Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/9JyxUis7WOfTINfKcTAchNQlWMw.roa
File: 9JyxUis7WOfTINfKcTAchNQlWMw.roa (raw, json)
Hash identifier: 0grPEDV2ku/WcUKGRqREsA3VPYXDVId5XXuA1mWHHvE=
Subject key identifier: F4:9C:B1:52:2B:3B:58:E7:D3:20:D7:CA:71:30:1C:84:D4:25:58:CC
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0182461D0D884478EA78D4C132E933A73A87
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/9JyxUis7WOfTINfKcTAchNQlWMw.roa
Signing time: Thu 28 Jul 2022 18:41:25 +0000
ROA not before: Thu 28 Jul 2022 18:41:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211851
IP address blocks: 212.193.12.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:46:1d:0d:88:44:78:ea:78:d4:c1:32:e9:33:a7:3a:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jul 28 18:41:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f49cb1522b3b58e7d320d7ca71301c84d42558cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:99:d9:6b:de:4d:d4:b7:68:46:02:76:bb:7f:
e7:bf:d3:a8:73:e7:01:8d:e9:ca:4b:c7:15:46:fb:
55:10:dd:05:28:71:de:9c:aa:ba:24:5e:68:80:fa:
bd:59:43:02:54:27:aa:a7:f3:43:b1:e4:5a:89:4e:
df:05:fe:21:36:19:cf:22:01:da:33:cf:de:9c:9b:
0c:b9:57:08:01:47:e3:45:10:da:02:e7:a1:59:84:
22:9f:83:d4:5b:0d:2b:5f:90:fb:49:92:2c:39:89:
3a:73:3a:fc:34:1b:6e:e3:44:e9:d2:68:6a:c7:6f:
87:ff:63:6e:49:96:38:95:bd:1c:7c:f0:62:cf:64:
ff:62:27:14:16:0f:57:e5:96:6f:73:54:7f:e8:67:
a5:5b:69:30:79:e8:3b:4f:1d:cd:d7:4e:23:fd:cb:
5c:c3:c6:cd:e2:41:87:34:b9:ce:e7:04:17:61:70:
52:3a:70:23:dd:3a:2c:24:ff:3f:a1:40:05:ef:84:
f1:fe:22:74:7c:04:81:d4:07:e1:46:1f:cb:de:db:
76:9f:e9:62:f4:c7:85:73:7f:b0:14:db:a8:0b:ab:
ec:97:ea:6b:39:9b:ed:8e:be:51:65:3b:8f:06:2a:
00:ec:31:d4:f0:f2:56:c4:f1:62:1e:fa:a9:8f:1f:
52:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:9C:B1:52:2B:3B:58:E7:D3:20:D7:CA:71:30:1C:84:D4:25:58:CC
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/9JyxUis7WOfTINfKcTAchNQlWMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.193.12.0/24
Signature Algorithm: sha256WithRSAEncryption
55:98:2d:fa:52:65:68:67:e6:48:be:73:b3:f1:ae:d0:31:f0:
8e:9c:f7:9b:dd:63:68:50:24:92:23:9e:5d:c4:18:1b:5f:54:
18:83:51:8f:c4:b7:f3:78:92:7c:fb:7e:40:9e:ad:8f:8a:10:
65:cf:3e:75:cf:81:c2:7d:f2:42:62:ce:21:14:75:63:03:56:
4c:e7:66:52:d2:99:66:3a:7f:5c:d6:6b:5a:ba:fb:57:b4:22:
4b:e8:c1:78:e6:c9:fe:e7:62:43:51:d7:ff:59:06:71:90:60:
7a:ee:db:85:d7:06:a9:d4:0a:82:31:84:3b:e3:21:51:b3:2f:
51:9a:cd:e4:89:fc:13:a2:08:35:04:13:2b:67:f4:68:00:38:
a2:48:90:c3:79:e7:8d:8b:ed:06:3d:9d:64:5e:8d:c4:30:22:
7f:81:03:80:c3:99:bd:8a:3a:f9:a3:3d:68:1f:4d:da:8d:0f:
37:ca:8e:be:b5:32:df:ce:21:9b:12:6a:0c:68:4d:83:71:cb:
8d:5a:44:f5:2b:a5:3e:38:60:e6:97:84:54:09:c7:1d:39:e4:
d5:19:ac:69:51:e0:83:b1:d0:3d:ad:02:0b:4d:02:7f:27:2a:
66:1b:f1:fd:04:f7:d7:b8:c8:9f:64:64:89:92:18:aa:f9:97:
69:d1:f5:58
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYJGHQ2IRHjqeNTBMukzpzqHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjIwNzI4MTg0MTI1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNDljYjE1MjJiM2I1OGU3ZDMyMGQ3Y2E3MTMwMWM4NGQ0MjU1OGNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpnZa95N1LdoRgJ2u3/nv9Ooc+cB
jenKS8cVRvtVEN0FKHHenKq6JF5ogPq9WUMCVCeqp/NDseRaiU7fBf4hNhnPIgHa
M8/enJsMuVcIAUfjRRDaAuehWYQin4PUWw0rX5D7SZIsOYk6czr8NBtu40Tp0mhq
x2+H/2NuSZY4lb0cfPBiz2T/YicUFg9X5ZZvc1R/6GelW2kweeg7Tx3N104j/ctc
w8bN4kGHNLnO5wQXYXBSOnAj3TosJP8/oUAF74Tx/iJ0fASB1AfhRh/L3tt2n+li
9MeFc3+wFNuoC6vsl+prOZvtjr5RZTuPBioA7DHU8PJWxPFiHvqpjx9SHwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPScsVIrO1jn0yDXynEwHITUJVjMMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvOUp5eFVpczdXT2ZUSU5mS2NUQWNoTlFsV013LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1MEMMA0G
CSqGSIb3DQEBCwUAA4IBAQBVmC36UmVoZ+ZIvnOz8a7QMfCOnPeb3WNoUCSSI55d
xBgbX1QYg1GPxLfzeJJ8+35Anq2PihBlzz51z4HCffJCYs4hFHVjA1ZM52ZS0plm
On9c1mtauvtXtCJL6MF45sn+52JDUdf/WQZxkGB67tuF1wap1AqCMYQ74yFRsy9R
ms3kifwTogg1BBMrZ/RoADiiSJDDeeeNi+0GPZ1kXo3EMCJ/gQOAw5m9ijr5oz1o
H03ajQ83yo6+tTLfziGbEmoMaE2DccuNWkT1K6U+OGDml4RUCccdOeTVGaxpUeCD
sdA9rQILTQJ/JypmG/H9BPfXuMifZGSJkhiq+Zdp0fVY
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:57 2023 by rpki-client on console-fra.rpki-client.org