Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/01f6ed-7b86-4f76-828f-4e19239f0c35/1/9H7E4pHZtMYT8EwJ47srDfJfQnw.roa
File: 9H7E4pHZtMYT8EwJ47srDfJfQnw.roa (raw, json)
Hash identifier: 2stN1i+DB77yKPJ1WpdBCPVBBzbFEZJG7lyy0NbkWls=
Subject key identifier: F4:7E:C4:E2:91:D9:B4:C6:13:F0:4C:09:E3:BB:2B:0D:F2:5F:42:7C
Certificate issuer: /CN=30683cffa061f28a9e1135c9fc30376a6474cbf4
Certificate serial: 04E1F12F
Authority key identifier: 30:68:3C:FF:A0:61:F2:8A:9E:11:35:C9:FC:30:37:6A:64:74:CB:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/01f6ed-7b86-4f76-828f-4e19239f0c35/1/9H7E4pHZtMYT8EwJ47srDfJfQnw.roa
Signing time: Sat 01 Jan 2022 09:57:24 +0000
ROA not before: Sat 01 Jan 2022 09:57:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 19905
IP address blocks: 212.82.233.0/24 maxlen: 24
2a00:1798:6::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81916207 (0x4e1f12f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30683cffa061f28a9e1135c9fc30376a6474cbf4
Validity
Not Before: Jan 1 09:57:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f47ec4e291d9b4c613f04c09e3bb2b0df25f427c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:38:6f:36:a5:d1:4e:73:22:0f:73:3e:a4:9b:
6b:da:d4:ee:7a:ca:05:51:e0:c6:31:37:13:b6:70:
aa:6c:fc:b5:6e:f7:13:d5:23:e4:c3:a6:91:8b:9d:
be:64:28:44:02:cd:67:19:3d:99:41:d7:67:76:05:
7c:ad:73:f0:ec:08:0c:68:3e:78:57:55:af:dd:da:
72:60:05:23:35:51:24:1d:58:e4:a8:8e:a1:cc:58:
f6:6c:17:92:be:82:d3:6c:eb:74:4d:ee:b9:06:38:
5f:36:fd:89:04:f8:7b:8b:fb:55:0a:6b:e1:c6:ae:
c2:aa:50:88:82:52:55:f3:8b:47:e9:96:34:69:07:
2f:ab:02:fc:ce:6e:71:1c:1d:87:b2:85:63:d2:d9:
19:02:50:ab:74:4f:d4:4c:e3:03:26:9c:4f:d2:d9:
d6:61:7f:0d:7a:30:d4:d2:a2:8c:b6:a9:a3:48:ca:
74:d3:24:f4:0c:ac:32:86:ef:79:c9:8f:ca:97:65:
61:34:bc:ec:85:a4:df:70:53:9a:6f:be:c0:21:76:
39:8c:15:8d:2a:18:51:18:14:cd:75:7d:42:1d:c4:
2c:b1:e0:f4:3d:d3:e3:29:40:6d:af:93:67:d3:48:
73:15:55:3f:58:8d:08:97:c8:21:0e:13:a8:50:78:
05:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:7E:C4:E2:91:D9:B4:C6:13:F0:4C:09:E3:BB:2B:0D:F2:5F:42:7C
X509v3 Authority Key Identifier:
keyid:30:68:3C:FF:A0:61:F2:8A:9E:11:35:C9:FC:30:37:6A:64:74:CB:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/01f6ed-7b86-4f76-828f-4e19239f0c35/1/9H7E4pHZtMYT8EwJ47srDfJfQnw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/01f6ed-7b86-4f76-828f-4e19239f0c35/1/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.82.233.0/24
IPv6:
2a00:1798:6::/48
Signature Algorithm: sha256WithRSAEncryption
3f:8e:d3:a5:12:4c:a2:c8:b7:69:28:ee:bf:c0:0e:e2:55:12:
e3:48:f1:12:6e:e2:ed:40:40:a4:49:0a:43:ef:1e:30:fb:9b:
b2:5d:f3:4b:04:96:c8:34:b1:b3:a4:53:48:96:d5:92:bf:70:
95:1c:32:b2:23:9d:9f:90:99:bb:3f:2d:bd:bb:8f:5f:ca:92:
ee:b4:af:db:58:dc:0a:48:0a:dd:6f:9b:db:54:e4:96:de:1c:
ec:6f:62:cd:31:5a:b6:2f:3d:89:e6:b0:f8:4a:74:01:c1:74:
24:55:52:c0:b9:a1:fb:63:4f:48:4c:17:51:10:44:7b:96:7c:
d9:18:02:7b:bc:10:8c:3c:8d:d9:16:a2:08:a6:d6:73:85:69:
91:74:57:1e:82:2e:d1:bd:67:85:07:50:11:14:7d:58:a6:14:
93:1e:cf:11:bc:4b:ad:b4:92:c5:7b:93:23:ec:9f:e2:5d:6f:
f1:06:3b:09:49:14:47:ea:da:27:1a:ac:af:88:55:c1:50:cc:
41:9e:49:3a:65:73:b3:71:ad:25:83:35:cf:39:a1:fc:62:d2:
2c:28:c3:cf:e0:4b:cf:41:e7:75:b9:61:bf:0a:f8:c2:4f:23:
38:16:71:bf:b0:5f:bb:46:79:b8:09:95:57:6f:3f:3d:b3:f5:
90:55:cd:04
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEBOHxLzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
MDY4M2NmZmEwNjFmMjhhOWUxMTM1YzlmYzMwMzc2YTY0NzRjYmY0MB4XDTIyMDEw
MTA5NTcyNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjQ3ZWM0ZTI5MWQ5
YjRjNjEzZjA0YzA5ZTNiYjJiMGRmMjVmNDI3YzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKk4bzal0U5zIg9zPqSba9rU7nrKBVHgxjE3E7Zwqmz8tW73
E9Uj5MOmkYudvmQoRALNZxk9mUHXZ3YFfK1z8OwIDGg+eFdVr93acmAFIzVRJB1Y
5KiOocxY9mwXkr6C02zrdE3uuQY4Xzb9iQT4e4v7VQpr4cauwqpQiIJSVfOLR+mW
NGkHL6sC/M5ucRwdh7KFY9LZGQJQq3RP1EzjAyacT9LZ1mF/DXow1NKijLapo0jK
dNMk9AysMobvecmPypdlYTS87IWk33BTmm++wCF2OYwVjSoYURgUzXV9Qh3ELLHg
9D3T4ylAba+TZ9NIcxVVP1iNCJfIIQ4TqFB4BR0CAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBT0fsTikdm0xhPwTAnjuysN8l9CfDAfBgNVHSMEGDAWgBQwaDz/oGHyip4R
Ncn8MDdqZHTL9DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L01HZzhfNkJoOG9xZUVUWEpfREEzYW1SMHlfUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDUvMDFmNmVkLTdiODYtNGY3Ni04MjhmLTRlMTkyMzlmMGMzNS8x
LzlIN0U0cEhadE1ZVDhFd0o0N3NyRGZKZlFudy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDUv
MDFmNmVkLTdiODYtNGY3Ni04MjhmLTRlMTkyMzlmMGMzNS8xL01HZzhfNkJoOG9x
ZUVUWEpfREEzYW1SMHlfUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEANRS6TAPBAIAAjAJAwcAKgAXmAAG
MA0GCSqGSIb3DQEBCwUAA4IBAQA/jtOlEkyiyLdpKO6/wA7iVRLjSPESbuLtQECk
SQpD7x4w+5uyXfNLBJbINLGzpFNIltWSv3CVHDKyI52fkJm7Py29u49fypLutK/b
WNwKSArdb5vbVOSW3hzsb2LNMVq2Lz2J5rD4SnQBwXQkVVLAuaH7Y09ITBdREER7
lnzZGAJ7vBCMPI3ZFqIIptZzhWmRdFcegi7RvWeFB1ARFH1YphSTHs8RvEuttJLF
e5Mj7J/iXW/xBjsJSRRH6tonGqyviFXBUMxBnkk6ZXOzca0lgzXPOaH8YtIsKMPP
4EvPQed1uWG/CvjCTyM4FnG/sF+7Rnm4CZVXbz89s/WQVc0E
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:32 2024 by rpki-client on console-fra.rpki-client.org