Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/wsIaNmfiszp4SBhC8lM3ylKb9RU.roa
File: wsIaNmfiszp4SBhC8lM3ylKb9RU.roa (raw, json)
Hash identifier: uHUumWPqY0U1aozph23K/go4Rz5t1ph3Id92qUNcJWE=
Subject key identifier: C2:C2:1A:36:67:E2:B3:3A:78:48:18:42:F2:53:37:CA:52:9B:F5:15
Certificate issuer: /CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485
Certificate serial: 0184C1E414D046B8365A2D59F682CA068BB2
Authority key identifier: A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/wsIaNmfiszp4SBhC8lM3ylKb9RU.roa
Signing time: Tue 29 Nov 2022 05:37:40 +0000
ROA not before: Tue 29 Nov 2022 05:37:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47119
IP address blocks: 188.191.112.0/22 maxlen: 22
188.191.112.0/24 maxlen: 24
188.191.112.0/23 maxlen: 23
188.191.116.0/22 maxlen: 22
188.191.114.0/23 maxlen: 23
188.191.114.0/24 maxlen: 24
188.191.113.0/24 maxlen: 24
188.191.112.0/21 maxlen: 21
188.191.112.0/20 maxlen: 20
188.191.116.0/24 maxlen: 24
188.191.117.0/24 maxlen: 24
188.191.116.0/23 maxlen: 23
188.191.115.0/24 maxlen: 24
188.191.118.0/24 maxlen: 24
188.191.118.0/23 maxlen: 23
188.191.122.0/24 maxlen: 24
188.191.119.0/24 maxlen: 24
188.191.120.0/23 maxlen: 23
188.191.124.0/22 maxlen: 22
188.191.122.0/23 maxlen: 23
188.191.121.0/24 maxlen: 24
188.191.120.0/24 maxlen: 24
188.191.124.0/24 maxlen: 24
188.191.124.0/23 maxlen: 23
188.191.123.0/24 maxlen: 24
188.191.120.0/22 maxlen: 22
188.191.126.0/24 maxlen: 24
188.191.126.0/23 maxlen: 23
79.174.34.0/24 maxlen: 24
79.174.34.0/23 maxlen: 23
79.174.33.0/24 maxlen: 24
79.174.36.0/23 maxlen: 23
79.174.36.0/24 maxlen: 24
79.174.35.0/24 maxlen: 24
79.174.32.0/22 maxlen: 22
79.174.32.0/19 maxlen: 19
79.174.32.0/20 maxlen: 20
79.174.32.0/23 maxlen: 23
79.174.38.0/24 maxlen: 24
79.174.37.0/24 maxlen: 24
79.174.32.0/24 maxlen: 24
79.174.42.0/23 maxlen: 23
79.174.44.0/22 maxlen: 22
79.174.39.0/24 maxlen: 24
79.174.38.0/23 maxlen: 23
79.174.42.0/24 maxlen: 24
79.174.41.0/24 maxlen: 24
79.174.44.0/23 maxlen: 23
79.174.44.0/24 maxlen: 24
79.174.40.0/22 maxlen: 22
79.174.40.0/23 maxlen: 23
79.174.43.0/24 maxlen: 24
79.174.40.0/24 maxlen: 24
79.174.47.0/24 maxlen: 24
79.174.50.0/23 maxlen: 23
79.174.50.0/24 maxlen: 24
79.174.49.0/24 maxlen: 24
79.174.48.0/22 maxlen: 22
79.174.48.0/24 maxlen: 24
79.174.45.0/24 maxlen: 24
79.174.48.0/23 maxlen: 23
79.174.51.0/24 maxlen: 24
79.174.46.0/23 maxlen: 23
79.174.46.0/24 maxlen: 24
79.174.48.0/20 maxlen: 20
79.174.56.0/22 maxlen: 22
79.174.55.0/24 maxlen: 24
79.174.56.0/24 maxlen: 24
79.174.58.0/23 maxlen: 23
79.174.58.0/24 maxlen: 24
79.174.57.0/24 maxlen: 24
79.174.52.0/23 maxlen: 23
79.174.53.0/24 maxlen: 24
79.174.52.0/24 maxlen: 24
79.174.54.0/23 maxlen: 23
79.174.54.0/24 maxlen: 24
79.174.56.0/23 maxlen: 23
79.174.60.0/22 maxlen: 22
79.174.63.0/24 maxlen: 24
79.174.60.0/23 maxlen: 23
79.174.60.0/24 maxlen: 24
79.174.59.0/24 maxlen: 24
79.174.62.0/23 maxlen: 23
79.174.62.0/24 maxlen: 24
79.174.61.0/24 maxlen: 24
136.169.222.0/23 maxlen: 23
136.169.222.0/24 maxlen: 24
136.169.221.0/24 maxlen: 24
136.169.220.0/22 maxlen: 22
136.169.223.0/24 maxlen: 24
136.169.220.0/23 maxlen: 23
136.169.220.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c1:e4:14:d0:46:b8:36:5a:2d:59:f6:82:ca:06:8b:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485
Validity
Not Before: Nov 29 05:37:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c2c21a3667e2b33a78481842f25337ca529bf515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:63:c8:d3:c0:53:4b:94:d6:85:ee:8a:d2:20:
c1:66:da:d0:2e:a6:c6:87:f0:96:bc:bb:f2:79:d9:
71:dc:7d:c3:34:10:30:6c:d5:bf:5d:40:68:f0:80:
e1:0a:d9:7f:3c:15:34:5a:40:2e:c0:86:f8:97:4d:
49:2a:9f:fc:6b:ff:33:24:28:77:d8:2c:08:eb:bf:
02:45:48:e2:55:46:be:27:3e:d1:3e:9a:33:26:6a:
07:a7:a4:70:01:71:b2:c0:97:39:c8:e9:af:0e:42:
ed:0b:cc:af:44:1c:86:cf:d4:d9:22:90:43:e7:a8:
f3:24:29:45:b2:68:53:69:a5:d2:82:3f:c1:c8:b0:
82:60:5b:08:dc:a1:7b:54:17:87:ff:bf:e3:66:87:
68:2c:77:7f:35:5b:65:44:12:de:d8:94:4e:2d:2e:
63:3b:4b:a0:83:ef:d7:de:db:d0:b6:28:21:a6:dd:
b7:55:5c:dc:1d:f8:fe:70:c3:9a:42:db:1e:9d:cc:
bf:eb:80:b6:e0:90:e5:9f:9c:b1:b3:a7:f6:0c:32:
51:ad:9e:42:4d:8a:b5:41:b1:ea:08:56:2c:27:c1:
78:2b:d6:53:63:33:27:81:3e:44:a7:48:3a:1a:20:
d1:a6:8d:66:c7:e9:79:aa:1f:f6:a4:95:b1:4e:85:
f4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:C2:1A:36:67:E2:B3:3A:78:48:18:42:F2:53:37:CA:52:9B:F5:15
X509v3 Authority Key Identifier:
keyid:A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/wsIaNmfiszp4SBhC8lM3ylKb9RU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.174.32.0/19
136.169.220.0/22
188.191.112.0/20
Signature Algorithm: sha256WithRSAEncryption
32:5b:9f:3b:72:05:23:fb:08:17:e6:b0:85:8b:5c:a6:53:9b:
02:e1:c9:c7:38:60:c9:bf:7f:c7:b3:a7:ac:26:3b:f9:16:ef:
7e:49:6c:15:ca:32:0a:02:5b:c9:cd:34:1a:ec:00:3e:d6:07:
c0:0a:3f:f9:7e:b7:d5:c2:e1:c9:12:f9:b7:89:00:c6:b1:96:
6a:d2:e1:00:4e:d7:a8:c7:92:94:05:b4:38:71:9a:e5:21:b9:
86:5f:9e:c9:4c:da:9f:4a:5a:53:ea:ab:e9:f0:6a:4a:51:7a:
1a:75:c2:ba:d8:94:3a:59:ff:93:9a:0b:c6:bd:d6:89:26:00:
77:c1:75:32:a1:35:86:e1:a2:06:d3:7d:7c:9c:2e:20:95:4a:
92:9b:fd:d7:b5:bd:83:bd:49:75:01:b4:a2:86:47:22:d7:ad:
a9:6a:62:93:da:26:d3:21:7d:79:2d:eb:88:9a:d6:c8:8e:7a:
c2:e1:6d:94:71:9e:91:b6:60:41:3e:09:a6:e4:d2:4c:4c:4d:
e9:d0:5c:65:23:0d:5e:ab:87:39:44:49:d6:3b:62:10:dc:12:
26:de:9f:d3:20:f6:4d:aa:0a:b9:06:b6:f5:2a:b1:11:d7:d6:
10:65:d3:54:10:9d:6d:ba:03:15:84:7b:f3:c0:c9:b6:71:90:
90:a6:55:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:53 2024 by rpki-client on console-fra.rpki-client.org