Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/4VaemaqSU1Zg7fE2_xwX52dI9x4.roa
File: 4VaemaqSU1Zg7fE2_xwX52dI9x4.roa (raw, json)
Hash identifier: hW1exUsNaJCM8XeIcdoRZ66EPhuZhRL7JfivZKQxOpI=
Subject key identifier: E1:56:9E:99:AA:92:53:56:60:ED:F1:36:FF:1C:17:E7:67:48:F7:1E
Certificate issuer: /CN=9b632edb635aa8f9c40a0495a7a63bb6539580bb
Certificate serial: 056BE9EE
Authority key identifier: 9B:63:2E:DB:63:5A:A8:F9:C4:0A:04:95:A7:A6:3B:B6:53:95:80:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m2Mu22NaqPnECgSVp6Y7tlOVgLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/4VaemaqSU1Zg7fE2_xwX52dI9x4.roa
Signing time: Sat 01 Jan 2022 07:59:05 +0000
ROA not before: Sat 01 Jan 2022 07:59:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8879
IP address blocks: 212.62.64.0/19 maxlen: 24
84.201.64.0/18 maxlen: 24
81.89.224.0/19 maxlen: 24
2a00:1348::/32 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90958318 (0x56be9ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b632edb635aa8f9c40a0495a7a63bb6539580bb
Validity
Not Before: Jan 1 07:59:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e1569e99aa92535660edf136ff1c17e76748f71e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:53:cb:12:63:34:e0:12:c5:81:b1:c0:51:70:
d5:7b:81:a6:8e:21:6b:f6:60:11:2c:4c:a1:cc:7a:
a1:54:95:6d:b0:99:94:37:13:77:0d:e5:b1:58:1c:
0d:ef:b7:54:f9:2a:b4:c9:9b:f9:fd:bb:37:f3:35:
72:4d:b7:b0:1a:15:3b:2f:c4:35:56:8d:65:40:33:
9c:0e:75:28:84:2c:42:ff:13:17:5a:77:18:83:29:
72:61:f6:80:96:df:80:a5:f9:80:ef:ee:5b:2a:9f:
c9:7e:e2:62:c0:72:d6:1a:c1:b9:2f:cc:69:ca:b6:
6e:b1:39:d9:01:07:73:bc:71:b3:db:a1:d2:ee:19:
9f:f1:94:27:68:2e:3a:9e:d3:b7:10:b5:b7:fb:d6:
9c:c9:48:a6:bd:9a:65:c4:59:25:1e:e4:a9:f1:df:
ea:c2:b6:94:2d:3e:d6:1c:a6:a9:3e:f9:ba:ea:37:
f0:8d:e0:e1:4b:1d:44:92:b4:57:8e:be:0b:e5:16:
3a:bd:81:bb:0a:cf:aa:d9:af:31:79:0b:e6:22:b4:
2b:85:54:03:99:e2:06:a2:64:a1:6f:2a:c7:76:48:
01:68:46:18:de:4b:a9:ad:0e:c8:bd:ce:6a:43:03:
e0:17:44:f8:41:72:e7:45:54:0b:ce:c9:9e:0c:19:
fa:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:56:9E:99:AA:92:53:56:60:ED:F1:36:FF:1C:17:E7:67:48:F7:1E
X509v3 Authority Key Identifier:
keyid:9B:63:2E:DB:63:5A:A8:F9:C4:0A:04:95:A7:A6:3B:B6:53:95:80:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2Mu22NaqPnECgSVp6Y7tlOVgLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/4VaemaqSU1Zg7fE2_xwX52dI9x4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/m2Mu22NaqPnECgSVp6Y7tlOVgLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.89.224.0/19
84.201.64.0/18
212.62.64.0/19
IPv6:
2a00:1348::/32
Signature Algorithm: sha256WithRSAEncryption
94:84:52:c9:ca:55:d9:55:df:fe:d2:6c:bf:13:d4:45:dd:29:
db:3f:0e:de:91:5e:71:2b:18:ba:a8:e6:3a:6f:d0:0f:48:c0:
cc:e2:ad:81:20:ff:82:03:06:80:83:ff:d9:fe:40:e6:00:ad:
0e:45:16:fb:31:db:b4:94:c0:69:e2:99:00:68:51:52:cc:27:
2a:3a:8c:86:89:1b:3e:27:81:39:9e:a9:ef:33:e7:5f:18:d3:
0b:df:7d:c3:56:1f:7d:a8:fc:cf:fb:4f:05:df:71:5f:bf:d1:
d4:5c:4f:9a:90:a2:77:01:bf:a4:87:24:48:fa:4b:d7:5d:76:
a3:ef:b4:04:20:8d:b7:0f:00:e3:b4:02:5c:22:56:3e:4e:63:
96:ef:68:20:4b:be:72:23:91:fc:b6:88:ae:ae:b4:a8:f4:a1:
f6:10:1c:a6:05:b9:35:2c:ec:4d:01:11:ff:c1:05:30:e0:fc:
d1:b9:ed:b7:cc:c1:de:c1:cc:4d:5b:ed:f1:3f:d6:fe:0c:8c:
65:2b:5c:d7:07:a0:ef:4f:b5:ea:73:6b:52:11:68:57:19:50:
20:ad:bc:11:75:bd:c5:3f:7f:10:8c:fa:45:0d:a8:1d:37:65:
92:9d:aa:0a:5b:ee:7d:6d:97:60:50:51:03:d2:8e:44:90:eb:
bd:36:39:c8
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIEBWvp7jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
YjYzMmVkYjYzNWFhOGY5YzQwYTA0OTVhN2E2M2JiNjUzOTU4MGJiMB4XDTIyMDEw
MTA3NTkwNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTE1NjllOTlhYTky
NTM1NjYwZWRmMTM2ZmYxYzE3ZTc2NzQ4ZjcxZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJVTyxJjNOASxYGxwFFw1XuBpo4ha/ZgESxMocx6oVSVbbCZ
lDcTdw3lsVgcDe+3VPkqtMmb+f27N/M1ck23sBoVOy/ENVaNZUAznA51KIQsQv8T
F1p3GIMpcmH2gJbfgKX5gO/uWyqfyX7iYsBy1hrBuS/Macq2brE52QEHc7xxs9uh
0u4Zn/GUJ2guOp7TtxC1t/vWnMlIpr2aZcRZJR7kqfHf6sK2lC0+1hymqT75uuo3
8I3g4UsdRJK0V46+C+UWOr2BuwrPqtmvMXkL5iK0K4VUA5niBqJkoW8qx3ZIAWhG
GN5Lqa0OyL3OakMD4BdE+EFy50VUC87JngwZ+okCAwEAAaOCAiQwggIgMB0GA1Ud
DgQWBBThVp6ZqpJTVmDt8Tb/HBfnZ0j3HjAfBgNVHSMEGDAWgBSbYy7bY1qo+cQK
BJWnpju2U5WAuzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L20yTXUyMk5hcVBuRUNnU1ZwNlk3dGxPVmdMcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZGMvZDAyOTgzLWIxMWMtNGJmNy1iNGI1LWU4YzlhZDVmMDUxYS8x
LzRWYWVtYXFTVTFaZzdmRTJfeHdYNTJkSTl4NC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGMv
ZDAyOTgzLWIxMWMtNGJmNy1iNGI1LWU4YzlhZDVmMDUxYS8xL20yTXUyMk5hcVBu
RUNnU1ZwNlk3dGxPVmdMcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA6
BggrBgEFBQcBBwEB/wQrMCkwGAQCAAEwEgMEBVFZ4AMEBlTJQAMEBdQ+QDANBAIA
AjAHAwUAKgATSDANBgkqhkiG9w0BAQsFAAOCAQEAlIRSycpV2VXf/tJsvxPURd0p
2z8O3pFecSsYuqjmOm/QD0jAzOKtgSD/ggMGgIP/2f5A5gCtDkUW+zHbtJTAaeKZ
AGhRUswnKjqMhokbPieBOZ6p7zPnXxjTC999w1Yffaj8z/tPBd9xX7/R1FxPmpCi
dwG/pIckSPpL1112o++0BCCNtw8A47QCXCJWPk5jlu9oIEu+ciOR/LaIrq60qPSh
9hAcpgW5NSzsTQER/8EFMOD80bntt8zB3sHMTVvt8T/W/gyMZStc1weg70+16nNr
UhFoVxlQIK28EXW9xT9/EIz6RQ2oHTdlkp2qClvufW2XYFBRA9KORJDrvTY5yA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:22 2024 by rpki-client on console-fra.rpki-client.org