Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/wUvH72zY8DCFYRvU-ASm8UKoql8.roa
File: wUvH72zY8DCFYRvU-ASm8UKoql8.roa (raw, json)
Hash identifier: 9CYVg1tZucTR2X9ovr/7561nI9OCQ7qBds+c2SLp73k=
Subject key identifier: C1:4B:C7:EF:6C:D8:F0:30:85:61:1B:D4:F8:04:A6:F1:42:A8:AA:5F
Certificate issuer: /CN=956866562d9f25831ec0ace8a9d8cd0e594d71fc
Certificate serial: 2116B325
Authority key identifier: 95:68:66:56:2D:9F:25:83:1E:C0:AC:E8:A9:D8:CD:0E:59:4D:71:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lWhmVi2fJYMewKzoqdjNDllNcfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/wUvH72zY8DCFYRvU-ASm8UKoql8.roa
Signing time: Sat 01 Jan 2022 14:54:46 +0000
ROA not before: Sat 01 Jan 2022 14:54:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59807
IP address blocks: 164.10.79.0/24 maxlen: 24
185.181.88.0/22 maxlen: 24
164.10.30.0/24 maxlen: 24
164.10.29.0/24 maxlen: 24
164.10.26.0/24 maxlen: 24
164.10.32.0/24 maxlen: 24
164.10.252.0/24 maxlen: 24
164.10.255.0/24 maxlen: 24
164.10.45.0/24 maxlen: 24
164.10.50.0/24 maxlen: 24
164.10.49.0/24 maxlen: 24
164.10.48.0/24 maxlen: 24
164.10.47.0/24 maxlen: 24
164.10.46.0/24 maxlen: 24
164.10.61.0/24 maxlen: 24
164.10.60.0/24 maxlen: 24
164.10.0.0/24 maxlen: 24
164.10.0.0/16 maxlen: 24
2a03:2520::/32 maxlen: 56
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 555135781 (0x2116b325)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=956866562d9f25831ec0ace8a9d8cd0e594d71fc
Validity
Not Before: Jan 1 14:54:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c14bc7ef6cd8f03085611bd4f804a6f142a8aa5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:aa:47:68:e0:01:57:56:60:9a:9a:46:96:3e:
bb:be:08:f4:7d:49:89:6d:d1:17:bc:ae:3f:6d:4d:
48:24:65:a1:8b:81:f0:03:b1:61:e2:7e:4f:dc:97:
de:73:5f:d5:b7:47:b5:90:45:6e:35:84:e1:cf:4a:
21:9e:24:6f:ed:4b:67:a2:56:7c:71:1a:41:22:76:
2e:9e:34:14:99:f8:05:8d:e4:1b:1e:0a:aa:26:f1:
3f:00:06:f1:59:94:6c:67:be:55:34:36:b5:29:2c:
62:32:a4:c3:fb:4d:4f:f4:f0:87:a4:a4:f4:cb:82:
4d:cf:fc:05:a0:93:b4:b3:a3:f1:4b:8b:d0:e8:ed:
88:45:b0:35:6d:29:59:72:52:76:f8:88:b7:d2:b3:
26:04:15:8e:71:9d:c8:b0:c1:2b:f6:1c:98:b6:8b:
5b:b4:ce:d4:c6:78:99:ab:99:29:e9:e4:c4:3d:21:
25:31:65:f4:d2:d7:96:be:c0:8d:51:d5:e0:e4:30:
b8:d4:83:bb:cd:4f:36:fe:07:38:36:90:3a:ab:23:
d4:dc:4e:94:6b:5d:61:9e:4a:ed:69:70:56:98:8a:
72:12:43:43:07:c7:91:e2:a2:a4:8e:17:d5:7a:2a:
fb:37:3e:31:7d:30:d8:3f:ea:81:23:4f:56:c2:cf:
15:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:4B:C7:EF:6C:D8:F0:30:85:61:1B:D4:F8:04:A6:F1:42:A8:AA:5F
X509v3 Authority Key Identifier:
keyid:95:68:66:56:2D:9F:25:83:1E:C0:AC:E8:A9:D8:CD:0E:59:4D:71:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWhmVi2fJYMewKzoqdjNDllNcfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/wUvH72zY8DCFYRvU-ASm8UKoql8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.10.0.0/16
185.181.88.0/22
IPv6:
2a03:2520::/32
Signature Algorithm: sha256WithRSAEncryption
02:a5:a5:0d:79:02:0b:5b:13:7f:ef:ad:30:21:b9:0f:09:0f:
1d:c6:db:fb:94:4a:f8:ef:33:00:0b:91:13:93:f1:a5:27:25:
e1:74:19:79:77:be:6c:7a:0b:1f:bf:f0:13:25:35:ae:3f:00:
35:a8:4e:bc:76:23:5a:5e:af:51:a7:13:b6:c9:4e:eb:ef:46:
2f:23:49:8b:03:ac:12:ba:8b:01:17:08:e6:78:71:9f:5a:45:
51:90:07:29:06:21:e4:0a:59:1d:3a:4a:eb:24:4a:4f:47:01:
2e:24:60:00:f2:b8:f9:ba:13:2a:90:c1:20:3b:10:f7:6f:b3:
a3:6b:26:5c:da:96:50:61:d8:84:24:7a:fd:90:a6:9e:fe:a1:
5b:90:c5:d1:c9:07:7c:86:4e:ef:c0:a7:7e:c6:b0:68:43:a6:
4d:95:73:71:f9:37:3c:b5:ec:a8:9b:0a:ac:f7:64:67:f0:d7:
fa:99:4d:03:4b:fa:a7:ef:e5:69:be:3d:38:e8:2c:af:a4:44:
46:77:cc:dc:50:26:60:bd:bb:df:3f:23:8b:3c:80:06:85:cf:
18:a0:a1:62:62:8f:95:c9:a8:09:3d:aa:b3:97:79:3c:fd:92:
fa:e0:a7:da:8e:41:78:86:29:db:90:59:26:da:83:88:75:8d:
87:ec:b3:96
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIEIRazJTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
NTY4NjY1NjJkOWYyNTgzMWVjMGFjZThhOWQ4Y2QwZTU5NGQ3MWZjMB4XDTIyMDEw
MTE0NTQ0NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzE0YmM3ZWY2Y2Q4
ZjAzMDg1NjExYmQ0ZjgwNGE2ZjE0MmE4YWE1ZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANqqR2jgAVdWYJqaRpY+u74I9H1JiW3RF7yuP21NSCRloYuB
8AOxYeJ+T9yX3nNf1bdHtZBFbjWE4c9KIZ4kb+1LZ6JWfHEaQSJ2Lp40FJn4BY3k
Gx4KqibxPwAG8VmUbGe+VTQ2tSksYjKkw/tNT/Twh6Sk9MuCTc/8BaCTtLOj8UuL
0OjtiEWwNW0pWXJSdviIt9KzJgQVjnGdyLDBK/YcmLaLW7TO1MZ4mauZKenkxD0h
JTFl9NLXlr7AjVHV4OQwuNSDu81PNv4HODaQOqsj1NxOlGtdYZ5K7WlwVpiKchJD
QwfHkeKipI4X1Xoq+zc+MX0w2D/qgSNPVsLPFa8CAwEAAaOCAh0wggIZMB0GA1Ud
DgQWBBTBS8fvbNjwMIVhG9T4BKbxQqiqXzAfBgNVHSMEGDAWgBSVaGZWLZ8lgx7A
rOip2M0OWU1x/DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2xXaG1WaTJmSllNZXdLem9xZGpORGxsTmNmdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYmUvY2IyZWU4LTg3ODItNGFmNC04ZjZiLTlkN2Y4NmYwZDQ3Ny8x
L3dVdkg3MnpZOERDRllSdlUtQVNtOFVLb3FsOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmUv
Y2IyZWU4LTg3ODItNGFmNC04ZjZiLTlkN2Y4NmYwZDQ3Ny8xL2xXaG1WaTJmSllN
ZXdLem9xZGpORGxsTmNmdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAz
BggrBgEFBQcBBwEB/wQkMCIwEQQCAAEwCwMDAKQKAwQCubVYMA0EAgACMAcDBQAq
AyUgMA0GCSqGSIb3DQEBCwUAA4IBAQACpaUNeQILWxN/760wIbkPCQ8dxtv7lEr4
7zMAC5ETk/GlJyXhdBl5d75segsfv/ATJTWuPwA1qE68diNaXq9RpxO2yU7r70Yv
I0mLA6wSuosBFwjmeHGfWkVRkAcpBiHkClkdOkrrJEpPRwEuJGAA8rj5uhMqkMEg
OxD3b7OjayZc2pZQYdiEJHr9kKae/qFbkMXRyQd8hk7vwKd+xrBoQ6ZNlXNx+Tc8
teyomwqs92Rn8Nf6mU0DS/qn7+Vpvj046CyvpERGd8zcUCZgvbvfPyOLPIAGhc8Y
oKFiYo+VyagJPaqzl3k8/ZL64KfajkF4hinbkFkm2oOIdY2H7LOW
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:07 2024 by rpki-client on console-fra.rpki-client.org