Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/WwCsBnzWKZDqtJT4zy6mLbFfGqY.roa
File: WwCsBnzWKZDqtJT4zy6mLbFfGqY.roa (raw, json)
Hash identifier: 4lOPqY9DXvba0Z1VhHQ7QD2mG5XBOQ8V5yDQwNfk1zA=
Subject key identifier: 5B:00:AC:06:7C:D6:29:90:EA:B4:94:F8:CF:2E:A6:2D:B1:5F:1A:A6
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 01852A4DE55621112C5C6E8182DE5B1D913D
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/WwCsBnzWKZDqtJT4zy6mLbFfGqY.roa
Signing time: Mon 19 Dec 2022 12:13:46 +0000
ROA not before: Mon 19 Dec 2022 12:13:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200845
IP address blocks: 185.228.120.0/24 maxlen: 24
185.228.123.0/24 maxlen: 24
185.228.122.0/24 maxlen: 24
185.228.121.0/24 maxlen: 24
185.228.120.0/22 maxlen: 24
185.134.40.0/22 maxlen: 24
5.181.100.0/22 maxlen: 24
45.141.4.0/22 maxlen: 24
185.93.120.0/22 maxlen: 24
185.113.186.0/24 maxlen: 24
185.113.185.0/24 maxlen: 24
185.113.184.0/24 maxlen: 24
185.113.187.0/24 maxlen: 24
188.208.20.0/22 maxlen: 24
193.32.236.0/22 maxlen: 24
188.208.21.0/24 maxlen: 24
185.94.48.0/22 maxlen: 24
185.93.232.0/22 maxlen: 24
176.32.54.0/24 maxlen: 24
93.92.224.0/22 maxlen: 24
185.119.236.0/22 maxlen: 24
176.32.50.0/24 maxlen: 24
188.241.96.0/21 maxlen: 24
185.120.44.0/22 maxlen: 24
185.234.186.0/23 maxlen: 23
185.234.184.0/24 maxlen: 24
185.234.185.0/24 maxlen: 24
185.44.233.0/24 maxlen: 24
185.44.234.0/23 maxlen: 24
185.51.108.0/22 maxlen: 24
86.105.234.0/24 maxlen: 24
212.104.160.0/19 maxlen: 24
5.226.16.0/20 maxlen: 24
85.117.245.0/24 maxlen: 24
193.91.0.0/24 maxlen: 24
85.117.244.0/22 maxlen: 24
193.91.10.0/24 maxlen: 24
185.43.252.0/22 maxlen: 24
88.98.98.0/24 maxlen: 24
88.98.96.0/20 maxlen: 24
88.98.96.0/23 maxlen: 23
88.98.99.0/24 maxlen: 24
88.98.104.0/23 maxlen: 24
88.98.100.0/22 maxlen: 24
88.98.111.0/24 maxlen: 24
88.98.110.0/24 maxlen: 24
88.98.108.0/23 maxlen: 24
88.98.108.0/22 maxlen: 24
88.98.106.0/23 maxlen: 24
88.98.112.0/20 maxlen: 24
141.98.52.0/22 maxlen: 24
212.63.116.0/22 maxlen: 24
212.63.118.0/24 maxlen: 24
212.63.117.0/24 maxlen: 24
212.63.116.0/24 maxlen: 24
212.63.121.0/24 maxlen: 24
212.63.119.0/24 maxlen: 24
212.63.123.0/24 maxlen: 24
212.63.122.0/24 maxlen: 24
185.83.104.0/22 maxlen: 24
45.144.12.0/22 maxlen: 24
45.90.52.0/22 maxlen: 24
185.158.52.0/22 maxlen: 24
91.245.200.0/21 maxlen: 24
185.131.13.0/24 maxlen: 24
185.131.12.0/22 maxlen: 24
85.217.132.0/24 maxlen: 24
85.217.129.0/24 maxlen: 24
85.217.139.0/24 maxlen: 24
85.217.138.0/24 maxlen: 24
85.217.137.0/24 maxlen: 24
85.217.136.0/24 maxlen: 24
85.217.135.0/24 maxlen: 24
85.217.134.0/24 maxlen: 24
85.217.133.0/24 maxlen: 24
85.217.141.0/24 maxlen: 24
85.217.143.0/24 maxlen: 24
85.217.142.0/24 maxlen: 24
85.217.152.0/24 maxlen: 24
85.217.151.0/24 maxlen: 24
85.217.150.0/24 maxlen: 24
85.217.147.0/24 maxlen: 24
85.217.146.0/24 maxlen: 24
85.217.155.0/24 maxlen: 24
85.217.154.0/24 maxlen: 24
85.217.153.0/24 maxlen: 24
85.217.159.0/24 maxlen: 24
85.217.158.0/24 maxlen: 24
85.217.157.0/24 maxlen: 24
85.217.156.0/24 maxlen: 24
185.130.24.0/23 maxlen: 24
194.8.140.0/22 maxlen: 24
194.49.0.0/22 maxlen: 24
185.130.26.0/23 maxlen: 24
185.123.136.0/22 maxlen: 24
45.157.56.0/22 maxlen: 24
185.48.84.0/22 maxlen: 24
185.176.84.0/22 maxlen: 24
185.210.16.0/22 maxlen: 24
79.142.184.0/22 maxlen: 24
185.162.172.0/23 maxlen: 24
185.162.175.0/24 maxlen: 24
185.162.174.0/24 maxlen: 24
195.82.105.0/24 maxlen: 24
195.82.104.0/24 maxlen: 24
195.82.106.0/24 maxlen: 24
195.82.124.0/24 maxlen: 24
185.216.216.0/22 maxlen: 22
185.216.218.0/23 maxlen: 23
185.216.217.0/24 maxlen: 24
139.28.76.0/22 maxlen: 22
185.196.200.0/23 maxlen: 24
185.196.203.0/24 maxlen: 24
185.196.202.0/24 maxlen: 24
91.242.144.0/22 maxlen: 24
185.202.188.0/22 maxlen: 24
2a06:8840::/29 maxlen: 29
2a06:8f40::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2a:4d:e5:56:21:11:2c:5c:6e:81:82:de:5b:1d:91:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Dec 19 12:13:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5b00ac067cd62990eab494f8cf2ea62db15f1aa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e1:47:f0:14:c3:da:40:49:fb:76:af:d3:c6:
bb:49:56:e9:b6:98:b5:ad:01:4c:ff:8f:88:14:0a:
fd:63:2f:b4:fd:2e:0a:5f:1d:2c:1e:f0:06:35:28:
2c:ac:31:2d:db:e6:ca:0a:61:e4:1f:db:69:52:64:
41:bf:af:7a:8b:a7:a2:ec:de:35:1e:25:6d:b6:2c:
96:23:66:1f:8e:90:6b:95:62:60:34:78:33:1d:ad:
ae:33:fa:9b:c0:84:5b:ab:f1:09:14:f5:a5:ff:d7:
5a:e4:c5:08:81:cd:5c:f1:6a:21:c8:e8:1a:ad:85:
e2:e5:dd:ab:44:fd:8a:af:40:e8:8a:c6:ea:f8:8c:
87:58:44:aa:9d:94:78:ef:bb:82:17:fa:e0:1b:0a:
36:48:4f:c7:b2:97:59:b2:32:15:6d:99:6e:86:e2:
ce:01:db:7e:2c:38:7f:5c:75:8f:0c:ca:e2:3c:da:
a7:c9:ec:02:cd:e4:fe:43:b7:66:a1:66:11:56:fd:
f0:07:af:8f:60:4d:35:6d:ce:b2:02:1d:8b:4e:fd:
91:a5:f2:8b:e9:dc:29:da:2a:23:7e:2c:7f:73:c8:
42:72:e3:b7:c2:11:aa:5c:b3:f2:53:b2:39:1f:80:
07:e9:b2:69:1a:c6:2e:e2:df:1c:9f:30:2b:64:f6:
82:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:00:AC:06:7C:D6:29:90:EA:B4:94:F8:CF:2E:A6:2D:B1:5F:1A:A6
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/WwCsBnzWKZDqtJT4zy6mLbFfGqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.100.0/22
5.226.16.0/20
45.90.52.0/22
45.141.4.0/22
45.144.12.0/22
45.157.56.0/22
79.142.184.0/22
85.117.244.0/22
85.217.129.0/24
85.217.132.0-85.217.139.255
85.217.141.0-85.217.143.255
85.217.146.0/23
85.217.150.0-85.217.159.255
86.105.234.0/24
88.98.96.0/19
91.242.144.0/22
91.245.200.0/21
93.92.224.0/22
139.28.76.0/22
141.98.52.0/22
176.32.50.0/24
176.32.54.0/24
185.43.252.0/22
185.44.233.0-185.44.235.255
185.48.84.0/22
185.51.108.0/22
185.83.104.0/22
185.93.120.0/22
185.93.232.0/22
185.94.48.0/22
185.113.184.0/22
185.119.236.0/22
185.120.44.0/22
185.123.136.0/22
185.130.24.0/22
185.131.12.0/22
185.134.40.0/22
185.158.52.0/22
185.162.172.0/22
185.176.84.0/22
185.196.200.0/22
185.202.188.0/22
185.210.16.0/22
185.216.216.0/22
185.228.120.0/22
185.234.184.0/22
188.208.20.0/22
188.241.96.0/21
193.32.236.0/22
193.91.0.0/24
193.91.10.0/24
194.8.140.0/22
194.49.0.0/22
195.82.104.0-195.82.106.255
195.82.124.0/24
212.63.116.0/22
212.63.121.0-212.63.123.255
212.104.160.0/19
IPv6:
2a06:8840::/29
2a06:8f40::/29
Signature Algorithm: sha256WithRSAEncryption
9f:24:e0:57:55:09:65:f9:7f:3a:7f:1b:a2:0e:32:bd:3f:7a:
cb:55:dc:c2:c9:49:04:90:3c:61:73:5a:a0:5a:96:74:fb:da:
82:07:06:b5:27:d0:f4:83:f2:43:8c:e3:ef:31:66:98:32:d1:
25:73:18:f6:c2:f5:34:d5:31:94:19:e3:9c:92:57:01:6e:68:
86:99:1c:ba:b1:31:13:e9:0d:cf:7b:e4:6c:f6:57:a4:f6:f6:
2d:c2:6c:bc:6f:d6:de:1f:b0:11:ae:5d:7e:49:e5:94:f0:99:
f4:94:06:e1:f4:c8:6f:d5:26:66:e4:34:8a:6b:cd:f8:65:3e:
97:f8:d1:a7:bc:12:50:b1:24:1e:6b:71:a8:78:7c:f9:06:d7:
88:50:f8:24:2e:18:88:c1:ef:1f:fb:03:15:88:e2:b2:26:c1:
b8:5e:7e:22:3c:45:76:64:31:59:29:af:7c:11:bd:10:a6:59:
19:7e:90:1a:de:76:6d:a8:6b:a9:30:c2:a9:cf:04:a0:e3:f3:
9b:de:63:23:5d:c2:6d:0c:50:e8:51:3f:3a:da:ae:bc:ab:71:
a2:85:5c:85:b5:df:7e:a0:89:15:a8:31:99:ce:3a:2f:be:b7:
21:f2:74:b3:64:9e:8f:b0:62:a6:44:1c:74:28:69:2e:01:5e:
a6:10:0f:d0
-----BEGIN CERTIFICATE-----
MIIGozCCBYugAwIBAgISAYUqTeVWIREsXG6Bgt5bHZE9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NzVmYjA5MzRjZjZhNThkY2NlZjExMDg3NWRiZTVlM2U4
YjZiNzUwHhcNMjIxMjE5MTIxMzQ2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YjAwYWMwNjdjZDYyOTkwZWFiNDk0ZjhjZjJlYTYyZGIxNWYxYWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOFH8BTD2kBJ+3av08a7SVbptpi1
rQFM/4+IFAr9Yy+0/S4KXx0sHvAGNSgsrDEt2+bKCmHkH9tpUmRBv696i6ei7N41
HiVttiyWI2YfjpBrlWJgNHgzHa2uM/qbwIRbq/EJFPWl/9da5MUIgc1c8WohyOga
rYXi5d2rRP2Kr0Doisbq+IyHWESqnZR477uCF/rgGwo2SE/HspdZsjIVbZluhuLO
Adt+LDh/XHWPDMriPNqnyewCzeT+Q7dmoWYRVv3wB6+PYE01bc6yAh2LTv2RpfKL
6dwp2iojfix/c8hCcuO3whGqXLPyU7I5H4AH6bJpGsYu4t8cnzArZPaCkQIDAQAB
o4IDrzCCA6swHQYDVR0OBBYEFFsArAZ81imQ6rSU+M8upi2xXxqmMB8GA1UdIwQY
MBaAFNR1+wk0z2pY3M7xEIddvl4+i2t1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYt
Yzc5MTRhYjY0MjczLzEvV3dDc0JueldLWkRxdEpUNHp5Nm1MYkZmR3FZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYtYzc5MTRhYjY0Mjcz
LzEvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBwwYIKwYBBQUHAQcBAf8EggGyMIIBrjCCAZQEAgABMIIB
jAMEAgW1ZAMEBAXiEAMEAi1aNAMEAi2NBAMEAi2QDAMEAi2dOAMEAk+OuAMEAlV1
9AMEAFXZgTAMAwQCVdmEAwQCVdmIMAwDBABV2Y0DBARV2YADBAFV2ZIwDAMEAVXZ
lgMEBVXZgAMEAFZp6gMEBVhiYAMEAlvykAMEA1v1yAMEAl1c4AMEAoscTAMEAo1i
NAMEALAgMgMEALAgNgMEArkr/DAMAwQAuSzpAwQCuSzoAwQCuTBUAwQCuTNsAwQC
uVNoAwQCuV14AwQCuV3oAwQCuV4wAwQCuXG4AwQCuXfsAwQCuXgsAwQCuXuIAwQC
uYIYAwQCuYMMAwQCuYYoAwQCuZ40AwQCuaKsAwQCubBUAwQCucTIAwQCucq8AwQC
udIQAwQCudjYAwQCueR4AwQCueq4AwQCvNAUAwQDvPFgAwQCwSDsAwQAwVsAAwQA
wVsKAwQCwgiMAwQCwjEAMAwDBAPDUmgDBADDUmoDBADDUnwDBALUP3QwDAMEANQ/
eQMEAtQ/eAMEBdRooDAUBAIAAjAOAwUDKgaIQAMFAyoGj0AwDQYJKoZIhvcNAQEL
BQADggEBAJ8k4FdVCWX5fzp/G6IOMr0/estV3MLJSQSQPGFzWqBalnT72oIHBrUn
0PSD8kOM4+8xZpgy0SVzGPbC9TTVMZQZ45ySVwFuaIaZHLqxMRPpDc975Gz2V6T2
9i3CbLxv1t4fsBGuXX5J5ZTwmfSUBuH0yG/VJmbkNIprzfhlPpf40ae8ElCxJB5r
cah4fPkG14hQ+CQuGIjB7x/7AxWI4rImwbhefiI8RXZkMVkpr3wRvRCmWRl+kBre
dm2oa6kwwqnPBKDj85veYyNdwm0MUOhRPzrarryrcaKFXIW1336giRWoMZnOOi++
tyHydLNkno+wYqZEHHQoaS4BXqYQD9A=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:36 2024 by rpki-client on console-fra.rpki-client.org