Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/dhhCAVmhy3Tx6uIEtWaqbDQYIuk.roa
File: dhhCAVmhy3Tx6uIEtWaqbDQYIuk.roa (raw, json)
Hash identifier: GUyMbaD8RlsIZNBSmycTqGnZ8F4D/+6BQLtGgoYm5MI=
Subject key identifier: 76:18:42:01:59:A1:CB:74:F1:EA:E2:04:B5:66:AA:6C:34:18:22:E9
Certificate issuer: /CN=a92dc7bdbc9d097336de6243b550ab173375ea39
Certificate serial: 0182C98E3C27A5D9F4E01B439D72A313A81A
Authority key identifier: A9:2D:C7:BD:BC:9D:09:73:36:DE:62:43:B5:50:AB:17:33:75:EA:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qS3HvbydCXM23mJDtVCrFzN16jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/dhhCAVmhy3Tx6uIEtWaqbDQYIuk.roa
Signing time: Tue 23 Aug 2022 07:15:18 +0000
ROA not before: Tue 23 Aug 2022 07:15:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1299
IP address blocks: 212.39.32.0/24 maxlen: 24
212.39.34.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c9:8e:3c:27:a5:d9:f4:e0:1b:43:9d:72:a3:13:a8:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a92dc7bdbc9d097336de6243b550ab173375ea39
Validity
Not Before: Aug 23 07:15:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7618420159a1cb74f1eae204b566aa6c341822e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fd:08:f7:60:d4:1c:20:6f:11:27:33:22:8a:
2d:77:65:5f:81:ac:86:c7:c5:b6:75:80:88:ce:55:
30:56:3f:59:94:db:a4:54:98:8e:7e:b3:7e:2d:b4:
fe:c2:d6:23:fc:3d:9f:ca:6b:88:07:3f:1f:5f:8a:
e3:90:c6:80:fb:84:20:f2:ab:1c:8f:d9:7b:73:42:
63:2b:e1:81:e9:0d:ee:72:28:34:0f:49:cd:85:19:
df:c5:f0:39:0c:0b:ca:67:75:88:1e:46:84:0c:81:
cf:ff:47:92:4d:d0:e8:fd:4d:eb:09:f1:c5:6f:f1:
d5:16:92:ab:cd:17:b4:6f:1d:96:f2:5e:b5:c4:33:
94:12:04:74:41:9a:1c:ac:a7:98:43:cd:9e:01:fb:
a0:16:08:de:2b:5d:71:51:04:79:31:f1:20:d6:ca:
91:d0:e3:27:80:87:ca:53:4b:ad:b2:c4:9c:79:2e:
36:0b:f5:f3:63:12:69:56:20:4e:27:87:32:fd:d7:
4d:43:04:60:4f:6d:de:1d:00:16:90:8b:29:33:4c:
c0:13:95:74:4b:39:cd:fd:4d:39:00:2b:01:d8:a7:
0b:26:26:ef:b4:91:27:e5:6a:72:ca:a8:bb:17:6b:
10:41:0a:10:06:28:52:be:66:4a:1d:23:a9:11:0c:
69:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:18:42:01:59:A1:CB:74:F1:EA:E2:04:B5:66:AA:6C:34:18:22:E9
X509v3 Authority Key Identifier:
keyid:A9:2D:C7:BD:BC:9D:09:73:36:DE:62:43:B5:50:AB:17:33:75:EA:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qS3HvbydCXM23mJDtVCrFzN16jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/dhhCAVmhy3Tx6uIEtWaqbDQYIuk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/qS3HvbydCXM23mJDtVCrFzN16jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.39.32.0/24
212.39.34.0/24
Signature Algorithm: sha256WithRSAEncryption
70:b9:bd:e1:2e:33:13:92:41:14:f0:6d:fb:3e:22:37:86:f5:
e3:67:ba:f4:90:01:fd:de:ef:f4:2b:49:1f:f8:67:cc:32:3f:
74:c2:de:73:ba:98:62:f3:bd:f7:b9:7a:dc:6b:ff:3f:07:4a:
81:2c:93:3b:c5:79:32:66:92:b0:b8:73:41:d8:5b:71:32:94:
19:04:91:3f:11:fa:87:eb:ee:47:11:73:30:17:18:97:98:ad:
2a:0d:99:2a:d2:22:75:a8:40:8c:b7:c2:88:da:b1:a2:ff:f8:
c5:ff:df:e1:d1:e4:bb:58:10:31:59:84:b9:5f:e2:a0:62:de:
dc:9f:05:d0:7f:a4:52:e7:23:a2:a1:7b:51:b6:a3:fa:34:fa:
8a:a9:fc:dd:0d:43:e7:19:69:be:c6:dd:a3:c9:94:15:a5:cc:
37:85:2f:06:70:b3:ad:87:75:94:80:7c:9a:7f:71:4c:f6:9a:
97:80:db:77:eb:d1:59:67:cd:a6:34:53:55:cc:f5:bb:1b:88:
db:af:3f:2f:cd:9c:d4:b8:9c:34:5d:ca:16:5a:77:5c:d2:f5:
71:79:49:6f:6c:2e:6c:57:3f:dd:c8:f2:26:be:76:63:ec:20:
d7:22:5c:a0:ee:ef:d7:8c:d1:32:fa:76:7c:4a:b8:d9:66:cd:
3a:6d:11:56
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYLJjjwnpdn04BtDnXKjE6gaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5MmRjN2JkYmM5ZDA5NzMzNmRlNjI0M2I1NTBhYjE3MzM3
NWVhMzkwHhcNMjIwODIzMDcxNTE4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NjE4NDIwMTU5YTFjYjc0ZjFlYWUyMDRiNTY2YWE2YzM0MTgyMmU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnP0I92DUHCBvESczIootd2VfgayG
x8W2dYCIzlUwVj9ZlNukVJiOfrN+LbT+wtYj/D2fymuIBz8fX4rjkMaA+4Qg8qsc
j9l7c0JjK+GB6Q3ucig0D0nNhRnfxfA5DAvKZ3WIHkaEDIHP/0eSTdDo/U3rCfHF
b/HVFpKrzRe0bx2W8l61xDOUEgR0QZocrKeYQ82eAfugFgjeK11xUQR5MfEg1sqR
0OMngIfKU0utssSceS42C/XzYxJpViBOJ4cy/ddNQwRgT23eHQAWkIspM0zAE5V0
SznN/U05ACsB2KcLJibvtJEn5Wpyyqi7F2sQQQoQBihSvmZKHSOpEQxpEwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHYYQgFZoct08eriBLVmqmw0GCLpMB8GA1UdIwQY
MBaAFKktx728nQlzNt5iQ7VQqxczdeo5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVMzSHZieWRDWE0yM21KRHRWQ3JGek4xNmprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8wYjQ2MjktMzljYy00ZTZjLTllMWMt
OTkxYjdhZWU3NDZjLzEvZGhoQ0FWbWh5M1R4NnVJRXRXYXFiRFFZSXVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC8wYjQ2MjktMzljYy00ZTZjLTllMWMtOTkxYjdhZWU3NDZj
LzEvcVMzSHZieWRDWE0yM21KRHRWQ3JGek4xNmprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1CcgAwQA
1CciMA0GCSqGSIb3DQEBCwUAA4IBAQBwub3hLjMTkkEU8G37PiI3hvXjZ7r0kAH9
3u/0K0kf+GfMMj90wt5zuphi8733uXrca/8/B0qBLJM7xXkyZpKwuHNB2FtxMpQZ
BJE/EfqH6+5HEXMwFxiXmK0qDZkq0iJ1qECMt8KI2rGi//jF/9/h0eS7WBAxWYS5
X+KgYt7cnwXQf6RS5yOioXtRtqP6NPqKqfzdDUPnGWm+xt2jyZQVpcw3hS8GcLOt
h3WUgHyaf3FM9pqXgNt369FZZ82mNFNVzPW7G4jbrz8vzZzUuJw0XcoWWndc0vVx
eUlvbC5sVz/dyPImvnZj7CDXIlyg7u/XjNEy+nZ8SrjZZs06bRFW
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:03 2024 by rpki-client on console-fra.rpki-client.org