Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/5c565e-0427-4097-bc12-eb70ba1bde7b/1/W-4WcA7p6DzSR-g8yTZTgtbbyw8.roa
File: W-4WcA7p6DzSR-g8yTZTgtbbyw8.roa (raw, json)
Hash identifier: i3fUuShnkojQc5j/mO8o3HyccRLy1dc1Px4Hp3KGvFk=
Subject key identifier: 5B:EE:16:70:0E:E9:E8:3C:D2:47:E8:3C:C9:36:53:82:D6:DB:CB:0F
Certificate issuer: /CN=d52865e83b701b8ba934101c34c11ebdf3fa83bb
Certificate serial: E8D8
Authority key identifier: D5:28:65:E8:3B:70:1B:8B:A9:34:10:1C:34:C1:1E:BD:F3:FA:83:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Shl6DtwG4upNBAcNMEevfP6g7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/5c565e-0427-4097-bc12-eb70ba1bde7b/1/W-4WcA7p6DzSR-g8yTZTgtbbyw8.roa
Signing time: Mon 21 Mar 2022 17:41:36 +0000
ROA not before: Mon 21 Mar 2022 17:41:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 37.140.250.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59608 (0xe8d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d52865e83b701b8ba934101c34c11ebdf3fa83bb
Validity
Not Before: Mar 21 17:41:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5bee16700ee9e83cd247e83cc9365382d6dbcb0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:e0:76:ff:0a:ab:c2:44:24:f9:b9:5d:65:73:
d0:e6:b5:27:36:d2:bc:11:e5:ad:a7:2b:25:21:ca:
86:55:fb:b9:5a:02:2d:a6:fe:c2:81:1d:e7:df:5f:
f8:f5:31:63:8f:44:34:db:bb:fe:f1:46:d4:e9:b9:
36:cf:aa:89:17:5d:1d:5d:17:7b:df:5a:08:11:6c:
f6:4c:a2:ba:cf:e8:1f:17:c2:91:27:fe:05:c2:6a:
41:96:b9:82:eb:71:b9:a1:77:af:38:bc:fb:9b:74:
12:69:49:f4:b3:8d:52:0b:f7:13:93:ca:04:99:aa:
c1:6d:72:84:3b:fd:1d:69:68:d0:24:5e:74:63:9e:
69:f9:1d:57:23:2e:6f:87:bf:36:67:a0:5c:47:f8:
50:bc:99:76:c8:85:dc:84:2c:7b:fd:a8:0f:5d:c6:
b1:bb:84:25:1a:16:89:e6:ba:b8:1c:de:61:04:35:
91:de:a6:2f:17:9d:3a:92:d9:1d:15:1b:4d:e3:54:
77:db:1f:e2:50:6d:c8:3c:96:8d:9e:68:7a:c3:a3:
81:6a:41:0d:75:89:6b:a9:ea:cf:33:9f:69:20:81:
73:f0:86:4f:ca:dc:f9:d5:d8:2b:e7:37:9d:48:21:
2b:f4:e0:b7:18:b2:63:75:ae:bd:81:30:66:9a:ef:
3e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:EE:16:70:0E:E9:E8:3C:D2:47:E8:3C:C9:36:53:82:D6:DB:CB:0F
X509v3 Authority Key Identifier:
keyid:D5:28:65:E8:3B:70:1B:8B:A9:34:10:1C:34:C1:1E:BD:F3:FA:83:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Shl6DtwG4upNBAcNMEevfP6g7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/5c565e-0427-4097-bc12-eb70ba1bde7b/1/W-4WcA7p6DzSR-g8yTZTgtbbyw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/5c565e-0427-4097-bc12-eb70ba1bde7b/1/1Shl6DtwG4upNBAcNMEevfP6g7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.140.250.0/24
Signature Algorithm: sha256WithRSAEncryption
90:a3:5c:5e:be:1c:b8:23:a7:4b:e1:fa:90:2b:13:9d:1b:48:
ff:2c:ae:81:30:5d:02:5e:fa:8e:ec:60:02:19:6a:0d:e3:0d:
91:b6:1d:47:54:2a:7f:1a:e6:48:fd:0d:30:2b:89:b9:28:48:
86:0e:01:54:af:a6:61:c0:05:bb:6d:1f:21:16:b0:35:de:f1:
e3:d8:62:f9:d9:4a:c0:a2:a4:44:9a:92:64:70:3a:02:98:8c:
de:74:91:c6:d0:0a:5b:a0:9e:06:37:22:9c:27:63:9a:40:bd:
a7:5b:7f:42:3c:25:60:d3:cb:09:77:b2:e5:92:4d:7e:b3:eb:
74:f4:44:b5:7c:c5:78:3a:27:f3:67:16:28:2a:de:09:e3:5f:
1a:c6:f2:28:41:d0:80:ee:34:8b:fb:7c:c4:f5:d4:d4:46:1c:
65:fd:2d:d8:95:7b:a7:7b:1f:42:67:74:41:e1:a0:c7:a2:76:
e7:5d:0b:b7:bc:3b:74:2d:46:5d:6c:16:24:c7:79:d5:b4:af:
c1:f1:a9:ee:86:24:39:8f:50:8a:f9:aa:8b:be:ce:b0:37:10:
9d:17:31:60:55:e8:1d:44:9f:27:3a:20:01:29:9a:4c:d5:f9:
bb:2d:af:7a:b4:d0:c9:76:a7:3b:92:35:49:f9:65:49:ad:dd:
fa:bb:9b:40
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDAOjYMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ1
Mjg2NWU4M2I3MDFiOGJhOTM0MTAxYzM0YzExZWJkZjNmYTgzYmIwHhcNMjIwMzIx
MTc0MTM2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg1YmVlMTY3MDBlZTll
ODNjZDI0N2U4M2NjOTM2NTM4MmQ2ZGJjYjBmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA7OB2/wqrwkQk+bldZXPQ5rUnNtK8EeWtpyslIcqGVfu5WgIt
pv7CgR3n31/49TFjj0Q027v+8UbU6bk2z6qJF10dXRd731oIEWz2TKK6z+gfF8KR
J/4FwmpBlrmC63G5oXevOLz7m3QSaUn0s41SC/cTk8oEmarBbXKEO/0daWjQJF50
Y55p+R1XIy5vh782Z6BcR/hQvJl2yIXchCx7/agPXcaxu4QlGhaJ5rq4HN5hBDWR
3qYvF506ktkdFRtN41R32x/iUG3IPJaNnmh6w6OBakENdYlrqerPM59pIIFz8IZP
ytz51dgr5zedSCEr9OC3GLJjda69gTBmmu8+LQIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFFvuFnAO6eg80kfoPMk2U4LW28sPMB8GA1UdIwQYMBaAFNUoZeg7cBuLqTQQ
HDTBHr3z+oO7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
MVNobDZEdHdHNHVwTkJBY05NRWV2ZlA2ZzdzLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9kYi81YzU2NWUtMDQyNy00MDk3LWJjMTItZWI3MGJhMWJkZTdiLzEv
Vy00V2NBN3A2RHpTUi1nOHlUWlRndGJieXc4LnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi81
YzU2NWUtMDQyNy00MDk3LWJjMTItZWI3MGJhMWJkZTdiLzEvMVNobDZEdHdHNHVw
TkJBY05NRWV2ZlA2ZzdzLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJYz6MA0GCSqGSIb3DQEBCwUAA4IB
AQCQo1xevhy4I6dL4fqQKxOdG0j/LK6BMF0CXvqO7GACGWoN4w2Rth1HVCp/GuZI
/Q0wK4m5KEiGDgFUr6ZhwAW7bR8hFrA13vHj2GL52UrAoqREmpJkcDoCmIzedJHG
0ApboJ4GNyKcJ2OaQL2nW39CPCVg08sJd7Llkk1+s+t09ES1fMV4OifzZxYoKt4J
418axvIoQdCA7jSL+3zE9dTURhxl/S3YlXunex9CZ3RB4aDHonbnXQu3vDt0LUZd
bBYkx3nVtK/B8anuhiQ5j1CK+aqLvs6wNxCdFzFgVegdRJ8nOiABKZpM1fm7La96
tNDJdqc7kjVJ+WVJrd36u5tA
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:44 2023 by rpki-client on console-ams.rpki-client.org