Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/a13jEignb9-WherULUXSaWtGZwY.roa
File: a13jEignb9-WherULUXSaWtGZwY.roa (raw, json)
Hash identifier: ecAGl2QTMckouK3Cqu3+f1AbdqpI5tZKmuNvfUQjYPI=
Subject key identifier: 6B:5D:E3:12:28:27:6F:DF:96:85:EA:D4:2D:45:D2:69:6B:46:67:06
Certificate issuer: /CN=c2eafaa30b340ecf810a4cb9af3b51c702566598
Certificate serial: 082A3567
Authority key identifier: C2:EA:FA:A3:0B:34:0E:CF:81:0A:4C:B9:AF:3B:51:C7:02:56:65:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/a13jEignb9-WherULUXSaWtGZwY.roa
Signing time: Thu 30 Jun 2022 06:50:02 +0000
ROA not before: Thu 30 Jun 2022 06:50:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210616
IP address blocks: 212.15.56.0/24 maxlen: 24
212.15.58.0/24 maxlen: 24
212.15.57.0/24 maxlen: 24
212.15.63.0/24 maxlen: 24
212.15.59.0/24 maxlen: 24
212.15.62.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136983911 (0x82a3567)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2eafaa30b340ecf810a4cb9af3b51c702566598
Validity
Not Before: Jun 30 06:50:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6b5de31228276fdf9685ead42d45d2696b466706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:5e:33:2f:5d:dc:59:5a:fc:09:16:5c:1a:85:
3a:27:ba:36:b4:e6:c5:83:fd:5c:a2:29:e5:1c:e8:
66:f1:75:66:79:45:b0:86:99:33:37:fb:f0:e3:95:
54:17:1c:32:a3:39:03:34:5e:a7:f5:d8:f3:1f:4e:
95:b2:f2:28:58:21:45:6b:40:4f:70:c4:04:0b:63:
2b:a6:01:d5:9e:f1:c8:56:fb:c8:e6:cd:9d:d1:76:
12:2e:b6:6a:b7:0f:c8:36:14:e1:e0:16:8b:ef:e5:
8f:e5:ce:3d:89:dd:a2:9f:67:f9:a1:1f:bb:09:ce:
1c:d3:34:53:d5:92:2b:5c:6d:f1:6b:96:e8:c4:1c:
4a:bd:5b:10:ae:a2:71:3a:8c:22:22:87:1e:ef:b4:
e2:19:98:47:ab:79:8f:4c:67:ff:07:40:69:2c:61:
45:c2:56:31:d3:b8:92:c6:d7:a1:8c:43:a7:d6:21:
35:2c:aa:2f:40:28:32:1e:f4:e0:cb:5c:56:b8:27:
cd:eb:39:24:61:ba:99:f6:49:ad:e4:6a:3d:24:90:
7e:3a:bc:65:0c:d6:d2:d8:b3:40:98:fe:6d:ec:a4:
b7:b1:d5:64:24:6d:e4:d3:d6:49:d3:60:7a:ff:ad:
02:37:1a:73:dd:c1:dd:41:15:59:ba:92:b9:13:7f:
a5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:5D:E3:12:28:27:6F:DF:96:85:EA:D4:2D:45:D2:69:6B:46:67:06
X509v3 Authority Key Identifier:
keyid:C2:EA:FA:A3:0B:34:0E:CF:81:0A:4C:B9:AF:3B:51:C7:02:56:65:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/a13jEignb9-WherULUXSaWtGZwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.15.56.0/22
212.15.62.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:86:e6:30:e1:ea:fa:12:d5:d7:25:f5:9d:da:84:6d:f5:f6:
be:9f:a7:90:92:73:58:1a:2f:9f:02:7f:7d:19:a3:85:d7:7d:
4e:9d:1f:ed:31:da:cb:f5:a3:92:e3:08:aa:94:0d:39:0a:69:
67:43:da:c0:2d:6b:b0:30:0c:7a:e7:ec:e9:c1:c9:d3:10:29:
9d:cf:45:6a:db:15:22:43:ba:a2:e8:84:04:33:ab:1b:bb:68:
9f:db:cd:c2:01:b3:fa:d8:2f:b3:b2:af:ea:1e:23:5d:cd:61:
65:4b:99:08:80:9f:3c:d8:23:e1:a2:2f:9e:2b:e4:eb:56:68:
a6:eb:2e:8d:f3:3f:bb:7a:e1:10:dd:aa:7c:8c:f3:62:ae:bf:
03:78:ca:06:31:b1:fd:2a:14:7e:2a:34:81:20:9d:19:e2:f6:
5d:56:a7:fb:0f:43:59:bf:08:f3:1b:ac:59:93:0c:59:17:4b:
d8:91:5e:db:f0:76:cb:10:e9:bb:6f:b7:ec:c7:4e:39:c7:6f:
81:f2:a8:55:91:d8:a2:56:10:67:80:b3:05:0c:74:e2:2f:5e:
b0:96:dc:ac:b7:a1:6f:6f:85:4b:86:41:bf:a0:a1:ab:0d:f8:
55:8a:43:c7:77:38:86:99:8c:24:44:a9:77:29:69:22:20:3d:
e2:fd:92:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 07:07:11 2025 by rpki-client