Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/2l4yehzd4bMjFp8y5gI8dIpv-k8.roa
File: 2l4yehzd4bMjFp8y5gI8dIpv-k8.roa (raw, json)
Hash identifier: mm7zbrA1sOM4QTiSD8dFLqvCYqMM0l8BXtCFJEoQKm4=
Subject key identifier: DA:5E:32:7A:1C:DD:E1:B3:23:16:9F:32:E6:02:3C:74:8A:6F:FA:4F
Certificate issuer: /CN=4d8a9875d7d0d12bc47a70b7ede9a3ca64d82d32
Certificate serial: A5EB
Authority key identifier: 4D:8A:98:75:D7:D0:D1:2B:C4:7A:70:B7:ED:E9:A3:CA:64:D8:2D:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TYqYddfQ0SvEenC37emjymTYLTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/2l4yehzd4bMjFp8y5gI8dIpv-k8.roa
Signing time: Thu 02 Jun 2022 10:56:20 +0000
ROA not before: Thu 02 Jun 2022 10:56:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35701
IP address blocks: 62.122.36.0/22 maxlen: 22
62.122.39.0/24 maxlen: 24
2a05:7300::/30 maxlen: 30
2a05:7300::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42475 (0xa5eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d8a9875d7d0d12bc47a70b7ede9a3ca64d82d32
Validity
Not Before: Jun 2 10:56:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=da5e327a1cdde1b323169f32e6023c748a6ffa4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:98:6a:c0:ab:f7:cd:17:49:7a:2f:e1:a4:14:
a3:a0:80:67:11:90:cd:76:8b:7f:17:bb:dd:9c:1f:
11:62:65:38:d7:01:ff:20:eb:01:4c:bd:02:c2:a9:
67:53:dd:e9:53:c2:8f:cc:0e:1a:00:02:3e:07:8c:
02:1e:30:ad:97:2d:48:50:31:70:0d:19:64:87:76:
81:37:ff:0f:26:5e:7d:f3:94:ee:dc:72:82:a5:f5:
19:39:58:2b:89:c1:e8:4f:d9:ed:83:5f:2b:a8:0e:
a2:b6:b3:c3:02:28:43:4d:b1:1c:c6:8c:19:69:13:
1b:09:9a:a8:4a:4a:85:e8:63:93:26:2f:37:0f:1b:
88:7c:e8:7e:0f:d7:c0:21:c7:96:ce:b2:8e:9c:c3:
9a:5f:f9:af:38:86:1c:3f:6f:62:9a:2c:ab:e1:52:
82:a7:4d:82:6f:bc:30:cf:a5:6f:32:ea:a3:7d:1c:
19:34:82:2e:31:88:5a:7d:19:29:17:45:2b:0f:b8:
26:a0:5a:05:cc:dc:8d:f0:28:4a:15:f9:4a:42:32:
09:82:4d:c6:c8:ff:12:22:bf:80:59:97:2e:a5:70:
1b:14:71:35:84:9e:ff:0f:f5:60:6b:10:3c:df:ce:
8e:23:04:04:29:6a:09:56:f9:0e:4d:73:54:df:70:
26:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:5E:32:7A:1C:DD:E1:B3:23:16:9F:32:E6:02:3C:74:8A:6F:FA:4F
X509v3 Authority Key Identifier:
keyid:4D:8A:98:75:D7:D0:D1:2B:C4:7A:70:B7:ED:E9:A3:CA:64:D8:2D:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYqYddfQ0SvEenC37emjymTYLTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/2l4yehzd4bMjFp8y5gI8dIpv-k8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.122.36.0/22
IPv6:
2a05:7300::/30
Signature Algorithm: sha256WithRSAEncryption
87:87:88:8b:81:63:70:bd:13:c9:bf:fd:75:00:c2:1a:7f:34:
47:b4:80:0b:79:b0:09:d8:81:df:0c:a7:29:4b:06:a3:ce:04:
02:f0:f2:8d:54:b6:c9:3c:17:ba:3b:4c:2c:a9:41:7a:ae:6a:
83:57:ae:f7:ed:89:46:51:b6:4e:90:8b:70:8b:af:d1:c8:91:
4e:6d:ba:8f:2b:e1:30:4c:30:68:78:d8:21:a1:5a:bc:87:2b:
4f:77:6c:63:13:32:79:12:55:39:0e:07:62:2f:6e:ef:f2:8a:
1a:e5:1d:4c:12:07:bf:74:cf:4d:52:51:8e:ed:89:f3:65:07:
95:c6:8c:c1:73:1e:7c:1f:48:12:4b:47:f7:5f:c0:cb:a5:f0:
f8:1b:0b:d7:9e:a2:f1:98:04:a9:85:a2:80:bf:94:d6:f4:af:
e5:96:6d:bd:63:18:a6:23:af:e0:50:97:ec:e1:3e:be:df:90:
40:2e:ab:b6:b3:04:a2:fb:7d:d4:7f:ce:4e:82:a7:fb:8b:51:
9f:e3:98:77:bd:c5:31:e3:d4:ee:79:c8:66:39:c7:72:f9:12:
03:3b:26:14:85:1c:bc:74:3c:19:b6:56:cf:d6:41:9a:20:44:
6e:c9:59:e2:43:55:b4:fb:69:49:01:3f:f1:df:48:b6:fa:09:
1f:9d:c8:bd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgIDAKXrMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDRk
OGE5ODc1ZDdkMGQxMmJjNDdhNzBiN2VkZTlhM2NhNjRkODJkMzIwHhcNMjIwNjAy
MTA1NjIwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhkYTVlMzI3YTFjZGRl
MWIzMjMxNjlmMzJlNjAyM2M3NDhhNmZmYTRmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkZhqwKv3zRdJei/hpBSjoIBnEZDNdot/F7vdnB8RYmU41wH/
IOsBTL0CwqlnU93pU8KPzA4aAAI+B4wCHjCtly1IUDFwDRlkh3aBN/8PJl5985Tu
3HKCpfUZOVgricHoT9ntg18rqA6itrPDAihDTbEcxowZaRMbCZqoSkqF6GOTJi83
DxuIfOh+D9fAIceWzrKOnMOaX/mvOIYcP29imiyr4VKCp02Cb7wwz6VvMuqjfRwZ
NIIuMYhafRkpF0UrD7gmoFoFzNyN8ChKFflKQjIJgk3GyP8SIr+AWZcupXAbFHE1
hJ7/D/VgaxA8386OIwQEKWoJVvkOTXNU33AmzQIDAQABo4ICGDCCAhQwHQYDVR0O
BBYEFNpeMnoc3eGzIxafMuYCPHSKb/pPMB8GA1UdIwQYMBaAFE2KmHXX0NErxHpw
t+3po8pk2C0yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
VFlxWWRkZlEwU3ZFZW5DMzdlbWp5bVRZTFRJLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC83Yi85NWQ3ODAtYmFhZC00ZGI3LWJlYjUtNDU0NTk5YTRkMjJjLzEv
Mmw0eWVoemQ0Yk1qRnA4eTVnSThkSXB2LWs4LnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi85
NWQ3ODAtYmFhZC00ZGI3LWJlYjUtNDU0NTk5YTRkMjJjLzEvVFlxWWRkZlEwU3ZF
ZW5DMzdlbWp5bVRZTFRJLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4G
CCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCPnokMA0EAgACMAcDBQIqBXMAMA0G
CSqGSIb3DQEBCwUAA4IBAQCHh4iLgWNwvRPJv/11AMIafzRHtIALebAJ2IHfDKcp
SwajzgQC8PKNVLbJPBe6O0wsqUF6rmqDV6737YlGUbZOkItwi6/RyJFObbqPK+Ew
TDBoeNghoVq8hytPd2xjEzJ5ElU5DgdiL27v8ooa5R1MEge/dM9NUlGO7YnzZQeV
xozBcx58H0gSS0f3X8DLpfD4GwvXnqLxmASphaKAv5TW9K/llm29YximI6/gUJfs
4T6+35BALqu2swSi+33Uf85Ogqf7i1Gf45h3vcUx49TuechmOcdy+RIDOyYUhRy8
dDwZtlbP1kGaIERuyVniQ1W0+2lJAT/x30i2+gkfnci9
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:09 2024 by rpki-client on console-fra.rpki-client.org