Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/wUMVPTRONzLWtwKwxvEplKtfUjA.roa
File: wUMVPTRONzLWtwKwxvEplKtfUjA.roa (raw, json)
Hash identifier: 4gJYHUT3UDdxs20JpYIhOW25fIVUk9RkOYGNOkwvIdY=
Subject key identifier: C1:43:15:3D:34:4E:37:32:D6:B7:02:B0:C6:F1:29:94:AB:5F:52:30
Certificate issuer: /CN=9df6d163593deb8aeff072feca58e6f3f1c4e7e5
Certificate serial: 01830E29AA0FBF5145012C51DA9307AAB5D1
Authority key identifier: 9D:F6:D1:63:59:3D:EB:8A:EF:F0:72:FE:CA:58:E6:F3:F1:C4:E7:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfbRY1k964rv8HL-yljm8_HE5-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/wUMVPTRONzLWtwKwxvEplKtfUjA.roa
Signing time: Mon 05 Sep 2022 14:59:14 +0000
ROA not before: Mon 05 Sep 2022 14:59:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207048
IP address blocks: 193.107.51.0/24 maxlen: 24
185.123.52.0/24 maxlen: 24
2a12:60c0::/29 maxlen: 29
2a10:ec0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:0e:29:aa:0f:bf:51:45:01:2c:51:da:93:07:aa:b5:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9df6d163593deb8aeff072feca58e6f3f1c4e7e5
Validity
Not Before: Sep 5 14:59:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c143153d344e3732d6b702b0c6f12994ab5f5230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0f:81:b9:84:33:00:55:b5:13:64:9a:1a:43:
3a:da:bc:43:32:c5:ba:88:ab:12:54:de:a9:a2:f9:
18:89:5f:e3:3f:81:a0:b2:f8:70:96:6b:2b:e5:cc:
9d:09:cc:43:87:fe:ce:fc:22:0c:87:48:2e:20:d8:
27:8f:13:21:b1:18:99:c2:f4:b7:df:22:d3:79:d0:
dc:24:8e:7c:70:ea:70:73:52:57:e6:1d:c9:84:52:
4f:3e:f7:41:9d:b9:fb:f2:19:83:b6:41:ff:48:90:
20:2e:b4:42:8a:e7:6d:12:57:be:22:6b:1d:4d:94:
27:3b:bb:69:6d:71:4a:53:57:5d:8a:4a:43:e7:96:
3b:fe:c5:bc:ac:af:58:78:6a:c1:52:6f:1f:60:55:
6d:c8:5e:99:a8:37:63:f8:8e:18:fa:4c:c1:4d:61:
17:d8:e3:1b:ca:f9:fd:b9:42:ff:42:79:c8:fd:46:
15:60:e6:10:50:13:62:79:3d:d8:b5:3c:2a:11:67:
71:71:93:fc:fc:33:5c:d5:1d:5f:a0:60:c7:b7:46:
01:f9:36:7f:56:c1:23:42:6d:c1:c9:47:c5:86:a2:
b6:3b:69:e7:9e:17:a4:e2:69:db:23:e9:dd:ec:a6:
13:7e:98:32:54:6c:62:11:90:ed:48:cb:74:5f:f2:
23:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:43:15:3D:34:4E:37:32:D6:B7:02:B0:C6:F1:29:94:AB:5F:52:30
X509v3 Authority Key Identifier:
keyid:9D:F6:D1:63:59:3D:EB:8A:EF:F0:72:FE:CA:58:E6:F3:F1:C4:E7:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfbRY1k964rv8HL-yljm8_HE5-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/wUMVPTRONzLWtwKwxvEplKtfUjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/nfbRY1k964rv8HL-yljm8_HE5-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.123.52.0/24
193.107.51.0/24
IPv6:
2a10:ec0::/29
2a12:60c0::/29
Signature Algorithm: sha256WithRSAEncryption
b4:6a:6a:e1:6d:8d:41:36:ef:cc:81:d5:27:76:ad:8c:65:3d:
2a:b6:71:02:63:e9:b9:70:ef:f8:65:4c:67:55:f9:29:d9:9b:
62:c6:79:4b:31:da:8f:ff:ec:56:0d:70:f4:7b:7a:c2:c6:e1:
2b:44:03:a1:6f:ab:30:60:be:ba:41:ff:5a:64:bd:f3:69:fa:
1d:49:4e:06:e2:a8:12:57:d5:d3:02:13:25:23:6d:f0:c0:1c:
ab:0c:0f:be:8f:f3:1e:f5:75:d9:72:b5:ab:30:c8:0b:26:b2:
6a:79:bc:49:28:71:0d:7a:58:d7:19:c1:7f:25:e2:b6:a6:fb:
91:8b:c3:f5:78:62:00:e6:ce:f6:5f:73:75:36:69:c0:63:e8:
5a:81:77:25:b2:7e:b9:61:3b:75:65:31:9c:4e:8d:4b:0f:e7:
70:43:06:80:05:61:2b:f2:a4:ce:f8:d7:55:8e:f0:22:61:0b:
eb:93:27:ab:25:9f:2c:01:6d:35:45:18:24:76:ce:9a:95:fb:
86:b3:d3:a5:28:46:31:f3:9f:06:36:c9:cf:d8:28:c7:aa:ee:
d6:5b:77:59:a3:6f:de:07:27:83:e8:70:4e:47:a8:f5:c1:e5:
d0:80:7d:28:d6:97:27:be:7f:9b:a7:0b:b0:53:e2:7e:aa:a4:
91:02:91:b6
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAYMOKaoPv1FFASxR2pMHqrXRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkZjZkMTYzNTkzZGViOGFlZmYwNzJmZWNhNThlNmYzZjFj
NGU3ZTUwHhcNMjIwOTA1MTQ1OTE0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMTQzMTUzZDM0NGUzNzMyZDZiNzAyYjBjNmYxMjk5NGFiNWY1MjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqw+BuYQzAFW1E2SaGkM62rxDMsW6
iKsSVN6povkYiV/jP4Ggsvhwlmsr5cydCcxDh/7O/CIMh0guINgnjxMhsRiZwvS3
3yLTedDcJI58cOpwc1JX5h3JhFJPPvdBnbn78hmDtkH/SJAgLrRCiudtEle+Imsd
TZQnO7tpbXFKU1ddikpD55Y7/sW8rK9YeGrBUm8fYFVtyF6ZqDdj+I4Y+kzBTWEX
2OMbyvn9uUL/QnnI/UYVYOYQUBNieT3YtTwqEWdxcZP8/DNc1R1foGDHt0YB+TZ/
VsEjQm3ByUfFhqK2O2nnnhek4mnbI+nd7KYTfpgyVGxiEZDtSMt0X/IjnQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFMFDFT00Tjcy1rcCsMbxKZSrX1IwMB8GA1UdIwQY
MBaAFJ320WNZPeuK7/By/spY5vPxxOflMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmZiUlkxazk2NHJ2OEhMLXlsam04X0hFNS1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9mZjI1ZDctNWZmYS00Njg2LTgzMjYt
NjlkNzljOWQwNzIxLzEvd1VNVlBUUk9OekxXdHdLd3h2RXBsS3RmVWpBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi9mZjI1ZDctNWZmYS00Njg2LTgzMjYtNjlkNzljOWQwNzIx
LzEvbmZiUlkxazk2NHJ2OEhMLXlsam04X0hFNS1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjASBAIAATAMAwQAuXs0AwQA
wWszMBQEAgACMA4DBQMqEA7AAwUDKhJgwDANBgkqhkiG9w0BAQsFAAOCAQEAtGpq
4W2NQTbvzIHVJ3atjGU9KrZxAmPpuXDv+GVMZ1X5KdmbYsZ5SzHaj//sVg1w9Ht6
wsbhK0QDoW+rMGC+ukH/WmS982n6HUlOBuKoElfV0wITJSNt8MAcqwwPvo/zHvV1
2XK1qzDICyayanm8SShxDXpY1xnBfyXitqb7kYvD9XhiAObO9l9zdTZpwGPoWoF3
JbJ+uWE7dWUxnE6NSw/ncEMGgAVhK/KkzvjXVY7wImEL65MnqyWfLAFtNUUYJHbO
mpX7hrPTpShGMfOfBjbJz9gox6ru1lt3WaNv3gcng+hwTkeo9cHl0IB9KNaXJ75/
m6cLsFPifqqkkQKRtg==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:46 2023 by rpki-client on console.sobornost.net