Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/15wbSAF26_sGHpUtcvlOV6zCkII.roa
File: 15wbSAF26_sGHpUtcvlOV6zCkII.roa (raw, json)
Hash identifier: Ar+V9GbhVyrvGDlxb9sK+3v3GdhhJVnYfEmDeiaw0Wc=
Subject key identifier: D7:9C:1B:48:01:76:EB:FB:06:1E:95:2D:72:F9:4E:57:AC:C2:90:82
Certificate issuer: /CN=a92dc7bdbc9d097336de6243b550ab173375ea39
Certificate serial: 96A231
Authority key identifier: A9:2D:C7:BD:BC:9D:09:73:36:DE:62:43:B5:50:AB:17:33:75:EA:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qS3HvbydCXM23mJDtVCrFzN16jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/15wbSAF26_sGHpUtcvlOV6zCkII.roa
Signing time: Wed 08 Jun 2022 07:22:03 +0000
ROA not before: Wed 08 Jun 2022 07:22:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212632
IP address blocks: 212.39.32.0/24 maxlen: 24
212.39.32.0/22 maxlen: 22
212.39.32.0/21 maxlen: 21
212.39.34.0/24 maxlen: 24
212.39.63.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9871921 (0x96a231)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a92dc7bdbc9d097336de6243b550ab173375ea39
Validity
Not Before: Jun 8 07:22:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d79c1b480176ebfb061e952d72f94e57acc29082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:50:c7:b0:88:bd:e0:b0:77:e2:8a:8e:1b:52:
32:48:e1:34:5f:89:a7:ab:a1:5a:34:fe:12:37:a0:
03:08:60:c9:ff:42:8f:01:c4:0a:bf:ec:14:83:f6:
aa:9b:b9:64:e3:bc:47:49:de:68:1a:26:6f:a1:43:
fd:96:6a:b2:80:d4:4e:25:3a:37:cf:1f:7a:d1:f0:
fe:40:e6:f1:f9:58:ee:9d:8f:f7:de:cc:3b:ae:ce:
57:4f:3c:67:a6:fb:db:38:5f:2b:a7:73:7b:a8:e3:
03:f8:33:ac:76:07:39:0f:74:6c:20:30:1a:d2:93:
00:5b:4b:ef:38:66:5b:a8:af:29:d9:5f:7a:d8:90:
60:ab:fe:ed:19:16:25:7d:8a:57:bd:73:4f:75:82:
36:da:68:9b:ec:ee:be:21:e5:3f:cd:e5:8c:87:c1:
32:2c:36:74:3e:13:ad:c0:64:e2:21:8c:29:50:3d:
d3:25:fe:cf:d9:e7:fa:67:35:e8:96:43:d8:b4:e2:
68:4d:93:6e:a6:d4:0a:da:ca:03:d1:80:2b:bb:9e:
9d:35:f0:7a:ea:e1:ad:9d:e8:75:f2:2a:d0:19:04:
8a:4e:b6:c5:f1:51:6d:69:2b:76:23:0c:2b:53:ed:
6a:8b:c4:5e:64:1f:a0:ec:a7:35:ef:ff:ff:8c:3a:
96:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:9C:1B:48:01:76:EB:FB:06:1E:95:2D:72:F9:4E:57:AC:C2:90:82
X509v3 Authority Key Identifier:
keyid:A9:2D:C7:BD:BC:9D:09:73:36:DE:62:43:B5:50:AB:17:33:75:EA:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qS3HvbydCXM23mJDtVCrFzN16jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/15wbSAF26_sGHpUtcvlOV6zCkII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/qS3HvbydCXM23mJDtVCrFzN16jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.39.32.0/21
212.39.63.0/24
Signature Algorithm: sha256WithRSAEncryption
05:2e:d8:3b:7e:ca:9d:39:db:41:4f:b5:2d:7b:d1:00:65:b4:
41:a3:4d:36:ec:76:14:52:60:b3:67:d2:99:fb:91:2e:d3:ef:
f2:45:9a:38:b3:46:08:4a:67:dc:fc:e7:d0:63:0a:ee:d8:c9:
fb:a1:a9:95:b9:37:ce:6b:f3:13:ba:f0:71:9f:a3:2d:2b:18:
70:fe:65:2a:00:28:69:ab:7f:19:5a:e5:26:6d:01:a7:c5:06:
40:8d:cf:84:e1:fc:dc:e2:d0:4d:88:5e:16:e5:9b:b1:f7:73:
5c:77:76:13:b2:8d:44:62:bd:fe:fb:65:05:f2:eb:35:5b:31:
e7:d0:b4:4b:8a:c6:72:f6:f8:ac:32:32:ce:aa:90:1a:38:0e:
5b:2f:8c:f3:fd:bb:91:be:c5:11:27:d5:ef:09:d5:e5:f0:00:
49:f2:25:33:06:7d:d2:0c:45:32:14:67:0b:cb:a2:09:16:b8:
04:26:93:b4:c3:44:33:cc:8a:dd:ab:91:51:af:48:07:87:bb:
d9:e3:2f:87:ed:86:ed:71:06:1c:52:3c:8e:66:2e:2c:e0:c4:
b5:07:36:7a:9d:a9:dc:6a:7d:e9:9c:d5:26:11:c3:6a:eb:e4:
6a:29:85:35:96:9f:4b:bf:cd:be:29:9e:d3:9e:82:4b:80:71:
df:21:86:64
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEAJaiMTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
OTJkYzdiZGJjOWQwOTczMzZkZTYyNDNiNTUwYWIxNzMzNzVlYTM5MB4XDTIyMDYw
ODA3MjIwM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDc5YzFiNDgwMTc2
ZWJmYjA2MWU5NTJkNzJmOTRlNTdhY2MyOTA4MjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMlQx7CIveCwd+KKjhtSMkjhNF+Jp6uhWjT+EjegAwhgyf9C
jwHECr/sFIP2qpu5ZOO8R0neaBomb6FD/ZZqsoDUTiU6N88fetHw/kDm8flY7p2P
997MO67OV088Z6b72zhfK6dze6jjA/gzrHYHOQ90bCAwGtKTAFtL7zhmW6ivKdlf
etiQYKv+7RkWJX2KV71zT3WCNtpom+zuviHlP83ljIfBMiw2dD4TrcBk4iGMKVA9
0yX+z9nn+mc16JZD2LTiaE2TbqbUCtrKA9GAK7uenTXweurhrZ3odfIq0BkEik62
xfFRbWkrdiMMK1PtaovEXmQfoOynNe///4w6lkMCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBTXnBtIAXbr+wYelS1y+U5XrMKQgjAfBgNVHSMEGDAWgBSpLce9vJ0Jczbe
YkO1UKsXM3XqOTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3FTM0h2YnlkQ1hNMjNtSkR0VkNyRnpOMTZqay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzQvMGI0NjI5LTM5Y2MtNGU2Yy05ZTFjLTk5MWI3YWVlNzQ2Yy8x
LzE1d2JTQUYyNl9zR0hwVXRjdmxPVjZ6Q2tJSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzQv
MGI0NjI5LTM5Y2MtNGU2Yy05ZTFjLTk5MWI3YWVlNzQ2Yy8xL3FTM0h2YnlkQ1hN
MjNtSkR0VkNyRnpOMTZqay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEA9QnIAMEANQnPzANBgkqhkiG9w0B
AQsFAAOCAQEABS7YO37KnTnbQU+1LXvRAGW0QaNNNux2FFJgs2fSmfuRLtPv8kWa
OLNGCEpn3Pzn0GMK7tjJ+6Gplbk3zmvzE7rwcZ+jLSsYcP5lKgAoaat/GVrlJm0B
p8UGQI3PhOH83OLQTYheFuWbsfdzXHd2E7KNRGK9/vtlBfLrNVsx59C0S4rGcvb4
rDIyzqqQGjgOWy+M8/27kb7FESfV7wnV5fAASfIlMwZ90gxFMhRnC8uiCRa4BCaT
tMNEM8yK3auRUa9IB4e72eMvh+2G7XEGHFI8jmYuLODEtQc2ep2p3Gp96ZzVJhHD
auvkaimFNZafS7/Nvime056CS4Bx3yGGZA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:00 2024 by rpki-client on console-ams.rpki-client.org