Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/wnCay0b6g26q4LOjSfVBYoNWZgc.roa
File: wnCay0b6g26q4LOjSfVBYoNWZgc.roa (raw, json)
Hash identifier: VoJ7onrTnO8P+BU/HgnRJqy4Kmqdjb5kwTzzXU1d7tU=
Subject key identifier: C2:70:9A:CB:46:FA:83:6E:AA:E0:B3:A3:49:F5:41:62:83:56:66:07
Certificate issuer: /CN=44007172df9fc2d4a2ddbba934cebc9f0286d3ca
Certificate serial: 15FE3747
Authority key identifier: 44:00:71:72:DF:9F:C2:D4:A2:DD:BB:A9:34:CE:BC:9F:02:86:D3:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RABxct-fwtSi3bupNM68nwKG08o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/wnCay0b6g26q4LOjSfVBYoNWZgc.roa
Signing time: Sat 01 Jan 2022 14:02:17 +0000
ROA not before: Sat 01 Jan 2022 14:02:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44222
IP address blocks: 185.83.213.0/24 maxlen: 24
185.83.212.0/24 maxlen: 24
2a05:9f02::/31 maxlen: 31
2a05:9f06::/31 maxlen: 31
2a05:9f00::/31 maxlen: 31
2a05:9f04::/31 maxlen: 31
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 368981831 (0x15fe3747)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44007172df9fc2d4a2ddbba934cebc9f0286d3ca
Validity
Not Before: Jan 1 14:02:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c2709acb46fa836eaae0b3a349f5416283566607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:9a:fc:c3:de:f4:60:c9:30:ab:f2:74:d9:70:
d7:ca:31:9d:e7:8a:42:f7:a2:18:ac:b9:7e:15:5b:
83:12:49:72:46:59:1d:7a:d7:d3:bf:10:4f:eb:1d:
3d:63:c1:9d:18:65:a1:88:3d:ed:d7:32:74:1f:94:
07:87:3f:94:8f:2d:b2:e0:a9:7e:dd:3b:39:ae:37:
bb:f6:7d:65:d6:4b:30:26:63:21:c0:b8:61:d2:60:
9a:12:12:6e:d8:ec:c0:99:82:4f:08:57:53:93:76:
44:f5:72:e3:70:d8:0e:99:6a:80:de:7d:5f:74:95:
c2:a3:97:74:f2:72:a3:7d:44:b4:5a:7c:3a:07:0b:
6b:1d:69:f2:b5:ef:a1:0f:61:33:ac:03:21:f7:13:
d1:9a:bf:0b:55:35:c0:58:8f:19:92:dc:a3:73:16:
32:38:9b:76:57:10:48:8b:be:21:5b:bd:cf:42:59:
cb:93:0f:1d:36:84:16:7a:4b:b8:6d:93:a2:b0:21:
cf:b8:f4:a0:89:91:61:36:19:ad:e0:de:88:5d:5c:
40:7c:d8:eb:1b:47:0d:70:f2:45:55:7c:46:69:39:
0a:13:f6:3b:8d:fd:36:11:7d:ed:45:61:d7:ae:11:
1c:56:fb:83:e4:de:db:25:75:3b:17:4f:97:09:ad:
18:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:70:9A:CB:46:FA:83:6E:AA:E0:B3:A3:49:F5:41:62:83:56:66:07
X509v3 Authority Key Identifier:
keyid:44:00:71:72:DF:9F:C2:D4:A2:DD:BB:A9:34:CE:BC:9F:02:86:D3:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RABxct-fwtSi3bupNM68nwKG08o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/wnCay0b6g26q4LOjSfVBYoNWZgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/RABxct-fwtSi3bupNM68nwKG08o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.212.0/23
IPv6:
2a05:9f00::/29
Signature Algorithm: sha256WithRSAEncryption
3c:80:ff:9e:05:ab:bc:11:a3:ac:b6:08:8a:f3:88:e9:31:f8:
0e:0a:8c:51:7b:45:a5:fe:19:78:cc:18:3a:e9:6f:df:62:a4:
8a:66:c9:aa:47:64:c2:98:04:e3:41:ae:10:a2:f0:31:f2:7f:
35:7e:14:84:a3:01:77:66:2f:a8:ca:f2:9b:ba:90:de:4b:2c:
58:96:3e:05:66:82:03:d3:5b:58:64:93:c6:73:6f:86:c3:3e:
ce:e0:f4:1a:d8:c4:e5:91:18:04:b5:3f:75:d7:d3:56:3f:4f:
3f:aa:39:eb:38:35:b2:ac:ef:61:b1:da:60:6f:ac:0d:f1:7a:
10:f5:55:d7:6d:cf:64:c6:61:ea:77:e3:b0:d1:c4:a3:13:a4:
ec:63:97:bf:fd:b7:ae:f0:7a:ab:5e:5c:b2:b7:0a:c9:6d:18:
ce:a2:98:12:ab:20:74:bd:78:d1:0e:e6:55:9e:e0:fb:4c:e5:
bf:f5:d7:a8:af:c9:ae:55:cc:1b:aa:c6:fa:ba:e5:46:98:f8:
a8:0c:4f:fa:a9:26:e0:85:83:89:56:70:b0:9c:b7:1d:f2:83:
5d:9e:2d:8c:eb:7b:8a:15:09:8a:22:7c:73:b6:9b:a7:1d:14:
65:39:e4:0b:18:2f:67:29:e6:79:94:45:f1:bc:ef:4a:db:0a:
de:c5:74:70
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEFf43RzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
NDAwNzE3MmRmOWZjMmQ0YTJkZGJiYTkzNGNlYmM5ZjAyODZkM2NhMB4XDTIyMDEw
MTE0MDIxN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzI3MDlhY2I0NmZh
ODM2ZWFhZTBiM2EzNDlmNTQxNjI4MzU2NjYwNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAPSa/MPe9GDJMKvydNlw18oxneeKQveiGKy5fhVbgxJJckZZ
HXrX078QT+sdPWPBnRhloYg97dcydB+UB4c/lI8tsuCpft07Oa43u/Z9ZdZLMCZj
IcC4YdJgmhISbtjswJmCTwhXU5N2RPVy43DYDplqgN59X3SVwqOXdPJyo31EtFp8
OgcLax1p8rXvoQ9hM6wDIfcT0Zq/C1U1wFiPGZLco3MWMjibdlcQSIu+IVu9z0JZ
y5MPHTaEFnpLuG2TorAhz7j0oImRYTYZreDeiF1cQHzY6xtHDXDyRVV8Rmk5ChP2
O439NhF97UVh164RHFb7g+Te2yV1OxdPlwmtGHsCAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBTCcJrLRvqDbqrgs6NJ9UFig1ZmBzAfBgNVHSMEGDAWgBREAHFy35/C1KLd
u6k0zryfAobTyjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1JBQnhjdC1md3RTaTNidXBOTTY4bndLRzA4by5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTEvOTQ1ZGJkLTJmYjctNGRkMS05NmE2LTA1ODVkZTRkNGVlNy8x
L3duQ2F5MGI2ZzI2cTRMT2pTZlZCWW9OV1pnYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTEv
OTQ1ZGJkLTJmYjctNGRkMS05NmE2LTA1ODVkZTRkNGVlNy8xL1JBQnhjdC1md3RT
aTNidXBOTTY4bndLRzA4by5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAblT1DANBAIAAjAHAwUDKgWfADAN
BgkqhkiG9w0BAQsFAAOCAQEAPID/ngWrvBGjrLYIivOI6TH4DgqMUXtFpf4ZeMwY
Oulv32KkimbJqkdkwpgE40GuEKLwMfJ/NX4UhKMBd2YvqMrym7qQ3kssWJY+BWaC
A9NbWGSTxnNvhsM+zuD0GtjE5ZEYBLU/ddfTVj9PP6o56zg1sqzvYbHaYG+sDfF6
EPVV123PZMZh6nfjsNHEoxOk7GOXv/23rvB6q15csrcKyW0YzqKYEqsgdL140Q7m
VZ7g+0zlv/XXqK/JrlXMG6rG+rrlRpj4qAxP+qkm4IWDiVZwsJy3HfKDXZ4tjOt7
ihUJiiJ8c7abpx0UZTnkCxgvZynmeZRF8bzvStsK3sV0cA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:00 2024 by rpki-client on console-fra.rpki-client.org