Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/62f25f-8b1b-415b-9fc8-cc935cd73632/1/yJQLq1ZBfbatQfCz7M57IlEO8dY.roa
File: yJQLq1ZBfbatQfCz7M57IlEO8dY.roa (raw, json)
Hash identifier: f2Hw3ZnUWoPbTiP5HBXBxfkSttPN3KBhyBKdFlExK58=
Subject key identifier: C8:94:0B:AB:56:41:7D:B6:AD:41:F0:B3:EC:CE:7B:22:51:0E:F1:D6
Certificate issuer: /CN=4aae42a27e7bc2cc3507efa7e3cbc29d32eea133
Certificate serial: 0185718C3E44E216D0987F6D77F7720F346B
Authority key identifier: 4A:AE:42:A2:7E:7B:C2:CC:35:07:EF:A7:E3:CB:C2:9D:32:EE:A1:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sq5Con57wsw1B--n48vCnTLuoTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/62f25f-8b1b-415b-9fc8-cc935cd73632/1/yJQLq1ZBfbatQfCz7M57IlEO8dY.roa
Signing time: Mon 02 Jan 2023 08:14:54 +0000
ROA not before: Mon 02 Jan 2023 08:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62282
IP address blocks: 109.235.64.0/21 maxlen: 21
176.223.128.0/20 maxlen: 20
31.14.176.0/22 maxlen: 22
79.98.24.0/21 maxlen: 21
80.208.224.0/21 maxlen: 21
195.181.240.0/21 maxlen: 21
94.176.232.0/21 maxlen: 21
62.77.152.0/21 maxlen: 21
185.5.52.0/22 maxlen: 22
185.69.52.0/22 maxlen: 22
80.209.224.0/20 maxlen: 20
212.24.96.0/20 maxlen: 20
185.81.164.0/22 maxlen: 22
212.237.232.0/22 maxlen: 22
89.40.0.0/20 maxlen: 20
89.47.160.0/21 maxlen: 21
89.47.172.0/24 maxlen: 24
89.47.175.0/24 maxlen: 24
89.47.174.0/24 maxlen: 24
89.47.173.0/24 maxlen: 24
194.135.80.0/20 maxlen: 20
2a02:7b40::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:8c:3e:44:e2:16:d0:98:7f:6d:77:f7:72:0f:34:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aae42a27e7bc2cc3507efa7e3cbc29d32eea133
Validity
Not Before: Jan 2 08:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c8940bab56417db6ad41f0b3ecce7b22510ef1d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3e:6d:96:90:68:7b:88:75:bc:c7:dc:da:ee:
2b:2a:78:30:33:f8:11:5c:71:b4:99:3f:a2:5c:e6:
80:ea:84:8f:c0:a8:d9:ac:f5:19:d8:c9:7c:46:4d:
7c:a1:58:69:af:38:8c:0c:20:df:d1:1f:63:dc:2b:
81:f2:c5:16:70:e2:aa:23:5c:67:07:36:2e:8b:1e:
6e:ce:7b:fb:54:9d:e5:b4:96:2f:16:a0:ab:c1:9b:
2f:41:b3:90:e0:e2:a3:b9:13:ad:6a:f6:8c:2a:82:
ee:0a:69:4b:e6:1d:c0:ae:ca:49:a7:a9:fe:a3:d0:
aa:6b:d4:9b:7f:3e:71:36:3f:91:92:74:cb:87:2e:
15:e7:92:b3:5e:1e:6a:b3:fc:96:14:e4:bb:74:e5:
da:84:a3:dc:75:88:d4:34:33:f5:98:f6:b0:1c:01:
07:94:81:a2:df:19:57:2d:a4:55:9d:81:d3:b3:f8:
7c:76:aa:e5:ba:fd:23:01:84:3c:f3:c7:3d:45:70:
a2:e7:57:ff:f7:dc:46:5b:a1:83:82:45:78:d7:7f:
eb:01:f2:ac:28:59:0c:74:df:cb:28:63:a2:24:65:
40:db:41:e0:13:ef:af:c7:29:f6:cb:69:d7:d2:63:
dd:d6:53:0f:6f:69:6b:24:80:ee:dc:9d:3c:b0:ab:
9f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:94:0B:AB:56:41:7D:B6:AD:41:F0:B3:EC:CE:7B:22:51:0E:F1:D6
X509v3 Authority Key Identifier:
keyid:4A:AE:42:A2:7E:7B:C2:CC:35:07:EF:A7:E3:CB:C2:9D:32:EE:A1:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sq5Con57wsw1B--n48vCnTLuoTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/62f25f-8b1b-415b-9fc8-cc935cd73632/1/yJQLq1ZBfbatQfCz7M57IlEO8dY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/62f25f-8b1b-415b-9fc8-cc935cd73632/1/Sq5Con57wsw1B--n48vCnTLuoTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.176.0/22
62.77.152.0/21
79.98.24.0/21
80.208.224.0/21
80.209.224.0/20
89.40.0.0/20
89.47.160.0/21
89.47.172.0/22
94.176.232.0/21
109.235.64.0/21
176.223.128.0/20
185.5.52.0/22
185.69.52.0/22
185.81.164.0/22
194.135.80.0/20
195.181.240.0/21
212.24.96.0/20
212.237.232.0/22
IPv6:
2a02:7b40::/32
Signature Algorithm: sha256WithRSAEncryption
24:c9:5d:76:3f:93:51:f4:eb:fe:be:f6:e1:17:ff:41:80:eb:
46:af:eb:3b:09:6d:bb:0d:1c:97:99:99:36:6e:d4:95:c6:37:
b8:2e:85:ea:a8:a6:05:31:8f:b7:ad:80:9d:f7:72:61:d0:f9:
c5:d3:77:91:a1:47:93:f1:cc:ac:4c:e7:fc:06:a5:79:4f:a7:
08:12:68:ee:82:e8:d0:b7:6a:47:c3:11:b5:c3:cf:b7:f5:89:
a9:50:39:72:ad:bb:b9:38:5d:d7:f7:cb:1a:47:8b:11:d4:a8:
b3:a3:10:6b:3d:8a:2f:3d:6f:4d:5a:97:67:91:fd:7b:3a:78:
b5:3c:7f:07:04:82:b7:a0:b6:f8:1e:6b:1d:02:fb:02:62:f1:
f2:7f:65:03:e0:29:d0:40:2c:e4:9e:e6:ac:f8:7b:a2:33:93:
3f:3b:54:ab:a2:b6:be:21:93:06:8c:7d:01:3a:fc:dd:b0:22:
ae:b9:ae:52:5f:34:7f:e2:77:02:7a:91:dc:68:bc:1a:6c:24:
ed:25:20:53:ba:0f:b6:43:6c:97:4b:0f:b7:c2:25:a0:7a:af:
23:33:b9:cf:f3:08:75:83:1c:52:e7:c9:d6:ea:99:72:5a:19:
83:25:92:47:6f:8b:1b:a7:49:ea:7f:c3:2d:ef:43:ed:f7:ac:
d7:09:96:c9
-----BEGIN CERTIFICATE-----
MIIFdTCCBF2gAwIBAgISAYVxjD5E4hbQmH9td/dyDzRrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhYWU0MmEyN2U3YmMyY2MzNTA3ZWZhN2UzY2JjMjlkMzJl
ZWExMzMwHhcNMjMwMTAyMDgxNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjODk0MGJhYjU2NDE3ZGI2YWQ0MWYwYjNlY2NlN2IyMjUxMGVmMWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlT5tlpBoe4h1vMfc2u4rKngwM/gR
XHG0mT+iXOaA6oSPwKjZrPUZ2Ml8Rk18oVhprziMDCDf0R9j3CuB8sUWcOKqI1xn
BzYuix5uznv7VJ3ltJYvFqCrwZsvQbOQ4OKjuROtavaMKoLuCmlL5h3ArspJp6n+
o9Cqa9Sbfz5xNj+RknTLhy4V55KzXh5qs/yWFOS7dOXahKPcdYjUNDP1mPawHAEH
lIGi3xlXLaRVnYHTs/h8dqrluv0jAYQ888c9RXCi51f/99xGW6GDgkV413/rAfKs
KFkMdN/LKGOiJGVA20HgE++vxyn2y2nX0mPd1lMPb2lrJIDu3J08sKufNQIDAQAB
o4ICgTCCAn0wHQYDVR0OBBYEFMiUC6tWQX22rUHws+zOeyJRDvHWMB8GA1UdIwQY
MBaAFEquQqJ+e8LMNQfvp+PLwp0y7qEzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3E1Q29uNTd3c3cxQi0tbjQ4dkNuVEx1b1RNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC82MmYyNWYtOGIxYi00MTViLTlmYzgt
Y2M5MzVjZDczNjMyLzEveUpRTHExWkJmYmF0UWZDejdNNTdJbEVPOGRZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC82MmYyNWYtOGIxYi00MTViLTlmYzgtY2M5MzVjZDczNjMy
LzEvU3E1Q29uNTd3c3cxQi0tbjQ4dkNuVEx1b1RNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGWBggrBgEFBQcBBwEB/wSBhjCBgzByBAIAATBsAwQCHw6w
AwQDPk2YAwQDT2IYAwQDUNDgAwQEUNHgAwQEWSgAAwQDWS+gAwQCWS+sAwQDXrDo
AwQDbetAAwQEsN+AAwQCuQU0AwQCuUU0AwQCuVGkAwQEwodQAwQDw7XwAwQE1Bhg
AwQC1O3oMA0EAgACMAcDBQAqAntAMA0GCSqGSIb3DQEBCwUAA4IBAQAkyV12P5NR
9Ov+vvbhF/9BgOtGr+s7CW27DRyXmZk2btSVxje4LoXqqKYFMY+3rYCd93Jh0PnF
03eRoUeT8cysTOf8BqV5T6cIEmjugujQt2pHwxG1w8+39YmpUDlyrbu5OF3X98sa
R4sR1KizoxBrPYovPW9NWpdnkf17Oni1PH8HBIK3oLb4HmsdAvsCYvHyf2UD4CnQ
QCzknuas+HuiM5M/O1Srora+IZMGjH0BOvzdsCKuua5SXzR/4ncCepHcaLwabCTt
JSBTug+2Q2yXSw+3wiWgeq8jM7nP8wh1gxxS58nW6plyWhmDJZJHb4sbp0nqf8Mt
70Pt96zXCZbJ
-----END CERTIFICATE-----
Generated at Mon Apr 28 02:17:15 2025 by rpki-client