Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/5q8ojfHUOXzJ_2PBBfyRdMKgWyA.roa
File: 5q8ojfHUOXzJ_2PBBfyRdMKgWyA.roa (raw, json)
Hash identifier: v9vjPnsYBhb5avi+c15szQaA9NSfrzbZ59FcMNETOfU=
Subject key identifier: E6:AF:28:8D:F1:D4:39:7C:C9:FF:63:C1:05:FC:91:74:C2:A0:5B:20
Certificate issuer: /CN=c2eafaa30b340ecf810a4cb9af3b51c702566598
Certificate serial: 01825FB1C93AA4A2D45E0EB5FF92152E068D
Authority key identifier: C2:EA:FA:A3:0B:34:0E:CF:81:0A:4C:B9:AF:3B:51:C7:02:56:65:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/5q8ojfHUOXzJ_2PBBfyRdMKgWyA.roa
Signing time: Tue 02 Aug 2022 17:54:23 +0000
ROA not before: Tue 02 Aug 2022 17:54:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210616
IP address blocks: 212.15.56.0/24 maxlen: 24
212.15.56.0/23 maxlen: 23
212.15.58.0/24 maxlen: 24
212.15.58.0/23 maxlen: 23
212.15.57.0/24 maxlen: 24
212.15.63.0/24 maxlen: 24
212.15.59.0/24 maxlen: 24
212.15.62.0/24 maxlen: 24
212.15.62.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:5f:b1:c9:3a:a4:a2:d4:5e:0e:b5:ff:92:15:2e:06:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2eafaa30b340ecf810a4cb9af3b51c702566598
Validity
Not Before: Aug 2 17:54:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e6af288df1d4397cc9ff63c105fc9174c2a05b20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:40:f9:42:e9:de:6f:53:e4:1f:16:62:8e:24:
d3:df:ca:16:1f:d3:80:b1:5b:16:67:e8:02:38:ed:
4f:45:4f:22:c2:75:81:3a:3d:38:e0:17:ed:be:5b:
9f:de:d4:75:9d:86:11:be:71:fa:08:af:7e:60:e2:
74:13:e8:29:44:34:74:59:94:4f:52:03:4e:35:05:
db:f4:5d:be:56:21:e0:2d:e5:f0:7c:19:f4:27:e8:
57:7b:61:6f:9f:f3:52:eb:d8:8f:cd:e6:a8:30:34:
b7:ae:6d:c1:7c:af:f4:f8:2f:a6:16:20:8f:8e:23:
ac:49:60:ce:73:ff:3f:46:0c:26:7f:6a:ba:7b:81:
42:9a:48:de:ce:64:48:70:7d:0e:04:55:d5:d5:52:
47:39:09:cf:d2:54:cd:85:0a:9a:b8:57:07:6a:07:
90:d5:9b:a1:86:fd:7a:df:bb:83:d9:07:dd:45:0e:
c9:89:60:63:be:6e:fc:c8:0b:f1:23:bc:81:c3:a9:
8a:51:4d:c4:32:b2:cf:fe:fe:bd:8f:24:d8:10:88:
52:43:07:22:3f:1d:22:3a:37:79:77:16:6a:cc:b0:
34:e9:a6:7a:5c:29:5a:07:b8:6f:c5:b3:63:75:b0:
c8:1a:9e:00:86:d5:f9:3a:1c:df:ee:20:d2:50:9b:
e1:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:AF:28:8D:F1:D4:39:7C:C9:FF:63:C1:05:FC:91:74:C2:A0:5B:20
X509v3 Authority Key Identifier:
keyid:C2:EA:FA:A3:0B:34:0E:CF:81:0A:4C:B9:AF:3B:51:C7:02:56:65:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/5q8ojfHUOXzJ_2PBBfyRdMKgWyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.15.56.0/22
212.15.62.0/23
Signature Algorithm: sha256WithRSAEncryption
42:5b:a8:18:ee:21:c6:5b:08:8c:e2:04:a9:6a:5c:9e:36:1d:
20:2d:d3:0d:64:f3:92:cf:5c:ec:49:cf:7c:6f:13:ad:66:c6:
9e:1a:49:42:b5:41:92:4c:1d:01:68:1f:dc:6b:f2:b4:a5:42:
4d:44:fa:67:d1:68:21:44:e6:2f:36:7f:2c:b0:17:ef:e0:da:
6a:15:5e:f2:20:18:73:3a:0c:de:7e:e7:01:3b:6b:da:9a:87:
02:16:ef:5a:ef:17:8d:f8:8d:64:c3:ec:07:c7:ee:34:ff:0c:
f6:30:a3:a1:15:f3:e3:0f:ad:63:57:cc:4c:a4:6d:03:b9:d9:
f8:2b:f8:54:d8:f2:4c:f2:2b:0f:a2:52:53:1e:cc:7e:26:9d:
bf:e4:fb:a1:19:f9:93:ef:6f:23:f7:f9:fe:76:a2:f4:36:f7:
11:0b:10:fc:44:7e:71:a9:da:bb:c6:0f:21:b9:fc:69:53:35:
bf:70:23:61:ca:69:97:d5:84:4f:da:4a:d9:66:75:21:87:b7:
12:41:d9:97:c9:10:d4:f6:eb:1a:dd:91:f6:7f:b2:b8:3c:32:
05:89:38:84:33:b9:79:99:9e:85:ab:54:89:a1:46:e9:99:b1:
6e:be:48:36:e2:90:b6:7b:64:b0:8f:29:89:b0:7c:d1:31:25:
7c:2f:47:56
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYJfsck6pKLUXg61/5IVLgaNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyZWFmYWEzMGIzNDBlY2Y4MTBhNGNiOWFmM2I1MWM3MDI1
NjY1OTgwHhcNMjIwODAyMTc1NDIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNmFmMjg4ZGYxZDQzOTdjYzlmZjYzYzEwNWZjOTE3NGMyYTA1YjIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmED5Quneb1PkHxZijiTT38oWH9OA
sVsWZ+gCOO1PRU8iwnWBOj044Bftvluf3tR1nYYRvnH6CK9+YOJ0E+gpRDR0WZRP
UgNONQXb9F2+ViHgLeXwfBn0J+hXe2Fvn/NS69iPzeaoMDS3rm3BfK/0+C+mFiCP
jiOsSWDOc/8/Rgwmf2q6e4FCmkjezmRIcH0OBFXV1VJHOQnP0lTNhQqauFcHageQ
1Zuhhv1637uD2QfdRQ7JiWBjvm78yAvxI7yBw6mKUU3EMrLP/v69jyTYEIhSQwci
Px0iOjd5dxZqzLA06aZ6XClaB7hvxbNjdbDIGp4AhtX5Ohzf7iDSUJvhzwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOavKI3x1Dl8yf9jwQX8kXTCoFsgMB8GA1UdIwQY
MBaAFMLq+qMLNA7PgQpMua87UccCVmWYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3VyNm93czBEcy1CQ2t5NXJ6dFJ4d0pXWlpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9hMzRhMTYtZjg4MC00ODczLTg2OGIt
NWVjYWZkYTQ3MWY3LzEvNXE4b2pmSFVPWHpKXzJQQkJmeVJkTUtnV3lBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS9hMzRhMTYtZjg4MC00ODczLTg2OGItNWVjYWZkYTQ3MWY3
LzEvd3VyNm93czBEcy1CQ2t5NXJ6dFJ4d0pXWlpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQC1A84AwQB
1A8+MA0GCSqGSIb3DQEBCwUAA4IBAQBCW6gY7iHGWwiM4gSpalyeNh0gLdMNZPOS
z1zsSc98bxOtZsaeGklCtUGSTB0BaB/ca/K0pUJNRPpn0WghROYvNn8ssBfv4Npq
FV7yIBhzOgzefucBO2vamocCFu9a7xeN+I1kw+wHx+40/wz2MKOhFfPjD61jV8xM
pG0Dudn4K/hU2PJM8isPolJTHsx+Jp2/5PuhGfmT728j9/n+dqL0NvcRCxD8RH5x
qdq7xg8hufxpUzW/cCNhymmX1YRP2krZZnUhh7cSQdmXyRDU9usa3ZH2f7K4PDIF
iTiEM7l5mZ6Fq1SJoUbpmbFuvkg24pC2e2SwjymJsHzRMSV8L0dW
-----END CERTIFICATE-----
Generated at Wed Apr 23 06:12:04 2025 by rpki-client