Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/387f21-101b-487e-8a0f-0b838a599662/1/1WTS19eELXvv1L0vooccR6FNgpc.roa
File: 1WTS19eELXvv1L0vooccR6FNgpc.roa (raw, json)
Hash identifier: /uqwuEtgBzEltUkZFyH89Pk4RTPcrRB/UIzlywHg3aw=
Subject key identifier: D5:64:D2:D7:D7:84:2D:7B:EF:D4:BD:2F:A2:87:1C:47:A1:4D:82:97
Certificate issuer: /CN=c1a190504b6d9ed9c18096840425b11d7b22dff4
Certificate serial: 16B9C914
Authority key identifier: C1:A1:90:50:4B:6D:9E:D9:C1:80:96:84:04:25:B1:1D:7B:22:DF:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/waGQUEttntnBgJaEBCWxHXsi3_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/387f21-101b-487e-8a0f-0b838a599662/1/1WTS19eELXvv1L0vooccR6FNgpc.roa
Signing time: Sat 01 Jan 2022 13:06:53 +0000
ROA not before: Sat 01 Jan 2022 13:06:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42707
IP address blocks: 185.236.4.0/22 maxlen: 22
185.245.88.0/22 maxlen: 22
185.231.24.0/22 maxlen: 22
91.189.224.0/21 maxlen: 21
83.143.76.0/22 maxlen: 22
109.207.72.0/22 maxlen: 22
193.33.134.0/23 maxlen: 23
185.252.124.0/22 maxlen: 22
5.57.248.0/21 maxlen: 21
185.254.48.0/22 maxlen: 22
185.148.28.0/22 maxlen: 22
195.42.224.0/22 maxlen: 22
195.42.228.0/23 maxlen: 23
185.250.136.0/22 maxlen: 22
185.247.48.0/22 maxlen: 22
185.248.228.0/22 maxlen: 22
5.45.32.0/22 maxlen: 22
5.206.208.0/20 maxlen: 20
185.233.212.0/22 maxlen: 22
2a00:5140::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 381274388 (0x16b9c914)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1a190504b6d9ed9c18096840425b11d7b22dff4
Validity
Not Before: Jan 1 13:06:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d564d2d7d7842d7befd4bd2fa2871c47a14d8297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d3:7d:f4:d6:2e:e7:b1:cd:01:cb:d3:4d:6d:
ad:f1:8b:02:bf:c0:c8:40:0f:fd:80:ba:e0:e3:3b:
7d:46:e6:b4:7d:07:b6:b7:ef:3e:a3:21:32:99:de:
32:90:39:e3:14:90:29:63:3c:a4:cc:bd:17:78:6b:
42:c5:9f:fb:da:8f:b6:03:49:05:f9:8a:8b:7a:1b:
25:00:08:65:76:d0:15:83:62:da:16:b4:34:e8:d9:
14:ab:68:51:2a:05:40:21:82:e1:83:1b:93:65:7e:
70:ae:bd:0c:d3:84:72:83:52:39:30:74:26:f6:ca:
ad:de:37:d0:de:ec:4f:ed:2d:d9:a7:39:12:79:80:
8b:cf:cb:dc:b1:21:26:78:cf:a5:ab:b0:47:b1:ed:
43:16:61:f9:59:1b:e5:d2:2b:d3:aa:3e:28:bc:ef:
51:1e:a8:f3:d1:71:42:b1:c8:50:2c:ec:87:d4:d2:
af:78:12:be:b5:0d:dd:76:37:1a:06:ca:a8:4a:72:
58:40:5b:fc:6e:ee:2d:2f:a2:bd:9e:40:a3:10:fb:
5f:04:2d:64:b3:f6:1a:3d:60:65:9a:37:87:a1:4a:
91:49:ac:d8:79:b2:0f:38:8c:fe:2d:2a:00:0d:36:
c0:45:6e:d6:4c:78:c9:19:93:73:96:b9:66:c2:ae:
63:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:64:D2:D7:D7:84:2D:7B:EF:D4:BD:2F:A2:87:1C:47:A1:4D:82:97
X509v3 Authority Key Identifier:
keyid:C1:A1:90:50:4B:6D:9E:D9:C1:80:96:84:04:25:B1:1D:7B:22:DF:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/waGQUEttntnBgJaEBCWxHXsi3_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/387f21-101b-487e-8a0f-0b838a599662/1/1WTS19eELXvv1L0vooccR6FNgpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/387f21-101b-487e-8a0f-0b838a599662/1/waGQUEttntnBgJaEBCWxHXsi3_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.45.32.0/22
5.57.248.0/21
5.206.208.0/20
83.143.76.0/22
91.189.224.0/21
109.207.72.0/22
185.148.28.0/22
185.231.24.0/22
185.233.212.0/22
185.236.4.0/22
185.245.88.0/22
185.247.48.0/22
185.248.228.0/22
185.250.136.0/22
185.252.124.0/22
185.254.48.0/22
193.33.134.0/23
195.42.224.0-195.42.229.255
IPv6:
2a00:5140::/32
Signature Algorithm: sha256WithRSAEncryption
ac:e0:7e:bb:fd:db:32:6c:dc:94:ce:02:5c:d1:9e:b0:32:9b:
d8:c0:a2:36:43:ec:ac:83:86:37:5e:83:91:91:b6:27:7a:4a:
2d:b5:f9:7a:5b:2a:e3:1d:dc:62:8a:9f:77:4b:f6:5d:5a:9e:
89:f0:8d:ac:86:a3:1b:a3:59:d3:27:12:4f:f0:b1:e7:7e:bd:
ac:ba:aa:38:ab:52:8b:93:b2:4c:54:d5:7e:99:3f:e8:c8:ca:
a5:ce:5d:3c:5f:67:77:18:8d:31:ca:66:2d:37:a7:01:8c:b2:
d3:59:42:1c:ae:2e:47:b2:be:45:bc:05:d8:82:c7:1e:75:8c:
8b:54:fb:9a:98:e8:3a:6b:3b:48:06:02:83:c5:60:a4:9b:38:
82:b1:52:f0:f0:ef:64:e4:fc:75:20:22:b8:e4:77:c8:e6:65:
d9:13:c3:fa:b9:90:5f:26:90:a8:f8:33:b4:78:da:8d:99:1f:
32:97:29:d4:f6:0e:db:7a:8f:7b:27:af:4d:12:f6:00:d9:82:
31:ba:a6:81:72:66:66:8a:a9:30:0d:49:0a:68:f5:7a:0a:b1:
17:b6:70:0c:82:fc:1a:02:b1:0a:3f:6c:16:82:02:7c:52:11:
0f:25:ff:e7:23:5b:3f:f3:bf:9c:6c:9e:71:21:a6:6c:f1:29:
b1:ab:7b:d0
-----BEGIN CERTIFICATE-----
MIIFbzCCBFegAwIBAgIEFrnJFDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
MWExOTA1MDRiNmQ5ZWQ5YzE4MDk2ODQwNDI1YjExZDdiMjJkZmY0MB4XDTIyMDEw
MTEzMDY1M1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDU2NGQyZDdkNzg0
MmQ3YmVmZDRiZDJmYTI4NzFjNDdhMTRkODI5NzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMHTffTWLuexzQHL001trfGLAr/AyEAP/YC64OM7fUbmtH0H
trfvPqMhMpneMpA54xSQKWM8pMy9F3hrQsWf+9qPtgNJBfmKi3obJQAIZXbQFYNi
2ha0NOjZFKtoUSoFQCGC4YMbk2V+cK69DNOEcoNSOTB0JvbKrd430N7sT+0t2ac5
EnmAi8/L3LEhJnjPpauwR7HtQxZh+Vkb5dIr06o+KLzvUR6o89FxQrHIUCzsh9TS
r3gSvrUN3XY3GgbKqEpyWEBb/G7uLS+ivZ5AoxD7XwQtZLP2Gj1gZZo3h6FKkUms
2HmyDziM/i0qAA02wEVu1kx4yRmTc5a5ZsKuY2kCAwEAAaOCAokwggKFMB0GA1Ud
DgQWBBTVZNLX14Qte+/UvS+ihxxHoU2ClzAfBgNVHSMEGDAWgBTBoZBQS22e2cGA
loQEJbEdeyLf9DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3dhR1FVRXR0bnRuQmdKYUVCQ1d4SFhzaTNfUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZGYvMzg3ZjIxLTEwMWItNDg3ZS04YTBmLTBiODM4YTU5OTY2Mi8x
LzFXVFMxOWVFTFh2djFMMHZvb2NjUjZGTmdwYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGYv
Mzg3ZjIxLTEwMWItNDg3ZS04YTBmLTBiODM4YTU5OTY2Mi8xL3dhR1FVRXR0bnRu
QmdKYUVCQ1d4SFhzaTNfUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCB
ngYIKwYBBQUHAQcBAf8EgY4wgYswegQCAAEwdAMEAgUtIAMEAwU5+AMEBAXO0AME
AlOPTAMEA1u94AMEAm3PSAMEArmUHAMEArnnGAMEArnp1AMEArnsBAMEArn1WAME
Arn3MAMEArn45AMEArn6iAMEArn8fAMEArn+MAMEAcEhhjAMAwQFwyrgAwQBwyrk
MA0EAgACMAcDBQAqAFFAMA0GCSqGSIb3DQEBCwUAA4IBAQCs4H67/dsybNyUzgJc
0Z6wMpvYwKI2Q+ysg4Y3XoORkbYnekottfl6WyrjHdxiip93S/ZdWp6J8I2shqMb
o1nTJxJP8LHnfr2suqo4q1KLk7JMVNV+mT/oyMqlzl08X2d3GI0xymYtN6cBjLLT
WUIcri5Hsr5FvAXYgscedYyLVPuamOg6aztIBgKDxWCkmziCsVLw8O9k5Px1ICK4
5HfI5mXZE8P6uZBfJpCo+DO0eNqNmR8ylynU9g7beo97J69NEvYA2YIxuqaBcmZm
iqkwDUkKaPV6CrEXtnAMgvwaArEKP2wWggJ8UhEPJf/nI1s/87+cbJ5xIaZs8Smx
q3vQ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:40 2024 by rpki-client on console-fra.rpki-client.org