Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/cNacXsr2NT-UDsa2oYSbrTbpaQk.roa
File: cNacXsr2NT-UDsa2oYSbrTbpaQk.roa (raw, json)
Hash identifier: UP9r0uVMHhQwnLlO0N1JrsBQFgVlZax+6X33jklheZA=
Subject key identifier: 70:D6:9C:5E:CA:F6:35:3F:94:0E:C6:B6:A1:84:9B:AD:36:E9:69:09
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 1CE27856
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/cNacXsr2NT-UDsa2oYSbrTbpaQk.roa
Signing time: Mon 21 Feb 2022 15:08:05 +0000
ROA not before: Mon 21 Feb 2022 15:08:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12687
IP address blocks: 212.111.206.0/24 maxlen: 24
212.111.205.0/24 maxlen: 24
212.111.201.0/24 maxlen: 24
212.111.213.0/24 maxlen: 24
212.111.212.0/23 maxlen: 23
212.111.208.0/22 maxlen: 22
212.111.192.0/19 maxlen: 24
212.111.192.0/20 maxlen: 24
212.111.199.0/24 maxlen: 24
212.111.198.0/24 maxlen: 24
2a01:5c40::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 484603990 (0x1ce27856)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Feb 21 15:08:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=70d69c5ecaf6353f940ec6b6a1849bad36e96909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:00:65:ac:96:99:09:3a:6e:52:5c:fb:4e:ef:
fe:08:f7:f0:99:5a:36:57:57:f4:2a:9b:92:4d:cb:
36:1d:3d:e6:1a:84:78:06:16:3b:6e:64:64:01:50:
e4:dc:d8:02:d2:57:61:e8:48:ea:7b:60:78:0b:3b:
d7:7c:e6:4e:f9:1e:80:9f:e6:f2:2f:24:52:d9:e8:
87:01:10:a4:ed:17:2d:3f:38:cb:d0:d8:c1:5b:eb:
4b:8e:8b:1e:60:3d:ab:3a:99:a6:6d:34:34:c6:a3:
b4:9b:29:cd:6c:86:f3:9f:f4:84:d4:fc:38:60:d7:
3d:16:9e:0d:e5:3c:ef:aa:1b:3d:73:24:40:1d:fd:
e1:1a:d1:9a:58:15:a3:b2:ea:4f:76:dc:cf:0d:98:
9a:54:22:f5:b0:b8:32:17:08:53:08:73:89:79:cf:
2e:e3:a8:ad:59:fa:c6:03:00:05:b6:cb:06:eb:35:
db:73:c4:58:21:a3:d5:3c:f1:21:a0:6e:fc:dd:cf:
15:04:da:41:46:17:df:dd:52:c0:26:e1:f6:bc:13:
fe:fa:7a:b8:77:aa:c4:bf:3f:56:66:91:01:6f:ec:
82:c9:8d:1a:69:da:03:b4:dc:57:81:08:13:80:09:
ce:ba:e3:e1:23:36:61:00:db:00:b3:6f:b1:29:da:
e9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:D6:9C:5E:CA:F6:35:3F:94:0E:C6:B6:A1:84:9B:AD:36:E9:69:09
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/cNacXsr2NT-UDsa2oYSbrTbpaQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.111.192.0/19
IPv6:
2a01:5c40::/32
Signature Algorithm: sha256WithRSAEncryption
77:e5:35:09:e9:72:25:d5:e4:c9:47:53:cf:e6:9a:dc:37:00:
da:a7:d1:f7:f3:26:2f:d7:1b:13:fb:79:44:61:65:ed:ac:c3:
88:de:b4:1c:c2:0b:1a:89:91:3c:71:f1:13:3a:24:d2:b0:ab:
4d:61:f1:59:b8:52:61:98:84:ef:aa:34:c5:49:aa:cf:e7:d4:
e6:14:8e:d9:c8:8a:61:bf:e3:b3:0b:db:7c:8a:d0:3a:b0:23:
0b:49:fd:44:c0:bc:0a:1a:d9:28:4f:91:24:3f:ad:0e:bf:07:
f2:6b:02:9b:91:07:3c:c9:18:8b:98:96:d3:10:34:9a:0a:29:
fa:c5:f7:c9:25:d5:bd:f7:69:e7:cf:3f:b1:66:6e:7b:f3:94:
83:9c:a2:5a:fb:d9:6a:dd:f2:70:bb:4b:7f:0a:dc:4c:b9:99:
ac:fc:02:27:2b:63:c7:66:0a:1d:79:97:bf:24:b1:d0:e1:dd:
5d:8e:5f:44:9c:d6:41:1d:c2:8c:4e:b2:87:4f:e7:32:62:2b:
79:c9:56:71:ae:d9:c8:da:5a:5f:64:2e:e1:2a:6e:a5:d5:74:
1c:2a:f0:9b:e9:4b:db:00:f1:b7:fe:bf:74:42:51:44:fa:cd:
56:07:c9:be:84:07:1f:e2:77:2c:94:ae:83:25:5d:15:e5:7c:
fb:bf:6a:a9
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEHOJ4VjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
OTQyNjMyNWFjYjhjZTYwOWE2ODZmYTY1NWIwNTg5Njg4MDliMzQ2MB4XDTIyMDIy
MTE1MDgwNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzBkNjljNWVjYWY2
MzUzZjk0MGVjNmI2YTE4NDliYWQzNmU5NjkwOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKUAZayWmQk6blJc+07v/gj38JlaNldX9Cqbkk3LNh095hqE
eAYWO25kZAFQ5NzYAtJXYehI6ntgeAs713zmTvkegJ/m8i8kUtnohwEQpO0XLT84
y9DYwVvrS46LHmA9qzqZpm00NMajtJspzWyG85/0hNT8OGDXPRaeDeU876obPXMk
QB394RrRmlgVo7LqT3bczw2YmlQi9bC4MhcIUwhziXnPLuOorVn6xgMABbbLBus1
23PEWCGj1TzxIaBu/N3PFQTaQUYX391SwCbh9rwT/vp6uHeqxL8/VmaRAW/sgsmN
GmnaA7TcV4EIE4AJzrrj4SM2YQDbALNvsSna6WECAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBRw1pxeyvY1P5QOxrahhJutNulpCTAfBgNVHSMEGDAWgBQZQmMlrLjOYJpo
b6ZVsFiWiAmzRjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0dVSmpKYXk0em1DYWFHLW1WYkJZbG9nSnMwWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTEvOGI2ZmIwLWE4NzUtNDk0Ny04YWU0LTAzZjRjNzExM2MzNC8x
L2NOYWNYc3IyTlQtVURzYTJvWVNiclRicGFRay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTEv
OGI2ZmIwLWE4NzUtNDk0Ny04YWU0LTAzZjRjNzExM2MzNC8xL0dVSmpKYXk0em1D
YWFHLW1WYkJZbG9nSnMwWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEBdRvwDANBAIAAjAHAwUAKgFcQDAN
BgkqhkiG9w0BAQsFAAOCAQEAd+U1CelyJdXkyUdTz+aa3DcA2qfR9/MmL9cbE/t5
RGFl7azDiN60HMILGomRPHHxEzok0rCrTWHxWbhSYZiE76o0xUmqz+fU5hSO2ciK
Yb/jswvbfIrQOrAjC0n9RMC8ChrZKE+RJD+tDr8H8msCm5EHPMkYi5iW0xA0mgop
+sX3ySXVvfdp588/sWZue/OUg5yiWvvZat3ycLtLfwrcTLmZrPwCJytjx2YKHXmX
vySx0OHdXY5fRJzWQR3CjE6yh0/nMmIreclWca7ZyNpaX2Qu4SpupdV0HCrwm+lL
2wDxt/6/dEJRRPrNVgfJvoQHH+J3LJSugyVdFeV8+79qqQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:42 2024 by rpki-client on console-fra.rpki-client.org