Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/No0WF1OnnH9K3sSNYqCjhAxYPMk.roa
File: No0WF1OnnH9K3sSNYqCjhAxYPMk.roa (raw, json)
Hash identifier: LrllE20BypFoY2vujQ7RnKBSAm1O3d8OmmSpMQsXXP0=
Subject key identifier: 36:8D:16:17:53:A7:9C:7F:4A:DE:C4:8D:62:A0:A3:84:0C:58:3C:C9
Certificate issuer: /CN=d921145820feceef3cf55270326c5e1243f24355
Certificate serial: 024F7CA4
Authority key identifier: D9:21:14:58:20:FE:CE:EF:3C:F5:52:70:32:6C:5E:12:43:F2:43:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2SEUWCD-zu889VJwMmxeEkPyQ1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/No0WF1OnnH9K3sSNYqCjhAxYPMk.roa
Signing time: Sat 01 Jan 2022 14:56:11 +0000
ROA not before: Sat 01 Jan 2022 14:56:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59829
IP address blocks: 212.6.50.0/24 maxlen: 24
2a0c:2f40::/29 maxlen: 29
2a0c:2f43::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38763684 (0x24f7ca4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d921145820feceef3cf55270326c5e1243f24355
Validity
Not Before: Jan 1 14:56:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=368d161753a79c7f4adec48d62a0a3840c583cc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:60:07:53:00:2a:ad:1c:b5:26:38:3c:3d:82:
f9:ee:94:6e:62:5d:b6:c4:f9:85:aa:7d:1e:f1:b3:
8e:1f:90:79:72:b9:ad:09:9d:22:08:dc:3e:55:d5:
aa:2f:ee:90:c7:97:5b:f1:6b:2c:a8:3d:46:03:80:
2c:5f:f0:d4:cd:ac:04:4d:d3:72:a7:37:2d:ae:e9:
f5:18:60:86:d2:6b:20:1c:fe:3f:0c:57:18:d4:40:
15:37:e3:01:67:b5:9b:b4:05:7f:5a:16:be:7d:15:
92:35:00:df:02:ea:23:9f:30:c8:52:37:b9:6d:11:
83:c3:bf:8f:a4:49:a1:d5:18:08:a4:65:b6:89:7f:
2e:13:d2:75:7f:00:72:69:0d:ee:6b:93:76:ab:cc:
16:d5:82:a9:33:4e:4d:01:c6:de:78:d8:ae:15:97:
71:fe:03:0e:68:6f:4a:da:b3:34:78:e4:8e:0c:34:
e0:5c:33:56:fe:49:57:90:f2:35:ef:38:b3:33:a7:
9f:74:4b:0e:f1:46:05:83:b0:de:8b:d5:e7:e2:0a:
25:f6:1d:84:41:7a:af:b4:2a:40:1e:43:fa:a5:ea:
52:e2:df:cc:5c:64:94:0f:da:71:aa:fe:c7:29:da:
81:71:86:71:3c:15:6a:ce:49:f9:60:75:e5:96:aa:
5a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:8D:16:17:53:A7:9C:7F:4A:DE:C4:8D:62:A0:A3:84:0C:58:3C:C9
X509v3 Authority Key Identifier:
keyid:D9:21:14:58:20:FE:CE:EF:3C:F5:52:70:32:6C:5E:12:43:F2:43:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SEUWCD-zu889VJwMmxeEkPyQ1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/No0WF1OnnH9K3sSNYqCjhAxYPMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.6.50.0/24
IPv6:
2a0c:2f40::/29
Signature Algorithm: sha256WithRSAEncryption
a2:5c:13:00:09:5a:f7:e9:0d:68:7c:30:90:ab:1b:33:b0:04:
cb:43:28:04:ef:1e:7c:4b:e4:e3:1c:6c:55:c2:d4:c5:09:29:
dd:c0:ff:f3:f3:cd:35:7a:4c:5f:c2:94:ec:30:66:25:f7:1d:
4e:89:96:e6:bd:b4:43:6c:75:ae:59:43:81:c4:09:bf:36:78:
d4:56:86:09:94:66:77:6b:2b:51:c1:ca:37:c7:62:95:8b:01:
20:08:53:8b:90:72:10:e0:ab:96:02:ff:26:74:fc:6f:10:4d:
0d:a4:6f:cb:b0:90:84:ef:89:bf:1f:e0:17:a6:e6:10:7d:e7:
5e:9b:9b:73:21:a7:32:c8:72:cb:e2:9c:0c:de:e2:b9:f3:a4:
b6:17:b3:bc:01:d5:76:49:a6:82:a3:d6:06:13:c1:e0:27:81:
ed:fa:ca:ed:06:b2:98:b7:a3:d7:0a:85:71:45:4f:3c:f7:a4:
25:e1:7c:a1:7b:7b:c5:cb:d1:bd:3a:be:46:ac:1b:3d:be:f7:
dd:1c:f7:b7:e6:d5:a1:06:2c:e4:e9:97:e0:4f:05:91:1c:0f:
56:af:74:f6:d1:10:33:c7:fd:26:24:07:36:d4:ef:51:bf:26:
05:76:bc:ce:ec:7f:4d:06:15:78:69:e5:d9:19:7c:8b:c5:22:
da:4e:94:8e
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEAk98pDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
OTIxMTQ1ODIwZmVjZWVmM2NmNTUyNzAzMjZjNWUxMjQzZjI0MzU1MB4XDTIyMDEw
MTE0NTYxMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzY4ZDE2MTc1M2E3
OWM3ZjRhZGVjNDhkNjJhMGEzODQwYzU4M2NjOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALZgB1MAKq0ctSY4PD2C+e6UbmJdtsT5hap9HvGzjh+QeXK5
rQmdIgjcPlXVqi/ukMeXW/FrLKg9RgOALF/w1M2sBE3Tcqc3La7p9RhghtJrIBz+
PwxXGNRAFTfjAWe1m7QFf1oWvn0VkjUA3wLqI58wyFI3uW0Rg8O/j6RJodUYCKRl
tol/LhPSdX8AcmkN7muTdqvMFtWCqTNOTQHG3njYrhWXcf4DDmhvStqzNHjkjgw0
4FwzVv5JV5DyNe84szOnn3RLDvFGBYOw3ovV5+IKJfYdhEF6r7QqQB5D+qXqUuLf
zFxklA/acar+xynagXGGcTwVas5J+WB15ZaqWn8CAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBQ2jRYXU6ecf0rexI1ioKOEDFg8yTAfBgNVHSMEGDAWgBTZIRRYIP7O7zz1
UnAybF4SQ/JDVTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzJTRVVXQ0QtenU4ODlWSndNbXhlRWtQeVExVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzMvMzFhN2Q0LTQ5YTQtNGQ2Zi04YzhkLWQ4MTUyYjUxNTdkOC8x
L05vMFdGMU9ubkg5SzNzU05ZcUNqaEF4WVBNay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzMv
MzFhN2Q0LTQ5YTQtNGQ2Zi04YzhkLWQ4MTUyYjUxNTdkOC8xLzJTRVVXQ0QtenU4
ODlWSndNbXhlRWtQeVExVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEANQGMjANBAIAAjAHAwUDKgwvQDAN
BgkqhkiG9w0BAQsFAAOCAQEAolwTAAla9+kNaHwwkKsbM7AEy0MoBO8efEvk4xxs
VcLUxQkp3cD/8/PNNXpMX8KU7DBmJfcdTomW5r20Q2x1rllDgcQJvzZ41FaGCZRm
d2srUcHKN8dilYsBIAhTi5ByEOCrlgL/JnT8bxBNDaRvy7CQhO+Jvx/gF6bmEH3n
XpubcyGnMshyy+KcDN7iufOkthezvAHVdkmmgqPWBhPB4CeB7frK7QaymLej1wqF
cUVPPPekJeF8oXt7xcvRvTq+RqwbPb733Rz3t+bVoQYs5OmX4E8FkRwPVq909tEQ
M8f9JiQHNtTvUb8mBXa8zux/TQYVeGnl2Rl8i8Ui2k6Ujg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:49 2024 by rpki-client on console-fra.rpki-client.org