee686b9aa7d7
Validity
Not Before: Jan 1 13:58:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c1cd6b397c29ee2e5bba6c00ad04cebaea86a61f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:be:f7:e6:cb:56:fa:95:d8:6f:35:16:e7:c9:
0f:4b:de:aa:35:8c:1c:07:78:00:c1:02:8a:21:a2:
5e:fa:d7:df:58:ed:67:1c:51:e3:54:bf:5c:0f:34:
1e:0b:22:d7:1f:24:ec:39:fc:b6:de:4c:fe:5c:29:
8c:9b:a0:13:7d:a0:85:04:cf:9f:73:90:92:43:2c:
ae:cb:d7:19:7c:82:bb:52:f1:f0:d0:5f:92:67:df:
cc:a5:1e:e8:d7:59:ac:fd:3f:f6:86:6d:55:dd:43:
6c:2a:2c:a7:22:87:d7:b1:30:0b:50:e8:57:50:32:
b1:0d:a2:f2:a0:09:d8:a5:49:01:c6:78:9d:b6:6a:
10:c8:82:6b:18:07:3d:87:c0:06:02:30:37:c2:32:
82:97:de:fd:c4:cc:a0:ef:30:04:eb:9c:cb:d5:d8:
b1:2d:b8:ce:e8:fd:cd:a2:5e:ad:3c:19:4c:93:cb:
cd:d0:b4:7d:2b:06:0b:20:47:c5:d3:71:69:49:43:
a0:6f:89:e3:1c:64:b2:20:7e:ed:1d:55:40:8c:32:
8e:e7:5e:95:a9:73:a5:90:02:6c:db:51:79:a3:41:
48:2f:32:31:af:5f:32:0e:92:a4:ba:af:bb:7b:ec:
e4:b0:7a:e6:d3:e3:83:6c:38:9d:cd:0d:06:65:51:
15:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:CD:6B:39:7C:29:EE:2E:5B:BA:6C:00:AD:04:CE:BA:EA:86:A6:1F
X509v3 Authority Key Identifier:
keyid:0E:AE:20:4B:66:EB:4E:CF:EA:C2:D2:E1:80:F2:EE:68:6B:9A:A7:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dq4gS2brTs_qwtLhgPLuaGuap9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/adcd18-eb22-4031-be5d-4287346c7f18/1/wc1rOXwp7i5bumwArQTOuuqGph8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/adcd18-eb22-4031-be5d-4287346c7f18/1/Dq4gS2brTs_qwtLhgPLuaGuap9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.8.0/22
194.55.140.0/22
Signature Algorithm: sha256WithRSAEncryption
11:c2:ad:bc:42:eb:1e:f3:d2:0c:d9:80:ec:84:ec:79:f7:ab:
47:89:eb:32:71:58:ca:d0:ab:92:67:a8:3f:9a:e5:a4:bf:7c:
57:41:ee:3d:fa:6c:39:93:15:62:4c:2c:62:dd:83:8a:81:b1:
ef:87:9b:ca:79:22:e8:86:5b:21:9a:44:2e:f8:07:49:1a:e1:
97:d7:05:f2:10:75:ee:e0:ab:c6:86:a3:c0:c8:f8:93:8e:5d:
56:fb:6a:c8:c8:33:cf:52:47:31:33:a6:2a:75:c4:89:cd:d8:
aa:8c:66:c3:cc:3a:ce:ce:bf:65:f8:4c:00:0a:7f:d0:fc:0e:
f9:cc:c9:c5:c5:f2:7a:60:86:9c:d5:14:f8:25:e5:06:d1:95:
f5:bc:9d:6c:05:90:56:c9:1d:a8:38:94:c2:ad:3d:38:88:ff:
2b:32:30:8f:e6:33:1b:d8:af:04:46:4b:71:33:c9:1f:6e:62:
f0:0b:07:14:a0:8d:99:f5:36:1d:be:bf:63:79:22:df:a7:05:
c7:3a:64:d8:61:72:7a:04:51:01:ba:e6:db:20:a2:46:bd:63:
06:63:5e:32:c2:7a:30:3f:00:75:7e:15:2b:c0:37:aa:9e:e0:
22:18:5a:3d:3a:a9:d3:a2:22:f3:d3:5c:84:b7:1b:6f:f1:b0:
01:1e:2c:a9
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEB453uTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
ZWFlMjA0YjY2ZWI0ZWNmZWFjMmQyZTE4MGYyZWU2ODZiOWFhN2Q3MB4XDTIyMDEw
MTEzNTgyMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzFjZDZiMzk3YzI5
ZWUyZTViYmE2YzAwYWQwNGNlYmFlYTg2YTYxZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJW+9+bLVvqV2G81FufJD0veqjWMHAd4AMECiiGiXvrX31jt
ZxxR41S/XA80Hgsi1x8k7Dn8tt5M/lwpjJugE32ghQTPn3OQkkMsrsvXGXyCu1Lx
8NBfkmffzKUe6NdZrP0/9oZtVd1DbCospyKH17EwC1DoV1AysQ2i8qAJ2KVJAcZ4
nbZqEMiCaxgHPYfABgIwN8Iygpfe/cTMoO8wBOucy9XYsS24zuj9zaJerTwZTJPL
zdC0fSsGCyBHxdNxaUlDoG+J4xxksiB+7R1VQIwyjudelalzpZACbNtReaNBSC8y
Ma9fMg6SpLqvu3vs5LB65tPjg2w4nc0NBmVRFU0CAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBTBzWs5fCnuLlu6bACtBM666oamHzAfBgNVHSMEGDAWgBQOriBLZutOz+rC
0uGA8u5oa5qn1zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0RxNGdTMmJyVHNfcXd0TGhnUEx1YUd1YXA5Yy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjYvYWRjZDE4LWViMjItNDAzMS1iZTVkLTQyODczNDZjN2YxOC8x
L3djMXJPWHdwN2k1YnVtd0FyUVRPdXVxR3BoOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjYv
YWRjZDE4LWViMjItNDAzMS1iZTVkLTQyODczNDZjN2YxOC8xL0RxNGdTMmJyVHNf
cXd0TGhnUEx1YUd1YXA5Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEArnaCAMEAsI3jDANBgkqhkiG9w0B
AQsFAAOCAQEAEcKtvELrHvPSDNmA7ITseferR4nrMnFYytCrkmeoP5rlpL98V0Hu
PfpsOZMVYkwsYt2DioGx74ebynki6IZbIZpELvgHSRrhl9cF8hB17uCrxoajwMj4
k45dVvtqyMgzz1JHMTOmKnXEic3Yqoxmw8w6zs6/ZfhMAAp/0PwO+czJxcXyemCG
nNUU+CXlBtGV9bydbAWQVskdqDiUwq09OIj/KzIwj+YzG9ivBEZLcTPJH25i8AsH
FKCNmfU2Hb6/Y3ki36cFxzpk2GFyegRRAbrm2yCiRr1jBmNeMsJ6MD8AdX4VK8A3
qp7gIhhaPTqp06Ii89NchLcbb/GwAR4sqQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:40 2023 by rpki-client on console-fra.rpki-client.org