Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/WIpO0PWri1N2cVIYMuHiAOx4MJM.roa
File: WIpO0PWri1N2cVIYMuHiAOx4MJM.roa (raw, json)
Hash identifier: bdv/lOyPApuhX8hn36NcL8o/9LTIpdYaTJDnbTziOFE=
Subject key identifier: 58:8A:4E:D0:F5:AB:8B:53:76:71:52:18:32:E1:E2:00:EC:78:30:93
Certificate issuer: /CN=4a83ee7dcc32837b0ba5b891d8f145435ab3b60a
Certificate serial: 015B9162
Authority key identifier: 4A:83:EE:7D:CC:32:83:7B:0B:A5:B8:91:D8:F1:45:43:5A:B3:B6:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SoPufcwyg3sLpbiR2PFFQ1qztgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/WIpO0PWri1N2cVIYMuHiAOx4MJM.roa
Signing time: Sat 01 Jan 2022 04:59:58 +0000
ROA not before: Sat 01 Jan 2022 04:59:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199860
IP address blocks: 5.188.106.0/23 maxlen: 23
185.44.14.0/23 maxlen: 23
185.44.12.0/22 maxlen: 22
185.44.12.0/23 maxlen: 23
5.188.104.0/22 maxlen: 22
5.188.104.0/23 maxlen: 23
2a01:6520::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22778210 (0x15b9162)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a83ee7dcc32837b0ba5b891d8f145435ab3b60a
Validity
Not Before: Jan 1 04:59:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=588a4ed0f5ab8b537671521832e1e200ec783093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:f1:47:6d:84:ee:86:94:41:cc:11:a7:38:6e:
dd:f8:cd:cd:63:87:85:54:fd:34:55:a9:41:15:04:
0e:20:74:d4:95:33:96:c3:83:3d:8d:14:0f:04:f7:
51:91:c9:1c:b7:51:2e:85:0e:aa:6d:18:bb:fc:c4:
61:6c:ee:06:69:2a:c0:7c:82:bf:d1:f5:4a:04:f7:
37:fc:b9:5c:4d:52:d8:fa:df:45:2b:c6:e8:ab:c6:
dc:69:e4:bb:dd:db:3b:35:35:fd:94:b6:3e:19:8d:
61:82:fd:41:5b:ac:b2:04:bc:7c:39:c0:87:48:18:
0c:c9:62:69:ad:29:ef:12:ce:19:ee:61:bd:77:9c:
cb:3e:0f:47:da:4b:65:4b:31:a6:5f:9c:2e:2a:a6:
82:ca:36:84:4e:88:fc:d2:d3:d8:9c:b0:19:4c:5e:
32:53:f5:6e:e4:3a:4a:eb:ea:ac:b2:d2:6c:32:4d:
0b:21:6a:7c:df:e0:c2:48:f2:24:c7:ed:80:5f:a8:
44:e9:6c:52:d3:7b:3b:3e:af:2a:45:02:12:c6:d8:
9d:54:a0:21:12:f0:8e:0f:92:00:55:9e:ec:7c:be:
6e:96:57:78:69:48:b6:b8:46:99:db:55:29:9d:4a:
75:09:45:89:a9:7b:1c:fd:ee:04:29:b4:6f:ad:b2:
0a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:8A:4E:D0:F5:AB:8B:53:76:71:52:18:32:E1:E2:00:EC:78:30:93
X509v3 Authority Key Identifier:
keyid:4A:83:EE:7D:CC:32:83:7B:0B:A5:B8:91:D8:F1:45:43:5A:B3:B6:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SoPufcwyg3sLpbiR2PFFQ1qztgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/WIpO0PWri1N2cVIYMuHiAOx4MJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/SoPufcwyg3sLpbiR2PFFQ1qztgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.188.104.0/22
185.44.12.0/22
IPv6:
2a01:6520::/32
Signature Algorithm: sha256WithRSAEncryption
6f:4a:94:8c:ec:70:96:29:05:b1:d9:d8:fb:fc:db:05:08:be:
24:bc:e3:e4:4d:30:17:8a:3d:7b:89:64:9b:b0:db:c9:48:f4:
54:63:0f:0c:8a:f1:9f:48:6b:0b:88:1d:7f:33:85:3a:99:d0:
08:af:55:b9:4c:3d:e7:1a:66:20:04:6d:58:1f:75:64:90:d7:
ee:50:8f:62:89:20:4d:e7:c9:e9:57:ef:f6:1f:ac:4b:57:b3:
09:b2:d1:70:ab:2f:73:12:f4:67:66:63:a4:cd:68:08:f4:69:
58:e8:1f:11:80:9f:01:d9:58:8a:68:57:2e:c4:40:42:23:b6:
6f:0f:12:7f:6a:72:b2:e8:4a:16:05:b4:a7:58:52:a0:4e:fd:
13:82:e0:bf:cc:43:ed:86:c8:be:07:89:00:07:23:a0:57:f6:
94:f7:00:9b:88:9a:c0:de:26:71:b8:45:11:10:24:e5:29:9a:
70:02:33:78:ca:98:33:df:e7:36:26:71:ef:91:2c:70:92:31:
0e:6a:a9:9f:87:90:97:df:c3:0f:dd:59:74:b2:90:8f:96:f8:
e2:fe:3c:3b:27:fe:ea:9b:bd:c2:c9:25:5f:56:25:d7:be:98:
6f:0d:1b:cf:ef:2b:ce:53:62:d7:44:11:2d:0b:aa:e5:f1:f9:
55:77:4d:ab
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIEAVuRYjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YTgzZWU3ZGNjMzI4MzdiMGJhNWI4OTFkOGYxNDU0MzVhYjNiNjBhMB4XDTIyMDEw
MTA0NTk1OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTg4YTRlZDBmNWFi
OGI1Mzc2NzE1MjE4MzJlMWUyMDBlYzc4MzA5MzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOfxR22E7oaUQcwRpzhu3fjNzWOHhVT9NFWpQRUEDiB01JUz
lsODPY0UDwT3UZHJHLdRLoUOqm0Yu/zEYWzuBmkqwHyCv9H1SgT3N/y5XE1S2Prf
RSvG6KvG3Gnku93bOzU1/ZS2PhmNYYL9QVussgS8fDnAh0gYDMliaa0p7xLOGe5h
vXecyz4PR9pLZUsxpl+cLiqmgso2hE6I/NLT2JywGUxeMlP1buQ6SuvqrLLSbDJN
CyFqfN/gwkjyJMftgF+oROlsUtN7Oz6vKkUCEsbYnVSgIRLwjg+SAFWe7Hy+bpZX
eGlItrhGmdtVKZ1KdQlFial7HP3uBCm0b62yCncCAwEAAaOCAh4wggIaMB0GA1Ud
DgQWBBRYik7Q9auLU3ZxUhgy4eIA7HgwkzAfBgNVHSMEGDAWgBRKg+59zDKDewul
uJHY8UVDWrO2CjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1NvUHVmY3d5ZzNzTHBiaVIyUEZGUTFxenRnby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMmEvNTEzZThhLWFkNWItNDJiZS05YjZlLWI0MjY5NDYzYmNlOC8x
L1dJcE8wUFdyaTFOMmNWSVlNdUhpQU94NE1KTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmEv
NTEzZThhLWFkNWItNDJiZS05YjZlLWI0MjY5NDYzYmNlOC8xL1NvUHVmY3d5ZzNz
THBiaVIyUEZGUTFxenRnby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAgW8aAMEArksDDANBAIAAjAHAwUA
KgFlIDANBgkqhkiG9w0BAQsFAAOCAQEAb0qUjOxwlikFsdnY+/zbBQi+JLzj5E0w
F4o9e4lkm7DbyUj0VGMPDIrxn0hrC4gdfzOFOpnQCK9VuUw95xpmIARtWB91ZJDX
7lCPYokgTefJ6Vfv9h+sS1ezCbLRcKsvcxL0Z2ZjpM1oCPRpWOgfEYCfAdlYimhX
LsRAQiO2bw8Sf2pysuhKFgW0p1hSoE79E4Lgv8xD7YbIvgeJAAcjoFf2lPcAm4ia
wN4mcbhFERAk5SmacAIzeMqYM9/nNiZx75EscJIxDmqpn4eQl9/DD91ZdLKQj5b4
4v48Oyf+6pu9wsklX1Yl176Ybw0bz+8rzlNi10QRLQuq5fH5VXdNqw==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:51 2023 by rpki-client on console.sobornost.net