Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/R4YMA14BE82511U9KSR5HPZBOu0.roa
File: R4YMA14BE82511U9KSR5HPZBOu0.roa (raw, json)
Hash identifier: E9qqBmL5cUgeVNYF7oP97TKt2fzlaMbe8KtrXodvKR8=
Subject key identifier: 47:86:0C:03:5E:01:13:CD:B9:D7:55:3D:29:24:79:1C:F6:41:3A:ED
Certificate issuer: /CN=c2eafaa30b340ecf810a4cb9af3b51c702566598
Certificate serial: 0183D4BF65F01A9AAB3F73488715180E777F
Authority key identifier: C2:EA:FA:A3:0B:34:0E:CF:81:0A:4C:B9:AF:3B:51:C7:02:56:65:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/R4YMA14BE82511U9KSR5HPZBOu0.roa
Signing time: Fri 14 Oct 2022 04:27:36 +0000
ROA not before: Fri 14 Oct 2022 04:27:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61118
IP address blocks: 212.15.60.0/24 maxlen: 24
212.15.60.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d4:bf:65:f0:1a:9a:ab:3f:73:48:87:15:18:0e:77:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2eafaa30b340ecf810a4cb9af3b51c702566598
Validity
Not Before: Oct 14 04:27:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=47860c035e0113cdb9d7553d2924791cf6413aed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8f:2e:47:e0:52:04:7e:40:e0:5b:1d:53:64:
39:30:dd:30:13:bb:d5:70:9c:66:26:11:7d:0b:40:
5a:0a:30:80:e6:cd:6c:04:e1:1b:2f:28:78:d5:30:
f4:f6:5a:9c:97:14:53:9a:b8:9b:ee:c5:2a:cf:ca:
20:75:c1:32:3b:5c:4a:20:61:bf:81:1a:96:22:63:
b3:f9:3d:1b:7e:31:6f:c4:da:18:73:2f:f3:2e:4c:
98:00:bb:ab:33:a2:a7:3b:31:3c:ec:c0:0c:0b:32:
8e:02:f5:41:d6:d9:36:4c:fa:d3:91:43:17:29:96:
06:0f:c6:4a:aa:e5:c5:fa:eb:d2:0e:76:be:02:77:
c5:8d:21:be:4d:ad:0f:76:7d:ba:6f:84:a8:a6:69:
76:34:5d:c0:66:dd:bb:fc:1c:0a:f2:80:09:89:e2:
55:52:d4:b0:28:2f:c5:f7:fd:89:d7:71:b2:66:49:
ea:d2:fe:e4:8f:9f:8b:77:44:68:bf:32:ea:c5:ef:
74:74:dd:37:87:f0:a0:61:02:12:bf:c2:59:c3:b2:
91:a0:7a:67:81:1d:22:18:ab:c1:09:4e:47:43:f8:
4f:d8:35:6b:92:48:6d:c3:25:76:a2:9b:c1:d3:58:
99:9b:66:b5:1b:86:76:b0:ff:88:9e:26:a4:f6:b5:
3a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:86:0C:03:5E:01:13:CD:B9:D7:55:3D:29:24:79:1C:F6:41:3A:ED
X509v3 Authority Key Identifier:
keyid:C2:EA:FA:A3:0B:34:0E:CF:81:0A:4C:B9:AF:3B:51:C7:02:56:65:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/R4YMA14BE82511U9KSR5HPZBOu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.15.60.0/23
Signature Algorithm: sha256WithRSAEncryption
76:df:ba:0a:23:dd:9b:e3:7c:5b:60:5e:1c:4e:13:23:1f:c4:
b0:7a:e8:59:b5:fc:48:0d:1d:63:0a:49:4c:79:b2:cd:81:6e:
ea:f9:32:7d:00:06:43:b7:a5:5e:97:a3:3d:b4:13:2e:49:83:
76:08:be:ba:38:34:e7:be:88:e2:fc:86:f1:39:c5:54:03:a7:
e3:2a:6f:0f:2e:33:f4:52:a6:01:75:db:b4:13:01:ba:66:b0:
35:e7:b3:b9:67:78:4a:c9:af:74:08:33:3c:79:64:9d:0b:1f:
06:90:24:77:53:97:fc:f2:89:91:ad:12:df:46:70:66:10:95:
09:55:5c:70:06:e7:e8:a7:5c:f1:fe:7f:fe:26:98:47:2c:d9:
28:1e:93:2f:ba:4e:85:d4:6b:80:ae:ff:d5:1f:50:12:7e:1c:
f8:da:0b:b0:ef:03:77:59:19:93:2e:7c:82:9c:59:11:72:ca:
b7:0e:b9:90:13:e7:a2:49:9c:18:26:3a:9f:84:51:16:ec:e3:
86:4f:3e:d5:8a:31:5d:42:c9:be:7f:86:c7:da:8a:97:e3:42:
4f:be:d8:9a:78:47:ac:8f:4e:24:19:7c:6b:a7:2b:fe:5d:7e:
b7:36:37:fa:7d:d7:4e:2c:01:c0:17:cf:93:c4:50:9a:ed:6a:
01:76:0e:b7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYPUv2XwGpqrP3NIhxUYDnd/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyZWFmYWEzMGIzNDBlY2Y4MTBhNGNiOWFmM2I1MWM3MDI1
NjY1OTgwHhcNMjIxMDE0MDQyNzM2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Nzg2MGMwMzVlMDExM2NkYjlkNzU1M2QyOTI0NzkxY2Y2NDEzYWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Y8uR+BSBH5A4FsdU2Q5MN0wE7vV
cJxmJhF9C0BaCjCA5s1sBOEbLyh41TD09lqclxRTmrib7sUqz8ogdcEyO1xKIGG/
gRqWImOz+T0bfjFvxNoYcy/zLkyYALurM6KnOzE87MAMCzKOAvVB1tk2TPrTkUMX
KZYGD8ZKquXF+uvSDna+AnfFjSG+Ta0Pdn26b4Sopml2NF3AZt27/BwK8oAJieJV
UtSwKC/F9/2J13GyZknq0v7kj5+Ld0RovzLqxe90dN03h/CgYQISv8JZw7KRoHpn
gR0iGKvBCU5HQ/hP2DVrkkhtwyV2opvB01iZm2a1G4Z2sP+Iniak9rU6jQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEeGDANeARPNuddVPSkkeRz2QTrtMB8GA1UdIwQY
MBaAFMLq+qMLNA7PgQpMua87UccCVmWYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3VyNm93czBEcy1CQ2t5NXJ6dFJ4d0pXWlpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9hMzRhMTYtZjg4MC00ODczLTg2OGIt
NWVjYWZkYTQ3MWY3LzEvUjRZTUExNEJFODI1MTFVOUtTUjVIUFpCT3UwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS9hMzRhMTYtZjg4MC00ODczLTg2OGItNWVjYWZkYTQ3MWY3
LzEvd3VyNm93czBEcy1CQ2t5NXJ6dFJ4d0pXWlpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB1A88MA0G
CSqGSIb3DQEBCwUAA4IBAQB237oKI92b43xbYF4cThMjH8SweuhZtfxIDR1jCklM
ebLNgW7q+TJ9AAZDt6Vel6M9tBMuSYN2CL66ODTnvoji/IbxOcVUA6fjKm8PLjP0
UqYBddu0EwG6ZrA157O5Z3hKya90CDM8eWSdCx8GkCR3U5f88omRrRLfRnBmEJUJ
VVxwBufop1zx/n/+JphHLNkoHpMvuk6F1GuArv/VH1ASfhz42guw7wN3WRmTLnyC
nFkRcsq3DrmQE+eiSZwYJjqfhFEW7OOGTz7VijFdQsm+f4bH2oqX40JPvtiaeEes
j04kGXxrpyv+XX63Njf6fddOLAHAF8+TxFCa7WoBdg63
-----END CERTIFICATE-----
Generated at Fri Apr 18 07:01:00 2025 by rpki-client