Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/2h9x04HABf3mEdrhDtkJk9mdp94.roa
File: 2h9x04HABf3mEdrhDtkJk9mdp94.roa (raw, json)
Hash identifier: p+K22U1gmHo5S3KXLONyHDi9ZkpAxFM/QCksNxAxJPE=
Subject key identifier: DA:1F:71:D3:81:C0:05:FD:E6:11:DA:E1:0E:D9:09:93:D9:9D:A7:DE
Certificate issuer: /CN=a92dc7bdbc9d097336de6243b550ab173375ea39
Certificate serial: A4A405
Authority key identifier: A9:2D:C7:BD:BC:9D:09:73:36:DE:62:43:B5:50:AB:17:33:75:EA:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qS3HvbydCXM23mJDtVCrFzN16jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/2h9x04HABf3mEdrhDtkJk9mdp94.roa
Signing time: Tue 14 Jun 2022 14:01:44 +0000
ROA not before: Tue 14 Jun 2022 14:01:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3301
IP address blocks: 212.39.36.0/24 maxlen: 24
212.39.35.0/24 maxlen: 24
212.39.37.0/24 maxlen: 24
212.39.32.0/24 maxlen: 24
212.39.38.0/24 maxlen: 24
212.39.34.0/24 maxlen: 24
212.39.39.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10789893 (0xa4a405)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a92dc7bdbc9d097336de6243b550ab173375ea39
Validity
Not Before: Jun 14 14:01:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=da1f71d381c005fde611dae10ed90993d99da7de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:71:02:00:25:4e:2b:f3:3c:98:cc:d2:34:9e:
30:8e:d4:8f:27:b0:40:24:06:2d:53:89:61:af:31:
70:b7:c5:d3:e1:37:60:14:96:1b:1a:6a:cc:8d:ee:
b1:66:68:66:4e:21:35:bc:53:9a:96:19:53:3b:aa:
77:a8:5e:b5:07:4d:00:06:9e:99:c2:94:2c:6c:3f:
31:c3:04:c5:8a:8a:e3:af:3b:66:88:4e:2f:ad:ae:
ea:c1:a1:bf:f9:1f:78:ed:56:64:f0:74:a5:ad:ff:
f1:8b:5d:0d:e6:e4:9d:98:db:78:19:85:f5:57:41:
d7:5b:93:f1:b1:29:b9:7c:e1:f7:aa:ae:fb:21:8a:
b9:f3:d1:69:5d:9c:aa:fc:51:b6:4c:d1:a1:1b:3b:
19:51:d3:b4:02:93:6d:d5:6f:a8:b4:65:f8:43:ad:
e9:ac:2e:e6:76:bb:61:40:68:3d:81:00:bc:bb:9e:
13:0e:7d:07:3a:9c:50:09:99:24:b8:f1:68:94:39:
56:53:bb:3e:3e:aa:11:30:ea:94:5c:50:d9:fa:b5:
64:0c:d9:ee:ae:64:3c:8b:be:99:7d:d8:17:46:06:
0e:56:cd:46:30:39:d2:01:7b:f9:31:8c:ec:9f:cc:
56:84:9e:85:cf:2c:aa:5c:96:bc:4b:26:0d:fc:f8:
84:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:1F:71:D3:81:C0:05:FD:E6:11:DA:E1:0E:D9:09:93:D9:9D:A7:DE
X509v3 Authority Key Identifier:
keyid:A9:2D:C7:BD:BC:9D:09:73:36:DE:62:43:B5:50:AB:17:33:75:EA:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qS3HvbydCXM23mJDtVCrFzN16jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/2h9x04HABf3mEdrhDtkJk9mdp94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/qS3HvbydCXM23mJDtVCrFzN16jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.39.32.0/24
212.39.34.0-212.39.39.255
Signature Algorithm: sha256WithRSAEncryption
89:2c:3c:17:40:c2:9f:b4:94:25:a9:2a:52:f7:ba:1b:42:61:
2d:bc:53:e9:d1:da:28:5b:cd:38:06:26:33:da:e7:a4:ae:48:
c8:bd:99:6d:c9:6b:79:1c:10:e0:f4:ed:a4:f8:ab:65:2a:4f:
a1:36:b0:3b:79:5f:8d:05:76:63:1d:25:9d:4f:c2:1a:0f:ad:
c3:06:05:ae:fd:89:37:ce:09:3c:d5:7c:af:79:f4:bd:58:2d:
8d:a6:92:8a:0a:19:e8:aa:41:7d:82:97:9d:9f:d4:97:56:80:
32:6c:96:12:3d:b7:2c:db:1c:05:93:de:44:25:1d:af:41:47:
3b:6c:65:07:8a:40:20:e8:42:dd:52:ab:4b:4a:cd:41:23:54:
66:e0:4c:86:bb:53:22:1a:ab:d0:9d:03:30:a5:e9:cd:a5:c6:
81:ef:28:b3:ab:b5:c6:5b:a3:73:38:12:64:47:8b:7a:73:bf:
c5:dd:c8:31:b2:2f:78:91:d2:3c:eb:fd:0a:6e:47:b0:99:bc:
86:0d:0c:8f:eb:9b:5b:5a:a0:1e:43:fb:5f:fe:b2:db:be:64:
5c:1a:a0:59:aa:6e:36:c3:f9:07:07:e7:96:53:aa:16:3b:3e:
14:b1:23:1f:77:f1:81:56:ca:9f:48:34:82:b8:f5:4f:91:cf:
9e:dc:50:21
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgIEAKSkBTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
OTJkYzdiZGJjOWQwOTczMzZkZTYyNDNiNTUwYWIxNzMzNzVlYTM5MB4XDTIyMDYx
NDE0MDE0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZGExZjcxZDM4MWMw
MDVmZGU2MTFkYWUxMGVkOTA5OTNkOTlkYTdkZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALNxAgAlTivzPJjM0jSeMI7UjyewQCQGLVOJYa8xcLfF0+E3
YBSWGxpqzI3usWZoZk4hNbxTmpYZUzuqd6hetQdNAAaemcKULGw/McMExYqK4687
ZohOL62u6sGhv/kfeO1WZPB0pa3/8YtdDebknZjbeBmF9VdB11uT8bEpuXzh96qu
+yGKufPRaV2cqvxRtkzRoRs7GVHTtAKTbdVvqLRl+EOt6awu5na7YUBoPYEAvLue
Ew59BzqcUAmZJLjxaJQ5VlO7Pj6qETDqlFxQ2fq1ZAzZ7q5kPIu+mX3YF0YGDlbN
RjA50gF7+TGM7J/MVoSehc8sqlyWvEsmDfz4hC8CAwEAAaOCAhcwggITMB0GA1Ud
DgQWBBTaH3HTgcAF/eYR2uEO2QmT2Z2n3jAfBgNVHSMEGDAWgBSpLce9vJ0Jczbe
YkO1UKsXM3XqOTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3FTM0h2YnlkQ1hNMjNtSkR0VkNyRnpOMTZqay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzQvMGI0NjI5LTM5Y2MtNGU2Yy05ZTFjLTk5MWI3YWVlNzQ2Yy8x
LzJoOXgwNEhBQmYzbUVkcmhEdGtKazltZHA5NC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzQv
MGI0NjI5LTM5Y2MtNGU2Yy05ZTFjLTk5MWI3YWVlNzQ2Yy8xL3FTM0h2YnlkQ1hN
MjNtSkR0VkNyRnpOMTZqay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAt
BggrBgEFBQcBBwEB/wQeMBwwGgQCAAEwFAMEANQnIDAMAwQB1CciAwQD1CcgMA0G
CSqGSIb3DQEBCwUAA4IBAQCJLDwXQMKftJQlqSpS97obQmEtvFPp0dooW804BiYz
2uekrkjIvZltyWt5HBDg9O2k+KtlKk+hNrA7eV+NBXZjHSWdT8IaD63DBgWu/Yk3
zgk81XyvefS9WC2NppKKChnoqkF9gpedn9SXVoAybJYSPbcs2xwFk95EJR2vQUc7
bGUHikAg6ELdUqtLSs1BI1Rm4EyGu1MiGqvQnQMwpenNpcaB7yizq7XGW6NzOBJk
R4t6c7/F3cgxsi94kdI86/0KbkewmbyGDQyP65tbWqAeQ/tf/rLbvmRcGqBZqm42
w/kHB+eWU6oWOz4UsSMfd/GBVsqfSDSCuPVPkc+e3FAh
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:00 2024 by rpki-client on console-ams.rpki-client.org