Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/wNdSOhCk0b2hA8RPtQAAaOnY9p0.roa
File: wNdSOhCk0b2hA8RPtQAAaOnY9p0.roa (raw, json)
Hash identifier: DX4W4zRs3HiFNPLsIMZF/RgvQFNujI5J3VAWXDqf/O0=
Subject key identifier: C0:D7:52:3A:10:A4:D1:BD:A1:03:C4:4F:B5:00:00:68:E9:D8:F6:9D
Certificate issuer: /CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Certificate serial: 0183662F21AEFC1DA53D1BA2558CCE86222C
Authority key identifier: 7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/wNdSOhCk0b2hA8RPtQAAaOnY9p0.roa
Signing time: Thu 22 Sep 2022 17:11:48 +0000
ROA not before: Thu 22 Sep 2022 17:11:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8075
IP address blocks: 94.245.64.0/18 maxlen: 24
172.208.0.0/13 maxlen: 13
51.124.0.0/16 maxlen: 16
192.100.112.0/21 maxlen: 21
192.100.120.0/21 maxlen: 21
192.100.128.0/22 maxlen: 22
192.100.132.0/23 maxlen: 23
172.160.0.0/11 maxlen: 11
51.144.0.0/15 maxlen: 15
51.107.0.0/16 maxlen: 16
40.171.0.0/16 maxlen: 16
192.100.104.0/21 maxlen: 21
51.138.0.0/16 maxlen: 16
51.10.0.0/15 maxlen: 15
194.110.197.0/24 maxlen: 24
51.104.0.0/15 maxlen: 15
51.12.0.0/15 maxlen: 15
51.103.0.0/16 maxlen: 16
51.140.0.0/14 maxlen: 14
135.130.0.0/16 maxlen: 16
57.150.0.0/15 maxlen: 15
132.164.0.0/16 maxlen: 16
193.221.113.0/24 maxlen: 24
51.53.0.0/16 maxlen: 16
57.160.0.0/12 maxlen: 12
51.120.0.0/16 maxlen: 16
57.156.0.0/14 maxlen: 14
193.149.64.0/19 maxlen: 24
172.200.0.0/13 maxlen: 13
51.116.0.0/16 maxlen: 16
40.170.0.0/16 maxlen: 16
51.136.0.0/15 maxlen: 15
209.199.0.0/16 maxlen: 16
167.162.0.0/16 maxlen: 16
159.128.0.0/16 maxlen: 16
194.41.16.0/20 maxlen: 20
194.41.18.0/24 maxlen: 24
194.41.22.0/24 maxlen: 24
194.41.23.0/24 maxlen: 24
194.41.20.0/24 maxlen: 24
194.41.21.0/24 maxlen: 24
194.41.19.0/24 maxlen: 24
51.132.0.0/16 maxlen: 16
157.31.0.0/16 maxlen: 16
157.95.0.0/16 maxlen: 16
213.199.128.0/18 maxlen: 24
147.243.0.0/16 maxlen: 24
51.51.0.0/16 maxlen: 16
57.152.0.0/14 maxlen: 14
151.206.0.0/16 maxlen: 16
138.105.0.0/16 maxlen: 16
40.169.0.0/16 maxlen: 16
2a00:1c68::/29 maxlen: 29
2a01:111:4004::/48 maxlen: 48
2a01:111::/32 maxlen: 32
2a01:111:4000::/36 maxlen: 36
2a01:111:2000::/36 maxlen: 36
2a01:111:f000::/36 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:66:2f:21:ae:fc:1d:a5:3d:1b:a2:55:8c:ce:86:22:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Validity
Not Before: Sep 22 17:11:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c0d7523a10a4d1bda103c44fb5000068e9d8f69d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:1f:e5:8c:16:62:23:24:4c:f8:5d:a3:f6:e1:
3b:02:3d:03:dc:e3:1b:ea:20:30:6d:b5:b0:08:b7:
7b:6e:ed:23:70:c7:85:10:ba:06:33:93:ab:ab:25:
ac:00:3d:58:5b:e1:8f:48:a6:38:5e:c4:7a:e2:e9:
a6:0f:bc:df:85:9e:e2:f4:6c:59:7e:04:dd:65:0a:
cf:ec:b4:fc:bf:21:f9:ea:3c:5c:81:b4:4d:2d:81:
a6:b2:4c:8f:c1:15:a0:0b:81:d3:b9:59:df:51:5b:
d4:79:10:b4:fd:dc:4b:09:8c:92:83:10:4a:53:59:
f3:bc:46:c3:03:2e:65:55:2e:ad:1b:55:01:91:ad:
4e:97:91:5b:0d:69:86:ac:ad:5d:15:f6:85:ac:80:
8c:34:b6:11:4b:09:a2:be:e7:32:fa:9d:88:67:40:
74:45:dd:77:80:84:09:07:b7:e1:a7:a2:e9:a4:9a:
b6:47:f8:43:97:b1:18:51:0b:de:17:ee:4e:fe:25:
d7:9f:e4:ba:b2:42:ad:62:fb:e2:06:b9:3d:82:2c:
f5:34:1a:07:81:cf:04:a9:3a:e2:38:5c:1c:ae:97:
d9:a4:bf:b9:e5:d2:04:05:d2:bb:56:2b:d4:58:4b:
2e:e8:25:fa:e1:c8:ce:e1:9c:b9:50:e6:b2:5d:12:
4d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:D7:52:3A:10:A4:D1:BD:A1:03:C4:4F:B5:00:00:68:E9:D8:F6:9D
X509v3 Authority Key Identifier:
keyid:7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/wNdSOhCk0b2hA8RPtQAAaOnY9p0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
40.169.0.0-40.171.255.255
51.10.0.0-51.13.255.255
51.51.0.0/16
51.53.0.0/16
51.103.0.0-51.105.255.255
51.107.0.0/16
51.116.0.0/16
51.120.0.0/16
51.124.0.0/16
51.132.0.0/16
51.136.0.0-51.138.255.255
51.140.0.0-51.145.255.255
57.150.0.0-57.175.255.255
94.245.64.0/18
132.164.0.0/16
135.130.0.0/16
138.105.0.0/16
147.243.0.0/16
151.206.0.0/16
157.31.0.0/16
157.95.0.0/16
159.128.0.0/16
167.162.0.0/16
172.160.0.0/11
172.200.0.0-172.215.255.255
192.100.104.0-192.100.133.255
193.149.64.0/19
193.221.113.0/24
194.41.16.0/20
194.110.197.0/24
209.199.0.0/16
213.199.128.0/18
IPv6:
2a00:1c68::/29
2a01:111::/32
Signature Algorithm: sha256WithRSAEncryption
07:db:01:a4:4e:61:4e:85:4d:31:10:e5:02:82:b6:23:94:bd:
3b:b5:a8:7f:cf:d9:68:c1:b9:25:82:0e:d9:e8:dd:85:75:25:
2e:54:40:6f:b9:0a:08:a0:c3:77:5a:d8:20:8f:38:ea:5c:4a:
7e:49:88:74:b3:46:1c:16:55:d0:ec:6d:98:50:c6:3c:a5:a8:
37:6d:63:6b:53:e3:1c:9a:e0:0e:dd:01:04:c6:02:75:41:7e:
d0:28:c6:37:bd:a7:14:7e:51:1b:bc:14:cb:63:1e:33:b3:d5:
23:eb:e9:21:02:84:45:38:08:18:6a:13:2d:5b:d4:54:64:46:
a0:13:a1:0d:d8:34:dc:6b:9a:6a:17:a3:01:a4:6b:36:1f:46:
46:bc:ff:44:87:60:39:a5:8c:7f:54:9a:9d:19:ca:d2:4d:e4:
18:70:68:c8:e4:6a:4b:f7:d6:c4:64:d7:b5:7d:07:21:8b:0a:
e3:4d:57:3a:f8:63:bc:3e:af:05:b6:1c:46:32:e0:91:92:29:
f0:a4:38:1d:f0:b3:27:72:3e:dd:f7:ee:53:72:e5:18:f9:c6:
ac:84:bd:77:aa:c3:7d:c4:92:4f:e3:0d:9d:c6:c8:cf:2c:e5:
ec:ba:c5:b8:dd:f6:04:9b:3a:0a:3c:8a:ff:1e:94:92:8d:76:
6a:71:f0:e5
-----BEGIN CERTIFICATE-----
MIIF9TCCBN2gAwIBAgISAYNmLyGu/B2lPRuiVYzOhiIsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjZTY4ZGFmNWYwODk0NTZjMGUxZDAyMjQ1MzkzNTMxYWM1
YjhmY2IwHhcNMjIwOTIyMTcxMTQ4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMGQ3NTIzYTEwYTRkMWJkYTEwM2M0NGZiNTAwMDA2OGU5ZDhmNjlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiR/ljBZiIyRM+F2j9uE7Aj0D3OMb
6iAwbbWwCLd7bu0jcMeFELoGM5OrqyWsAD1YW+GPSKY4XsR64ummD7zfhZ7i9GxZ
fgTdZQrP7LT8vyH56jxcgbRNLYGmskyPwRWgC4HTuVnfUVvUeRC0/dxLCYySgxBK
U1nzvEbDAy5lVS6tG1UBka1Ol5FbDWmGrK1dFfaFrICMNLYRSwmivucy+p2IZ0B0
Rd13gIQJB7fhp6LppJq2R/hDl7EYUQveF+5O/iXXn+S6skKtYvviBrk9giz1NBoH
gc8EqTriOFwcrpfZpL+55dIEBdK7VivUWEsu6CX64cjO4Zy5UOayXRJN+wIDAQAB
o4IDATCCAv0wHQYDVR0OBBYEFMDXUjoQpNG9oQPET7UAAGjp2PadMB8GA1UdIwQY
MBaAFHzmja9fCJRWwOHQIkU5NTGsW4/LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZk9hTnIxOElsRmJBNGRBaVJUazFNYXhiajhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9lYzBiODktMWU2OC00NWEwLThiOTMt
MTNhMDZhMjY5YWE4LzEvd05kU09oQ2swYjJoQThSUHRRQUFhT25ZOXAwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9lYzBiODktMWU2OC00NWEwLThiOTMtMTNhMDZhMjY5YWE4
LzEvZk9hTnIxOElsRmJBNGRBaVJUazFNYXhiajhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBFQYIKwYBBQUHAQcBAf8EggEEMIIBADCB5wQCAAEwgeAw
CgMDACipAwMCKKgwCgMDATMKAwMBMwwDAwAzMwMDADM1MAoDAwAzZwMDATNoAwMA
M2sDAwAzdAMDADN4AwMAM3wDAwAzhDAKAwMDM4gDAwAzijAKAwMCM4wDAwEzkDAK
AwMBOZYDAwQ5oAMEBl71QAMDAISkAwMAh4IDAwCKaQMDAJPzAwMAl84DAwCdHwMD
AJ1fAwMAn4ADAwCnogMDBaygMAoDAwOsyAMDA6zQMAwDBAPAZGgDBAHAZIQDBAXB
lUADBADB3XEDBATCKRADBADCbsUDAwDRxwMEBtXHgDAUBAIAAjAOAwUDKgAcaAMF
ACoBAREwDQYJKoZIhvcNAQELBQADggEBAAfbAaROYU6FTTEQ5QKCtiOUvTu1qH/P
2WjBuSWCDtno3YV1JS5UQG+5Cgigw3da2CCPOOpcSn5JiHSzRhwWVdDsbZhQxjyl
qDdtY2tT4xya4A7dAQTGAnVBftAoxje9pxR+URu8FMtjHjOz1SPr6SEChEU4CBhq
Ey1b1FRkRqAToQ3YNNxrmmoXowGkazYfRka8/0SHYDmljH9Ump0ZytJN5BhwaMjk
akv31sRk17V9ByGLCuNNVzr4Y7w+rwW2HEYy4JGSKfCkOB3wsydyPt337lNy5Rj5
xqyEvXeqw33Ekk/jDZ3GyM8s5ey6xbjd9gSbOgo8iv8elJKNdmpx8OU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:00 2024 by rpki-client on console-ams.rpki-client.org