Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/yMKvz7x7-C04IKvyUUDUgHUtAVg.roa
File: yMKvz7x7-C04IKvyUUDUgHUtAVg.roa (raw, json)
Hash identifier: YjvKqIouBPeqFjAOlfaDfrrjayasdOXGbmfRsDB4H7E=
Subject key identifier: C8:C2:AF:CF:BC:7B:F8:2D:38:20:AB:F2:51:40:D4:80:75:2D:01:58
Certificate issuer: /CN=ccf9a6d2f6cd588a77f423622e6b8d1c654bcdf2
Certificate serial: 34E326B3
Authority key identifier: CC:F9:A6:D2:F6:CD:58:8A:77:F4:23:62:2E:6B:8D:1C:65:4B:CD:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPmm0vbNWIp39CNiLmuNHGVLzfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/yMKvz7x7-C04IKvyUUDUgHUtAVg.roa
Signing time: Sat 01 Jan 2022 02:52:07 +0000
ROA not before: Sat 01 Jan 2022 02:52:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31349
IP address blocks: 62.201.16.0/20 maxlen: 24
185.185.128.0/22 maxlen: 24
2a06:8080::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 887301811 (0x34e326b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccf9a6d2f6cd588a77f423622e6b8d1c654bcdf2
Validity
Not Before: Jan 1 02:52:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c8c2afcfbc7bf82d3820abf25140d480752d0158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8b:9f:9c:96:ff:b8:00:e5:54:2e:8a:c4:0d:
9e:b3:c8:5c:4b:eb:b8:ce:15:60:2e:5d:9b:03:9a:
44:49:f4:09:7f:c4:17:e9:67:19:e5:6e:98:10:8c:
0d:97:f9:a0:c5:0a:a0:1a:07:17:ab:33:ae:bf:72:
65:42:74:2b:a2:78:70:ab:37:22:ba:c8:5f:6e:41:
ad:43:39:db:7f:d9:02:d8:d5:45:b2:bb:79:0c:6e:
fb:64:bf:6d:d4:50:d1:29:01:8f:a6:38:23:1f:49:
77:ac:2d:45:1e:83:4c:49:1b:66:82:50:0e:a9:64:
a2:10:2d:10:90:8d:14:19:4d:c4:b0:06:ff:5e:c0:
fc:1c:4f:6d:f8:52:45:c0:0b:a5:cd:a8:d9:dc:a8:
39:ff:dc:82:ff:4f:f5:f5:7b:42:78:ae:ed:1f:0f:
7b:93:76:2e:16:77:c5:d9:77:d3:16:e0:d0:c2:b5:
f1:42:5a:df:a1:fd:4b:e9:70:e0:b5:49:ff:ec:25:
46:91:d4:4d:4f:93:0f:ac:a0:3a:67:d7:f6:2d:68:
2e:1c:2f:ca:e7:f7:74:df:1e:7f:2b:90:35:d5:56:
c2:86:68:59:4c:18:2e:92:db:8f:9c:b4:fa:65:37:
5f:e3:16:ad:c6:90:52:d0:85:28:64:89:6b:38:24:
b4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:C2:AF:CF:BC:7B:F8:2D:38:20:AB:F2:51:40:D4:80:75:2D:01:58
X509v3 Authority Key Identifier:
keyid:CC:F9:A6:D2:F6:CD:58:8A:77:F4:23:62:2E:6B:8D:1C:65:4B:CD:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPmm0vbNWIp39CNiLmuNHGVLzfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/yMKvz7x7-C04IKvyUUDUgHUtAVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.201.16.0/20
185.185.128.0/22
IPv6:
2a06:8080::/29
Signature Algorithm: sha256WithRSAEncryption
6c:b2:1b:3c:38:fa:bd:85:6f:bc:1f:bd:1c:13:5f:9e:14:e3:
eb:69:b1:b0:7a:b5:55:d4:8e:8e:c6:5c:a5:45:c4:3f:ad:2c:
91:f9:72:44:0c:ac:be:9d:64:5f:9c:66:33:79:93:dd:47:93:
b0:6a:d5:7a:44:33:b3:57:62:ea:db:b1:9b:97:76:71:6b:7b:
1f:29:3b:b0:ea:c2:cb:e0:96:94:82:ee:e4:a9:63:6b:dd:9c:
13:85:50:4e:0b:2f:15:2a:a9:00:42:14:c9:a9:d4:a8:9d:b9:
b7:e1:9d:84:8a:7b:55:91:30:9a:4f:ff:e0:1f:71:f0:8a:3b:
77:6a:79:bd:1c:3e:7f:8d:64:ef:02:b2:0b:25:42:54:1d:13:
bd:71:ae:28:5b:7d:a3:0e:77:c1:80:b3:e5:17:c2:2f:f6:2a:
b3:44:cf:a1:1a:94:14:78:79:b5:94:10:14:3e:73:aa:2c:c9:
52:5f:50:1e:56:aa:78:68:8b:76:f4:da:84:d5:b6:05:88:42:
86:84:23:50:00:52:74:42:33:ce:43:74:70:44:4d:fb:13:6a:
2f:97:2b:17:ab:40:71:15:b1:0b:65:d4:6d:78:90:c8:ad:bf:
86:f0:d9:76:bf:08:37:b9:90:df:b5:5d:f5:fd:24:fa:14:9e:
5c:28:1a:b1
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIENOMmszANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
Y2Y5YTZkMmY2Y2Q1ODhhNzdmNDIzNjIyZTZiOGQxYzY1NGJjZGYyMB4XDTIyMDEw
MTAyNTIwN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzhjMmFmY2ZiYzdi
ZjgyZDM4MjBhYmYyNTE0MGQ0ODA3NTJkMDE1ODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMmLn5yW/7gA5VQuisQNnrPIXEvruM4VYC5dmwOaREn0CX/E
F+lnGeVumBCMDZf5oMUKoBoHF6szrr9yZUJ0K6J4cKs3IrrIX25BrUM523/ZAtjV
RbK7eQxu+2S/bdRQ0SkBj6Y4Ix9Jd6wtRR6DTEkbZoJQDqlkohAtEJCNFBlNxLAG
/17A/BxPbfhSRcALpc2o2dyoOf/cgv9P9fV7Qniu7R8Pe5N2LhZ3xdl30xbg0MK1
8UJa36H9S+lw4LVJ/+wlRpHUTU+TD6ygOmfX9i1oLhwvyuf3dN8efyuQNdVWwoZo
WUwYLpLbj5y0+mU3X+MWrcaQUtCFKGSJazgktH0CAwEAAaOCAh4wggIaMB0GA1Ud
DgQWBBTIwq/PvHv4LTggq/JRQNSAdS0BWDAfBgNVHSMEGDAWgBTM+abS9s1Yinf0
I2Iua40cZUvN8jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3pQbW0wdmJOV0lwMzlDTmlMbXVOSEdWTHpmSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGUvNDIxZTQwLWVkZjYtNDdhYS05YWJlLTFiMGYyNTRkZTYxOS8x
L3lNS3Z6N3g3LUMwNElLdnlVVURVZ0hVdEFWZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGUv
NDIxZTQwLWVkZjYtNDdhYS05YWJlLTFiMGYyNTRkZTYxOS8xL3pQbW0wdmJOV0lw
MzlDTmlMbXVOSEdWTHpmSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEBD7JEAMEArm5gDANBAIAAjAHAwUD
KgaAgDANBgkqhkiG9w0BAQsFAAOCAQEAbLIbPDj6vYVvvB+9HBNfnhTj62mxsHq1
VdSOjsZcpUXEP60skflyRAysvp1kX5xmM3mT3UeTsGrVekQzs1di6tuxm5d2cWt7
Hyk7sOrCy+CWlILu5Klja92cE4VQTgsvFSqpAEIUyanUqJ25t+GdhIp7VZEwmk//
4B9x8Io7d2p5vRw+f41k7wKyCyVCVB0TvXGuKFt9ow53wYCz5RfCL/Yqs0TPoRqU
FHh5tZQQFD5zqizJUl9QHlaqeGiLdvTahNW2BYhChoQjUABSdEIzzkN0cERN+xNq
L5crF6tAcRWxC2XUbXiQyK2/hvDZdr8IN7mQ37Vd9f0k+hSeXCgasQ==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:50:50 2025 by rpki-client