Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/CLMVNBYEcZ_a43RlyJOou71KY5A.roa
File: CLMVNBYEcZ_a43RlyJOou71KY5A.roa (raw, json)
Hash identifier: ZzLFkU8jBfGH75VS1mH5PeiSqIoEnolG09qXHBpXqBo=
Subject key identifier: 08:B3:15:34:16:04:71:9F:DA:E3:74:65:C8:93:A8:BB:BD:4A:63:90
Certificate issuer: /CN=25a89539520004270d34253bdc16d87784156e1a
Certificate serial: 182F708E
Authority key identifier: 25:A8:95:39:52:00:04:27:0D:34:25:3B:DC:16:D8:77:84:15:6E:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JaiVOVIABCcNNCU73BbYd4QVbho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/CLMVNBYEcZ_a43RlyJOou71KY5A.roa
Signing time: Sat 01 Jan 2022 12:06:05 +0000
ROA not before: Sat 01 Jan 2022 12:06:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62336
IP address blocks: 212.53.216.0/22 maxlen: 22
212.53.224.0/20 maxlen: 20
212.48.116.64/26 maxlen: 26
212.53.240.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 405762190 (0x182f708e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25a89539520004270d34253bdc16d87784156e1a
Validity
Not Before: Jan 1 12:06:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=08b315341604719fdae37465c893a8bbbd4a6390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:29:de:d4:53:7c:5e:c8:d1:89:bc:5f:ce:27:
61:21:c1:ad:99:d7:d9:1f:5a:5d:01:e1:4f:50:89:
22:ff:bf:bc:39:3b:25:96:14:5f:fc:03:77:51:fe:
36:08:43:c2:6d:c8:cc:8d:92:0b:2c:1a:48:46:59:
d6:67:4f:a5:26:41:7a:c5:0f:68:e3:60:e3:fd:cf:
01:25:88:13:f7:0c:58:4e:24:ea:92:ac:18:d0:45:
1e:4a:0e:de:a4:ca:ec:a1:21:22:b4:9c:ae:f7:d1:
83:53:8d:10:18:6f:7d:db:4b:28:ca:52:b2:27:2f:
fd:7d:96:47:f9:12:dc:a1:b8:e1:9d:cb:66:ac:9f:
7c:23:fc:15:89:79:53:d7:b2:40:50:cc:c4:e4:ff:
28:27:75:fe:25:cb:dc:37:3f:c1:04:ab:4f:85:1a:
8f:58:d5:59:1a:df:28:61:5d:4e:c4:8a:16:9e:5d:
18:0b:09:99:a6:65:87:d9:eb:74:ab:18:f4:3a:7a:
7c:f8:b9:67:e5:ff:4c:3e:39:3a:71:54:18:96:cd:
5c:02:11:19:dd:77:64:1b:0f:a1:dd:94:6e:96:9d:
f0:e7:1e:ef:9a:6d:0c:23:85:f2:ad:45:76:8f:ee:
17:01:f4:00:4e:6a:91:4c:0a:40:a1:55:1e:ea:46:
95:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:B3:15:34:16:04:71:9F:DA:E3:74:65:C8:93:A8:BB:BD:4A:63:90
X509v3 Authority Key Identifier:
keyid:25:A8:95:39:52:00:04:27:0D:34:25:3B:DC:16:D8:77:84:15:6E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JaiVOVIABCcNNCU73BbYd4QVbho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/CLMVNBYEcZ_a43RlyJOou71KY5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.48.116.64/26
212.53.216.0/22
212.53.224.0/19
Signature Algorithm: sha256WithRSAEncryption
08:5f:37:f8:af:01:be:29:0e:57:9a:c6:c0:d2:29:e2:11:e2:
62:55:44:c3:e3:29:4b:95:2b:a3:51:e7:6d:93:de:db:55:30:
46:96:1c:a2:ae:1e:99:1a:35:16:b4:a4:63:84:42:0a:82:63:
ac:d3:2d:10:4d:0a:0a:e7:60:4b:39:e3:4a:28:51:41:3d:e6:
9b:dd:9f:ea:b5:c5:29:02:34:94:5d:cd:7b:04:c8:1e:47:b7:
52:c7:9e:73:b5:3b:5e:9b:d6:d5:dd:ef:aa:2d:a5:1b:b6:4d:
72:e7:23:48:6c:20:3b:77:f2:64:77:8c:07:b7:f3:b8:5b:35:
84:47:93:5e:ca:fb:0a:58:90:cc:48:6e:c9:5d:6b:fe:16:d6:
31:ea:d5:71:01:7a:58:44:7c:2e:5c:07:83:82:52:2f:41:4f:
93:39:94:b8:e8:55:64:71:50:40:d5:e9:dd:cb:92:c9:5c:a2:
4f:32:12:cd:b2:9f:dd:74:cb:9d:11:cd:f7:0c:bb:36:06:3c:
31:c4:60:a3:23:f6:29:71:a5:01:ec:3d:a6:a9:25:86:a8:76:
c1:9d:e4:77:b7:77:02:ac:d5:0c:99:68:8a:a0:87:9d:e0:bf:
bc:5b:1d:59:74:42:bd:69:87:19:0e:21:ca:ef:68:1a:06:6d:
a7:af:2c:81
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgIEGC9wjjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
NWE4OTUzOTUyMDAwNDI3MGQzNDI1M2JkYzE2ZDg3Nzg0MTU2ZTFhMB4XDTIyMDEw
MTEyMDYwNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDhiMzE1MzQxNjA0
NzE5ZmRhZTM3NDY1Yzg5M2E4YmJiZDRhNjM5MDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANUp3tRTfF7I0Ym8X84nYSHBrZnX2R9aXQHhT1CJIv+/vDk7
JZYUX/wDd1H+NghDwm3IzI2SCywaSEZZ1mdPpSZBesUPaONg4/3PASWIE/cMWE4k
6pKsGNBFHkoO3qTK7KEhIrScrvfRg1ONEBhvfdtLKMpSsicv/X2WR/kS3KG44Z3L
ZqyffCP8FYl5U9eyQFDMxOT/KCd1/iXL3Dc/wQSrT4Uaj1jVWRrfKGFdTsSKFp5d
GAsJmaZlh9nrdKsY9Dp6fPi5Z+X/TD45OnFUGJbNXAIRGd13ZBsPod2Ubpad8Oce
75ptDCOF8q1Fdo/uFwH0AE5qkUwKQKFVHupGla8CAwEAAaOCAhYwggISMB0GA1Ud
DgQWBBQIsxU0FgRxn9rjdGXIk6i7vUpjkDAfBgNVHSMEGDAWgBQlqJU5UgAEJw00
JTvcFth3hBVuGjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0phaVZPVklBQkNjTk5DVTczQmJZZDRRVmJoby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTkvYmMxNWVjLTZiMGQtNDczNC1hMDg4LWQwMDUyNmI5MTYwNS8x
L0NMTVZOQllFY1pfYTQzUmx5Sk9vdTcxS1k1QS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTkv
YmMxNWVjLTZiMGQtNDczNC1hMDg4LWQwMDUyNmI5MTYwNS8xL0phaVZPVklBQkNj
Tk5DVTczQmJZZDRRVmJoby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAs
BggrBgEFBQcBBwEB/wQdMBswGQQCAAEwEwMFBtQwdEADBALUNdgDBAXUNeAwDQYJ
KoZIhvcNAQELBQADggEBAAhfN/ivAb4pDleaxsDSKeIR4mJVRMPjKUuVK6NR522T
3ttVMEaWHKKuHpkaNRa0pGOEQgqCY6zTLRBNCgrnYEs540ooUUE95pvdn+q1xSkC
NJRdzXsEyB5Ht1LHnnO1O16b1tXd76otpRu2TXLnI0hsIDt38mR3jAe387hbNYRH
k17K+wpYkMxIbslda/4W1jHq1XEBelhEfC5cB4OCUi9BT5M5lLjoVWRxUEDV6d3L
kslcok8yEs2yn910y50RzfcMuzYGPDHEYKMj9ilxpQHsPaapJYaodsGd5He3dwKs
1QyZaIqgh53gv7xbHVl0Qr1phxkOIcrvaBoGbaevLIE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:10 2024 by rpki-client on console-fra.rpki-client.org