Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/m6I9l60k1eT07WvyZGvsCGyWddY.roa
File: m6I9l60k1eT07WvyZGvsCGyWddY.roa (raw, json)
Hash identifier: fk4u+Iu1UopjGLZRCT3XAggzlUP15UfJCnr82Z1DgxM=
Subject key identifier: 9B:A2:3D:97:AD:24:D5:E4:F4:ED:6B:F2:64:6B:EC:08:6C:96:75:D6
Certificate issuer: /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Certificate serial: 08EC742A
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/m6I9l60k1eT07WvyZGvsCGyWddY.roa
Signing time: Sat 01 Jan 2022 08:05:19 +0000
ROA not before: Sat 01 Jan 2022 08:05:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56856
IP address blocks: 212.21.139.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149713962 (0x8ec742a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Validity
Not Before: Jan 1 08:05:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9ba23d97ad24d5e4f4ed6bf2646bec086c9675d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7d:03:a4:b1:ab:ac:b3:64:66:17:9a:b2:0b:
08:c8:43:e5:a4:4a:a2:b5:a7:0d:35:78:ce:98:46:
2d:52:b1:6e:3e:f6:77:9e:15:ef:40:05:f0:97:7c:
bf:1a:ed:50:a1:c0:6e:26:a9:b7:1d:ff:f5:b0:c8:
40:46:c6:e6:fc:04:99:ba:51:a2:fa:5b:7e:e5:cd:
44:21:29:93:b8:e3:e1:0a:f9:8a:e2:a9:5a:ff:64:
99:e3:f6:4c:14:cc:d1:86:72:1e:5d:f4:fb:b7:90:
24:8c:56:fb:1a:de:1b:79:55:ee:ec:a3:d2:ed:34:
21:cd:51:a3:75:8b:36:69:0d:5a:af:2b:72:95:e4:
91:44:90:1f:eb:32:8c:a0:2f:56:c8:aa:dd:50:8d:
ad:0b:04:c1:e2:5e:42:42:c5:71:42:46:34:06:86:
34:75:6f:e0:66:37:f9:fc:d5:50:73:c7:ba:04:ac:
0c:d0:2c:be:e1:41:bd:f4:60:22:c1:76:7d:23:22:
2d:90:71:0e:b1:31:3b:93:0e:9f:8b:c3:f0:39:0b:
7b:dc:32:7f:63:89:13:ce:4a:39:a3:2a:da:8a:85:
11:bb:06:f9:3f:5b:ed:5c:68:7d:34:0f:e5:85:b8:
3a:8b:e9:f2:33:16:14:ac:aa:f7:0f:71:39:14:3a:
1d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:A2:3D:97:AD:24:D5:E4:F4:ED:6B:F2:64:6B:EC:08:6C:96:75:D6
X509v3 Authority Key Identifier:
keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/m6I9l60k1eT07WvyZGvsCGyWddY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.21.139.0/24
Signature Algorithm: sha256WithRSAEncryption
af:84:08:25:10:19:39:ec:45:45:47:34:a8:ec:57:6b:92:8b:
d4:bd:86:7c:0a:e1:43:97:c9:ac:d6:6b:9f:7b:ac:64:62:32:
72:11:6e:84:6d:25:e3:90:3a:93:60:f0:14:fd:20:23:ad:cb:
11:7a:3d:a9:b2:28:bd:7f:f4:8a:02:97:18:d9:4f:4e:e0:d0:
de:44:dd:2f:d9:10:88:33:4a:6e:bc:9b:e1:f2:33:50:72:88:
83:ac:ba:84:7d:74:61:be:d6:24:ab:0c:94:d0:df:b6:d8:65:
38:42:20:6e:c0:8c:1f:43:a6:6e:16:9b:fa:91:f5:3f:58:2a:
27:f9:5a:a5:e0:6c:75:3e:d7:be:b1:3f:1d:ce:71:f2:6a:54:
11:d7:03:fb:18:59:ce:c7:04:99:7b:83:eb:6d:ee:48:49:91:
c2:4b:79:e2:3b:cc:cc:86:2a:ee:43:0f:26:7c:90:eb:8e:9e:
f3:8d:36:a7:e1:26:63:00:eb:18:55:1c:6c:71:64:6c:08:36:
fc:9b:0f:5b:0d:26:e5:78:ae:81:5a:b6:15:19:fd:ef:b7:ca:
81:ab:28:ca:6a:8a:74:1e:e4:b1:37:87:04:82:a3:ba:bf:72:
ff:26:19:3f:9a:fb:8b:61:17:b7:8c:48:4d:c7:30:9f:b4:91:
2f:e1:8f:d9
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECOx0KjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
YmVjOTAzMGM3MGEzZDQxOTJkNTljMjhkY2M4ZDU0NzY5NDM0MGIzMB4XDTIyMDEw
MTA4MDUxOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOWJhMjNkOTdhZDI0
ZDVlNGY0ZWQ2YmYyNjQ2YmVjMDg2Yzk2NzVkNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANZ9A6Sxq6yzZGYXmrILCMhD5aRKorWnDTV4zphGLVKxbj72
d54V70AF8Jd8vxrtUKHAbiaptx3/9bDIQEbG5vwEmbpRovpbfuXNRCEpk7jj4Qr5
iuKpWv9kmeP2TBTM0YZyHl30+7eQJIxW+xreG3lV7uyj0u00Ic1Ro3WLNmkNWq8r
cpXkkUSQH+syjKAvVsiq3VCNrQsEweJeQkLFcUJGNAaGNHVv4GY3+fzVUHPHugSs
DNAsvuFBvfRgIsF2fSMiLZBxDrExO5MOn4vD8DkLe9wyf2OJE85KOaMq2oqFEbsG
+T9b7VxofTQP5YW4Oovp8jMWFKyq9w9xORQ6HaMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSboj2XrSTV5PTta/Jka+wIbJZ11jAfBgNVHSMEGDAWgBTr7JAwxwo9QZLV
nCjcyNVHaUNAszAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzYteVFNTWNLUFVHUzFad28zTWpWUjJsRFFMTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTUvMzcyYjg3LTk1ZjQtNGM5OC1hNmY0LTRhNmY4NjgzMjY1Yy8x
L202STlsNjBrMWVUMDdXdnlaR3ZzQ0d5V2RkWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTUv
MzcyYjg3LTk1ZjQtNGM5OC1hNmY0LTRhNmY4NjgzMjY1Yy8xLzYteVFNTWNLUFVH
UzFad28zTWpWUjJsRFFMTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANQVizANBgkqhkiG9w0BAQsFAAOC
AQEAr4QIJRAZOexFRUc0qOxXa5KL1L2GfArhQ5fJrNZrn3usZGIychFuhG0l45A6
k2DwFP0gI63LEXo9qbIovX/0igKXGNlPTuDQ3kTdL9kQiDNKbryb4fIzUHKIg6y6
hH10Yb7WJKsMlNDftthlOEIgbsCMH0Ombhab+pH1P1gqJ/lapeBsdT7XvrE/Hc5x
8mpUEdcD+xhZzscEmXuD623uSEmRwkt54jvMzIYq7kMPJnyQ646e8402p+EmYwDr
GFUcbHFkbAg2/JsPWw0m5XiugVq2FRn977fKgasoymqKdB7ksTeHBIKjur9y/yYZ
P5r7i2EXt4xITccwn7SRL+GP2Q==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:44 2023 by rpki-client on console-fra.rpki-client.org