Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/7WTUNys4sDLeqHawrr7BHSYIcqY.roa
File: 7WTUNys4sDLeqHawrr7BHSYIcqY.roa (raw, json)
Hash identifier: slgHVBHZyf450mSB4CA6klnLlSFfT71BsVkb/Uoyl0o=
Subject key identifier: ED:64:D4:37:2B:38:B0:32:DE:A8:76:B0:AE:BE:C1:1D:26:08:72:A6
Certificate issuer: /CN=b02aa961b477d5423d85b7d43f3efa26326d7090
Certificate serial: 084FD06F
Authority key identifier: B0:2A:A9:61:B4:77:D5:42:3D:85:B7:D4:3F:3E:FA:26:32:6D:70:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCqpYbR31UI9hbfUPz76JjJtcJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/7WTUNys4sDLeqHawrr7BHSYIcqY.roa
Signing time: Sat 01 Jan 2022 13:06:42 +0000
ROA not before: Sat 01 Jan 2022 13:06:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209860
IP address blocks: 212.87.242.0/23 maxlen: 23
212.87.249.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139448431 (0x84fd06f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b02aa961b477d5423d85b7d43f3efa26326d7090
Validity
Not Before: Jan 1 13:06:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ed64d4372b38b032dea876b0aebec11d260872a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f1:bb:f9:f9:6c:72:f9:2a:60:42:44:5a:f7:
be:00:ab:4b:13:bb:74:96:82:05:65:b5:be:67:76:
ed:ef:ef:ae:e4:f9:0a:95:fd:17:51:15:ad:a2:34:
4a:00:e9:a3:17:45:54:aa:b4:08:ae:78:08:3f:bc:
22:3e:10:e3:59:41:2c:29:57:cc:b3:47:e0:d8:f0:
84:d9:bd:08:e3:a1:5d:dd:97:f1:d4:31:31:c9:d3:
be:c7:fc:5c:b7:04:b0:06:a8:6b:14:24:c1:53:36:
7e:eb:10:05:d1:08:ac:3b:9d:10:53:ac:bd:cb:02:
12:a6:8b:a1:08:87:95:1a:43:36:14:47:3f:57:78:
d1:9a:2a:0e:52:33:42:a8:e4:94:f6:6a:28:1d:7d:
c1:16:ae:bc:05:5c:6d:cf:db:38:f1:e4:74:06:f2:
e0:5c:ff:ec:64:f5:32:8b:d6:57:2d:9b:d7:3c:7c:
e0:c5:e1:ae:1c:6e:94:2c:46:7a:13:4e:c8:4c:de:
31:64:03:4b:01:e3:88:f0:1c:ef:b7:45:9b:34:3d:
76:28:72:8d:48:e6:0f:04:4c:6d:c5:36:f1:ba:69:
12:93:90:08:62:e8:00:87:fe:93:47:da:fb:34:f0:
1b:f4:2c:55:f9:8b:a0:e0:0b:f7:79:37:d5:22:0e:
12:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:64:D4:37:2B:38:B0:32:DE:A8:76:B0:AE:BE:C1:1D:26:08:72:A6
X509v3 Authority Key Identifier:
keyid:B0:2A:A9:61:B4:77:D5:42:3D:85:B7:D4:3F:3E:FA:26:32:6D:70:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCqpYbR31UI9hbfUPz76JjJtcJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/7WTUNys4sDLeqHawrr7BHSYIcqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.87.242.0/23
212.87.249.0/24
Signature Algorithm: sha256WithRSAEncryption
45:1e:2e:f3:12:44:5c:73:ca:de:d0:49:f2:c5:7b:49:7b:29:
d9:dd:33:00:97:91:14:b6:29:6f:38:54:29:e6:a2:dd:44:a0:
d0:3e:04:51:f5:25:10:a7:03:39:b3:76:77:0a:0f:ef:56:ec:
94:c5:94:8e:5d:e8:5f:3b:ee:f3:44:5c:74:58:7c:91:19:57:
08:e9:4e:8b:0b:b9:a2:e1:39:be:1c:42:95:49:b3:6c:ac:dd:
29:36:ff:a0:b9:d5:b2:f6:75:59:4c:b2:95:7a:b6:b9:78:8f:
9b:f4:78:8a:a5:78:b1:4b:f5:56:a9:74:87:4b:2a:e1:8f:1a:
36:4a:9d:1c:4a:11:8e:f5:b1:76:8b:e9:d7:0e:f8:49:d6:7c:
ce:75:48:d5:35:9e:c2:a2:59:c6:f7:aa:46:1d:81:82:f6:ac:
0d:4e:46:f9:9a:ac:45:89:47:af:93:a8:81:6f:7a:b1:5e:1f:
53:6f:c2:3c:05:a5:ef:61:ed:10:16:dc:c0:87:dc:cf:c4:cb:
44:fa:c2:c5:04:e3:f6:7a:c6:10:58:7f:55:b8:49:42:10:23:
27:ba:7e:ac:2d:2b:ac:81:43:4d:67:fd:67:a8:73:ae:c6:b8:
be:65:39:96:03:50:3e:a1:7a:8c:07:e9:de:d3:b2:7f:c9:49:
9e:22:77:98
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIECE/QbzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
MDJhYTk2MWI0NzdkNTQyM2Q4NWI3ZDQzZjNlZmEyNjMyNmQ3MDkwMB4XDTIyMDEw
MTEzMDY0MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZWQ2NGQ0MzcyYjM4
YjAzMmRlYTg3NmIwYWViZWMxMWQyNjA4NzJhNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKfxu/n5bHL5KmBCRFr3vgCrSxO7dJaCBWW1vmd27e/vruT5
CpX9F1EVraI0SgDpoxdFVKq0CK54CD+8Ij4Q41lBLClXzLNH4NjwhNm9COOhXd2X
8dQxMcnTvsf8XLcEsAaoaxQkwVM2fusQBdEIrDudEFOsvcsCEqaLoQiHlRpDNhRH
P1d40ZoqDlIzQqjklPZqKB19wRauvAVcbc/bOPHkdAby4Fz/7GT1MovWVy2b1zx8
4MXhrhxulCxGehNOyEzeMWQDSwHjiPAc77dFmzQ9dihyjUjmDwRMbcU28bppEpOQ
CGLoAIf+k0fa+zTwG/QsVfmLoOAL93k31SIOEiECAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBTtZNQ3KziwMt6odrCuvsEdJghypjAfBgNVHSMEGDAWgBSwKqlhtHfVQj2F
t9Q/PvomMm1wkDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3NDcXBZYlIzMVVJOWhiZlVQejc2SmpKdGNKQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzgvMDE0ODRjLTVmMjgtNDJmNS1iOWVhLTA3ODdhNTAzY2E2OS8x
LzdXVFVOeXM0c0RMZXFIYXdycjdCSFNZSWNxWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzgv
MDE0ODRjLTVmMjgtNDJmNS1iOWVhLTA3ODdhNTAzY2E2OS8xL3NDcXBZYlIzMVVJ
OWhiZlVQejc2SmpKdGNKQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAdRX8gMEANRX+TANBgkqhkiG9w0B
AQsFAAOCAQEARR4u8xJEXHPK3tBJ8sV7SXsp2d0zAJeRFLYpbzhUKeai3USg0D4E
UfUlEKcDObN2dwoP71bslMWUjl3oXzvu80RcdFh8kRlXCOlOiwu5ouE5vhxClUmz
bKzdKTb/oLnVsvZ1WUyylXq2uXiPm/R4iqV4sUv1Vql0h0sq4Y8aNkqdHEoRjvWx
dovp1w74SdZ8znVI1TWewqJZxveqRh2BgvasDU5G+ZqsRYlHr5OogW96sV4fU2/C
PAWl72HtEBbcwIfcz8TLRPrCxQTj9nrGEFh/VbhJQhAjJ7p+rC0rrIFDTWf9Z6hz
rsa4vmU5lgNQPqF6jAfp3tOyf8lJniJ3mA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:23 2023 by rpki-client on console-ams.rpki-client.org