Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/WOvTpHRrfrnEUn4sFpMDf15d0MQ.roa
File: WOvTpHRrfrnEUn4sFpMDf15d0MQ.roa (raw, json)
Hash identifier: 9Ze/RYYPpx+JApKMxC/ag8yVWdgXJFwNuF4CqJ0+v6A=
Subject key identifier: 58:EB:D3:A4:74:6B:7E:B9:C4:52:7E:2C:16:93:03:7F:5E:5D:D0:C4
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 1994C69D
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/WOvTpHRrfrnEUn4sFpMDf15d0MQ.roa
Signing time: Sat 04 Jun 2022 09:58:43 +0000
ROA not before: Sat 04 Jun 2022 09:58:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12982
IP address blocks: 212.72.195.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 429180573 (0x1994c69d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jun 4 09:58:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=58ebd3a4746b7eb9c4527e2c1693037f5e5dd0c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:92:ca:1f:37:e9:f4:68:9a:ca:31:9b:5a:77:
ab:1d:81:e9:11:bb:e3:ec:05:b6:c0:cd:07:c8:ca:
af:5c:07:04:e5:41:51:aa:b3:d3:5e:88:c0:b6:83:
75:10:56:c6:11:ff:16:44:28:da:19:36:dc:6d:b9:
69:50:f2:f0:93:93:5c:79:45:b4:a4:6d:27:97:0d:
83:85:af:93:05:6e:75:42:0b:e7:68:70:19:a3:2f:
7d:c1:c7:ce:f7:f0:b3:df:8f:1d:28:97:43:83:94:
d0:72:a2:da:21:5b:ce:e7:5a:42:01:d4:83:8c:f1:
49:4a:ba:05:dd:10:a5:ae:10:62:42:67:c8:92:c2:
d2:93:1f:97:05:ac:37:1d:6b:e1:3e:40:34:2a:f3:
14:af:2b:0a:e3:2f:5d:cf:bc:4e:e3:ea:32:d4:27:
63:1c:ea:64:4d:ac:95:00:84:24:cf:fb:b6:91:86:
ad:f9:2b:be:a0:47:9b:a6:a6:e2:1a:56:12:3b:c1:
2b:3d:e5:38:73:a6:50:16:2c:16:68:19:7c:3d:fa:
51:de:f7:4f:d4:15:de:31:48:cf:41:87:ea:fc:e2:
e3:8e:fb:fc:f3:61:81:ae:ee:f7:25:1e:13:8d:4b:
96:64:c0:19:4b:0c:47:aa:ba:3d:05:1c:35:31:51:
93:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:EB:D3:A4:74:6B:7E:B9:C4:52:7E:2C:16:93:03:7F:5E:5D:D0:C4
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/WOvTpHRrfrnEUn4sFpMDf15d0MQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.72.195.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:a7:99:76:9b:e2:72:e4:71:20:1d:30:03:5a:d3:f1:fb:a9:
6e:72:96:4b:a2:60:d4:5d:7f:12:59:97:02:f9:f2:24:67:3d:
d4:f0:f5:b0:96:3b:f4:ce:86:dc:8f:4f:73:54:7a:9a:e0:95:
06:f3:1d:f2:7d:1d:3b:ed:ba:c3:fa:17:9a:15:cb:24:e0:a0:
1f:00:9a:16:1d:81:45:90:4e:e7:82:ba:26:68:08:74:8a:47:
c7:28:83:e6:93:75:f1:94:7b:34:a3:33:8c:40:45:31:f3:2c:
49:38:69:2f:b0:74:bc:1e:1e:9c:e3:38:7b:cc:6b:c2:d8:20:
de:ad:28:42:7a:28:b1:25:21:08:d8:a0:74:95:de:7e:24:e5:
46:fe:26:ba:7f:b5:06:39:21:de:7a:04:66:78:4b:2d:2c:4e:
25:ef:86:14:13:7d:a1:78:0d:3b:2c:ef:27:5c:b6:10:9c:3c:
de:75:c4:66:f4:80:50:bb:19:a7:6e:c2:d6:69:12:ad:72:83:
26:ca:25:ac:0b:29:a3:59:51:b7:9b:2a:78:a2:42:fd:e2:f6:
1f:dd:7c:04:9e:d4:8a:1c:e0:48:23:e2:cc:75:57:3d:24:5e:
4d:35:0d:54:a4:62:f5:55:b7:51:e3:ab:fa:b5:78:53:24:8a:
d7:70:55:c9
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEGZTGnTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
NGIyZjRmYTUxNjNhZjk2MTY4ZTg4ZmJmOWNiNGVkMWVkOGZiNGM0MB4XDTIyMDYw
NDA5NTg0M1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNThlYmQzYTQ3NDZi
N2ViOWM0NTI3ZTJjMTY5MzAzN2Y1ZTVkZDBjNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMGSyh836fRomsoxm1p3qx2B6RG74+wFtsDNB8jKr1wHBOVB
Uaqz016IwLaDdRBWxhH/FkQo2hk23G25aVDy8JOTXHlFtKRtJ5cNg4WvkwVudUIL
52hwGaMvfcHHzvfws9+PHSiXQ4OU0HKi2iFbzudaQgHUg4zxSUq6Bd0Qpa4QYkJn
yJLC0pMflwWsNx1r4T5ANCrzFK8rCuMvXc+8TuPqMtQnYxzqZE2slQCEJM/7tpGG
rfkrvqBHm6am4hpWEjvBKz3lOHOmUBYsFmgZfD36Ud73T9QV3jFIz0GH6vzi4477
/PNhga7u9yUeE41LlmTAGUsMR6q6PQUcNTFRkzECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRY69OkdGt+ucRSfiwWkwN/Xl3QxDAfBgNVHSMEGDAWgBSEsvT6UWOvlhaO
iPv5y07R7Y+0xDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2hMTDAtbEZqcjVZV2pvajctY3RPMGUyUHRNUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjAvNGFhNzg5LTg3OGItNDcyYi1iODQ3LTg3MmJhMmQ5ZjQ0Yy8x
L1dPdlRwSFJyZnJuRVVuNHNGcE1EZjE1ZDBNUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjAv
NGFhNzg5LTg3OGItNDcyYi1iODQ3LTg3MmJhMmQ5ZjQ0Yy8xL2hMTDAtbEZqcjVZ
V2pvajctY3RPMGUyUHRNUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANRIwzANBgkqhkiG9w0BAQsFAAOC
AQEAs6eZdpvicuRxIB0wA1rT8fupbnKWS6Jg1F1/ElmXAvnyJGc91PD1sJY79M6G
3I9Pc1R6muCVBvMd8n0dO+26w/oXmhXLJOCgHwCaFh2BRZBO54K6JmgIdIpHxyiD
5pN18ZR7NKMzjEBFMfMsSThpL7B0vB4enOM4e8xrwtgg3q0oQnoosSUhCNigdJXe
fiTlRv4mun+1Bjkh3noEZnhLLSxOJe+GFBN9oXgNOyzvJ1y2EJw83nXEZvSAULsZ
p27C1mkSrXKDJsolrAspo1lRt5sqeKJC/eL2H918BJ7UihzgSCPizHVXPSReTTUN
VKRi9VW3UeOr+rV4UySK13BVyQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:53 2024 by rpki-client on console-ams.rpki-client.org