Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/SjIU_5TBhtbRfJ9vkEv9GmcTeJg.roa
File: SjIU_5TBhtbRfJ9vkEv9GmcTeJg.roa (raw, json)
Hash identifier: 5A/sCHdSin3OPdSTGTybYtvWQxhnqN4jjaHvCGjOWq0=
Subject key identifier: 4A:32:14:FF:94:C1:86:D6:D1:7C:9F:6F:90:4B:FD:1A:67:13:78:98
Certificate issuer: /CN=c2eafaa30b340ecf810a4cb9af3b51c702566598
Certificate serial: 018570F0A279F42D517B2A4BA15B90358D0A
Authority key identifier: C2:EA:FA:A3:0B:34:0E:CF:81:0A:4C:B9:AF:3B:51:C7:02:56:65:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/SjIU_5TBhtbRfJ9vkEv9GmcTeJg.roa
Signing time: Mon 02 Jan 2023 05:24:56 +0000
ROA not before: Mon 02 Jan 2023 05:24:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210616
IP address blocks: 212.15.56.0/24 maxlen: 24
212.15.56.0/23 maxlen: 23
212.15.58.0/23 maxlen: 23
212.15.58.0/24 maxlen: 24
212.15.57.0/24 maxlen: 24
212.15.63.0/24 maxlen: 24
212.15.59.0/24 maxlen: 24
212.15.62.0/24 maxlen: 24
212.15.62.0/23 maxlen: 23
212.15.61.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:a2:79:f4:2d:51:7b:2a:4b:a1:5b:90:35:8d:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2eafaa30b340ecf810a4cb9af3b51c702566598
Validity
Not Before: Jan 2 05:24:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4a3214ff94c186d6d17c9f6f904bfd1a67137898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:38:8f:4b:e8:94:fe:45:23:4b:fb:0f:01:32:
47:f4:7f:ed:c1:6a:6a:17:a3:9c:a0:80:f9:ec:39:
ce:13:86:36:80:66:46:3a:a7:51:98:a1:13:bb:72:
43:86:0f:e7:98:28:0a:64:22:74:da:33:ac:44:6c:
a5:c8:70:d2:87:a3:32:fe:0c:bc:2c:b4:16:6d:a4:
2b:84:4d:32:3c:c8:a9:55:60:bf:dc:91:e3:c6:c4:
50:32:72:55:50:a2:04:2b:6d:9a:e1:72:c4:5b:98:
e7:cb:d3:8e:df:f8:75:fd:ce:8d:7f:c6:e2:13:c3:
7a:0d:59:16:f3:f4:29:9e:c2:fe:83:bb:1c:af:bd:
63:98:f0:45:68:6d:04:5c:74:4e:c6:37:ec:6a:ae:
f8:a4:2d:bf:ef:fb:9c:38:97:07:53:c2:19:d2:09:
1e:97:7f:91:78:b0:9d:08:4d:fc:e6:21:37:41:31:
4e:e8:cb:86:ad:d7:cd:2a:78:47:29:58:70:e0:91:
81:98:4d:ff:2a:0c:44:c8:78:30:b8:1e:98:63:6d:
65:f4:b7:ce:d3:92:22:4f:b5:09:ef:94:49:b9:60:
9d:b4:e4:62:b6:07:dc:42:c3:af:4e:c2:c3:51:17:
86:be:53:d1:76:0c:c8:6d:af:d5:6c:e2:ff:a0:6e:
70:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:32:14:FF:94:C1:86:D6:D1:7C:9F:6F:90:4B:FD:1A:67:13:78:98
X509v3 Authority Key Identifier:
keyid:C2:EA:FA:A3:0B:34:0E:CF:81:0A:4C:B9:AF:3B:51:C7:02:56:65:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/SjIU_5TBhtbRfJ9vkEv9GmcTeJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.15.56.0/22
212.15.61.0-212.15.63.255
Signature Algorithm: sha256WithRSAEncryption
6f:c8:bb:df:f3:36:f2:29:ea:ed:f6:9f:57:c4:a5:02:5a:a3:
b7:20:c2:af:f7:8f:e6:9d:55:f4:71:90:40:c8:8d:e1:77:8e:
9e:94:a3:b9:5f:d9:d7:a4:7f:f0:ed:99:dc:49:43:b0:c3:01:
32:b4:b7:5c:c5:2a:61:3d:cb:b1:e5:c5:cf:aa:81:8d:89:39:
21:60:f0:39:c2:ee:9b:11:01:03:4a:3b:85:c2:26:75:07:e7:
eb:ea:ef:7e:df:cd:7b:82:5a:55:93:a2:36:70:7c:8d:d7:92:
39:c6:97:b2:19:f3:59:cb:45:2a:9b:57:d3:dc:45:a8:d6:99:
6b:6d:74:fb:57:8f:ab:d3:0b:fd:cb:5d:e5:6d:64:d6:cf:2f:
53:66:df:9c:20:0a:f0:f2:5b:08:27:3b:b7:1c:fa:27:49:56:
e2:c6:af:ef:b2:45:3b:b5:00:3f:a1:72:14:79:c6:bb:dd:0f:
77:78:b1:e0:74:44:18:9d:a9:d7:68:0b:fb:0c:09:a7:01:55:
14:c1:72:b1:96:98:d7:7c:a7:e4:d6:41:5a:3b:76:e1:5c:32:
35:90:1a:d7:d4:f8:57:83:f6:85:21:c2:28:f8:db:3d:3f:cd:
b9:6f:0e:e9:cb:3e:cb:ba:7b:12:a0:a5:fd:45:84:ce:9d:ef:
03:fd:89:0f
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYVw8KJ59C1ReypLoVuQNY0KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyZWFmYWEzMGIzNDBlY2Y4MTBhNGNiOWFmM2I1MWM3MDI1
NjY1OTgwHhcNMjMwMTAyMDUyNDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YTMyMTRmZjk0YzE4NmQ2ZDE3YzlmNmY5MDRiZmQxYTY3MTM3ODk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDiPS+iU/kUjS/sPATJH9H/twWpq
F6OcoID57DnOE4Y2gGZGOqdRmKETu3JDhg/nmCgKZCJ02jOsRGylyHDSh6My/gy8
LLQWbaQrhE0yPMipVWC/3JHjxsRQMnJVUKIEK22a4XLEW5jny9OO3/h1/c6Nf8bi
E8N6DVkW8/QpnsL+g7scr71jmPBFaG0EXHROxjfsaq74pC2/7/ucOJcHU8IZ0gke
l3+ReLCdCE385iE3QTFO6MuGrdfNKnhHKVhw4JGBmE3/KgxEyHgwuB6YY21l9LfO
05IiT7UJ75RJuWCdtORitgfcQsOvTsLDUReGvlPRdgzIba/VbOL/oG5wcwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFEoyFP+UwYbW0Xyfb5BL/RpnE3iYMB8GA1UdIwQY
MBaAFMLq+qMLNA7PgQpMua87UccCVmWYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3VyNm93czBEcy1CQ2t5NXJ6dFJ4d0pXWlpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9hMzRhMTYtZjg4MC00ODczLTg2OGIt
NWVjYWZkYTQ3MWY3LzEvU2pJVV81VEJodGJSZko5dmtFdjlHbWNUZUpnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS9hMzRhMTYtZjg4MC00ODczLTg2OGItNWVjYWZkYTQ3MWY3
LzEvd3VyNm93czBEcy1CQ2t5NXJ6dFJ4d0pXWlpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQC1A84MAwD
BADUDz0DBAbUDwAwDQYJKoZIhvcNAQELBQADggEBAG/Iu9/zNvIp6u32n1fEpQJa
o7cgwq/3j+adVfRxkEDIjeF3jp6Uo7lf2dekf/DtmdxJQ7DDATK0t1zFKmE9y7Hl
xc+qgY2JOSFg8DnC7psRAQNKO4XCJnUH5+vq737fzXuCWlWTojZwfI3XkjnGl7IZ
81nLRSqbV9PcRajWmWttdPtXj6vTC/3LXeVtZNbPL1Nm35wgCvDyWwgnO7cc+idJ
VuLGr++yRTu1AD+hchR5xrvdD3d4seB0RBidqddoC/sMCacBVRTBcrGWmNd8p+TW
QVo7duFcMjWQGtfU+FeD9oUhwij42z0/zblvDunLPsu6exKgpf1FhM6d7wP9iQ8=
-----END CERTIFICATE-----
Generated at Fri Apr 18 07:04:09 2025 by rpki-client