Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/_Gj7SYbf-zSWo0V48aeNvASIRSg.roa
File: _Gj7SYbf-zSWo0V48aeNvASIRSg.roa (raw, json)
Hash identifier: 2ml8zuOjvoLrvCk2IA5j//KI898tsb3HS68845nnO+k=
Subject key identifier: FC:68:FB:49:86:DF:FB:34:96:A3:45:78:F1:A7:8D:BC:04:88:45:28
Certificate issuer: /CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9
Certificate serial: 07E412FE
Authority key identifier: 66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/_Gj7SYbf-zSWo0V48aeNvASIRSg.roa
Signing time: Sat 01 Jan 2022 02:52:25 +0000
ROA not before: Sat 01 Jan 2022 02:52:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12599
IP address blocks: 212.64.218.0/24 maxlen: 24
212.64.220.0/24 maxlen: 24
212.64.192.0/24 maxlen: 24
212.64.195.0/24 maxlen: 24
212.64.194.0/24 maxlen: 24
212.64.197.0/24 maxlen: 24
212.64.196.0/24 maxlen: 24
212.64.198.0/24 maxlen: 24
212.64.199.0/24 maxlen: 24
212.64.193.0/24 maxlen: 24
212.64.200.0/24 maxlen: 24
212.64.202.0/24 maxlen: 24
212.64.201.0/24 maxlen: 24
212.64.204.0/24 maxlen: 24
212.64.203.0/24 maxlen: 24
212.64.205.0/24 maxlen: 24
212.64.206.0/24 maxlen: 24
212.64.209.0/24 maxlen: 24
212.64.208.0/24 maxlen: 24
212.64.212.0/24 maxlen: 24
212.64.207.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 132387582 (0x7e412fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9
Validity
Not Before: Jan 1 02:52:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fc68fb4986dffb3496a34578f1a78dbc04884528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0f:c5:58:84:01:72:e5:83:69:af:bf:c4:87:
a4:2a:58:32:7c:2d:cc:c2:10:1a:a3:85:76:45:5c:
e8:3d:07:e3:8b:a5:82:55:45:ea:a1:b5:db:f2:ec:
81:d4:32:8e:6f:e3:52:dc:c5:c5:d7:5f:57:e8:bd:
3c:fa:1f:80:4a:be:6c:18:f8:d1:46:a1:0a:c5:40:
01:da:4c:53:25:b9:15:65:c2:a7:b3:07:d3:f7:47:
42:a4:72:0f:c5:3d:e0:90:10:4f:06:7f:dd:e7:9b:
16:67:35:d0:d8:d9:c7:0a:19:93:b2:d9:f3:17:b9:
9f:08:06:1a:75:67:2b:c8:6e:58:0c:21:f0:61:59:
7a:a8:44:52:bb:68:6f:8c:1b:92:50:f6:2c:bb:85:
2d:03:39:99:5a:e0:9f:f7:97:86:18:e8:1c:9b:06:
2d:ff:ac:e6:0d:2e:73:90:a8:63:f5:70:46:2b:29:
75:33:b9:6a:cc:dd:4b:8f:fb:79:30:46:16:c0:8c:
4e:c4:f1:93:58:75:61:28:ba:a8:be:42:81:c8:57:
b7:7d:08:64:46:61:e4:28:b1:89:c5:7e:65:81:a9:
75:5e:b0:e8:b9:a9:84:e1:03:6a:59:f5:f4:f6:f7:
39:1d:72:96:ba:59:89:10:c4:74:c8:ed:b1:92:15:
75:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:68:FB:49:86:DF:FB:34:96:A3:45:78:F1:A7:8D:BC:04:88:45:28
X509v3 Authority Key Identifier:
keyid:66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/_Gj7SYbf-zSWo0V48aeNvASIRSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.64.192.0-212.64.209.255
212.64.212.0/24
212.64.218.0/24
212.64.220.0/24
Signature Algorithm: sha256WithRSAEncryption
68:67:1b:67:2d:d7:b0:fd:99:4c:e7:37:01:0e:52:c3:ea:cb:
1e:d3:4c:f1:9f:43:da:50:22:c1:f9:b5:21:97:e9:af:df:15:
a9:55:53:c4:8b:38:b2:a4:94:26:79:82:4b:1b:47:78:53:ff:
4a:3f:4b:5a:63:5d:6d:4d:a1:f7:c8:7a:3f:fa:df:6e:8b:27:
54:90:fe:28:cb:b3:ee:27:8d:04:1e:0c:23:7c:45:8d:ea:02:
5b:5f:c0:e7:95:ea:fd:e9:81:c2:d9:0f:03:a5:99:61:37:36:
a7:7f:6f:b5:10:e0:64:43:8d:7b:10:05:aa:99:ff:92:36:86:
4a:b1:79:b5:eb:f2:5c:32:3f:65:ad:3c:8c:8c:01:48:a8:4b:
f9:c7:99:d1:a2:6c:c2:7f:de:c1:9e:6c:7a:3c:09:9f:0c:78:
a2:da:ae:0a:26:a0:7e:15:f0:ce:29:13:33:54:54:26:d8:82:
ae:84:cb:cd:25:12:53:14:45:49:2f:13:80:17:d3:de:44:bc:
e2:84:94:19:4e:a7:40:ff:ba:29:69:e4:1c:ec:9f:d3:a2:d8:
08:8d:8b:10:e4:e5:a4:22:1a:e8:b3:9f:c9:ae:6a:01:a6:07:
57:5d:1f:32:33:86:fa:c3:10:fc:a9:99:af:e2:c9:01:3f:7b:
8f:63:e4:6d
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgIEB+QS/jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
NjQwZjg5Y2UyMjY0NWI5NzI5N2Q3ODAzNzI2ZGMyZmIwZTVmNGI5MB4XDTIyMDEw
MTAyNTIyNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZmM2OGZiNDk4NmRm
ZmIzNDk2YTM0NTc4ZjFhNzhkYmMwNDg4NDUyODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALUPxViEAXLlg2mvv8SHpCpYMnwtzMIQGqOFdkVc6D0H44ul
glVF6qG12/LsgdQyjm/jUtzFxddfV+i9PPofgEq+bBj40UahCsVAAdpMUyW5FWXC
p7MH0/dHQqRyD8U94JAQTwZ/3eebFmc10NjZxwoZk7LZ8xe5nwgGGnVnK8huWAwh
8GFZeqhEUrtob4wbklD2LLuFLQM5mVrgn/eXhhjoHJsGLf+s5g0uc5CoY/VwRisp
dTO5aszdS4/7eTBGFsCMTsTxk1h1YSi6qL5CgchXt30IZEZh5CixicV+ZYGpdV6w
6LmphOEDaln19Pb3OR1ylrpZiRDEdMjtsZIVdccCAwEAAaOCAiMwggIfMB0GA1Ud
DgQWBBT8aPtJht/7NJajRXjxp428BIhFKDAfBgNVHSMEGDAWgBRmQPic4iZFuXKX
14A3JtwvsOX0uTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1prRDRuT0ltUmJseWw5ZUFOeWJjTDdEbDlMay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZmMvYzNhZDJlLWI1MmUtNDQxYy04OWJhLTQ0YWI3YTlkN2RlYS8x
L19HajdTWWJmLXpTV28wVjQ4YWVOdkFTSVJTZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmMv
YzNhZDJlLWI1MmUtNDQxYy04OWJhLTQ0YWI3YTlkN2RlYS8xL1prRDRuT0ltUmJs
eWw5ZUFOeWJjTDdEbDlMay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA5
BggrBgEFBQcBBwEB/wQqMCgwJgQCAAEwIDAMAwQG1EDAAwQB1EDQAwQA1EDUAwQA
1EDaAwQA1EDcMA0GCSqGSIb3DQEBCwUAA4IBAQBoZxtnLdew/ZlM5zcBDlLD6sse
00zxn0PaUCLB+bUhl+mv3xWpVVPEiziypJQmeYJLG0d4U/9KP0taY11tTaH3yHo/
+t9uiydUkP4oy7PuJ40EHgwjfEWN6gJbX8Dnler96YHC2Q8DpZlhNzanf2+1EOBk
Q417EAWqmf+SNoZKsXm16/JcMj9lrTyMjAFIqEv5x5nRomzCf97Bnmx6PAmfDHii
2q4KJqB+FfDOKRMzVFQm2IKuhMvNJRJTFEVJLxOAF9PeRLzihJQZTqdA/7opaeQc
7J/TotgIjYsQ5OWkIhros5/JrmoBpgdXXR8yM4b6wxD8qZmv4skBP3uPY+Rt
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:12:54 2025 by rpki-client