Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/62f25f-8b1b-415b-9fc8-cc935cd73632/1/Z2HySJaHs0zUUszuEeRdaoAqcOM.roa
File: Z2HySJaHs0zUUszuEeRdaoAqcOM.roa (raw, json)
Hash identifier: Uvg2/bsx3NHVeGDtWdaHVRvdnVwwH+Z+p0DFQTM0e9U=
Subject key identifier: 67:61:F2:48:96:87:B3:4C:D4:52:CC:EE:11:E4:5D:6A:80:2A:70:E3
Certificate issuer: /CN=4aae42a27e7bc2cc3507efa7e3cbc29d32eea133
Certificate serial: 03EB4ABF
Authority key identifier: 4A:AE:42:A2:7E:7B:C2:CC:35:07:EF:A7:E3:CB:C2:9D:32:EE:A1:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sq5Con57wsw1B--n48vCnTLuoTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/62f25f-8b1b-415b-9fc8-cc935cd73632/1/Z2HySJaHs0zUUszuEeRdaoAqcOM.roa
Signing time: Sat 01 Jan 2022 11:54:29 +0000
ROA not before: Sat 01 Jan 2022 11:54:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62282
IP address blocks: 109.235.64.0/21 maxlen: 21
176.223.128.0/20 maxlen: 20
31.14.176.0/22 maxlen: 22
79.98.24.0/21 maxlen: 21
80.208.224.0/21 maxlen: 21
195.181.240.0/21 maxlen: 21
94.176.232.0/21 maxlen: 21
62.77.152.0/21 maxlen: 21
185.5.52.0/22 maxlen: 22
185.69.52.0/22 maxlen: 22
80.209.224.0/20 maxlen: 20
212.24.96.0/20 maxlen: 20
185.81.164.0/22 maxlen: 22
212.237.232.0/22 maxlen: 22
89.40.0.0/20 maxlen: 20
89.47.160.0/21 maxlen: 21
89.47.172.0/24 maxlen: 24
89.47.175.0/24 maxlen: 24
89.47.174.0/24 maxlen: 24
89.47.173.0/24 maxlen: 24
194.135.80.0/20 maxlen: 20
2a02:7b40::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65751743 (0x3eb4abf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aae42a27e7bc2cc3507efa7e3cbc29d32eea133
Validity
Not Before: Jan 1 11:54:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6761f2489687b34cd452ccee11e45d6a802a70e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:95:c3:d6:4b:bc:20:df:e1:3a:b9:cd:fb:39:
ef:d1:20:5d:ef:cc:c4:6b:35:23:2a:67:db:b1:a5:
6a:f1:58:9d:19:be:cc:f7:f0:e6:7b:30:e3:5b:04:
e3:06:ec:6f:e4:e5:a9:8a:12:ec:f5:17:b2:0a:77:
aa:04:82:57:37:45:50:21:9c:7d:f2:21:79:e9:b1:
ba:8c:44:f2:50:1c:fc:5f:a8:f4:9e:d5:58:32:9f:
f1:d3:d6:4f:07:ba:95:af:ff:56:32:0d:20:4b:98:
c3:8b:52:06:ae:cb:42:48:3a:6e:98:f8:32:60:a1:
44:7c:64:70:9e:84:02:fa:71:42:e7:9f:80:cc:56:
5c:48:f2:fe:fd:07:eb:18:ed:ff:63:4b:1a:91:44:
c4:c5:de:d3:3a:d4:b2:36:24:a6:0c:86:00:18:82:
e0:45:4a:d2:9a:21:81:66:19:1e:3d:67:24:89:47:
90:5a:ad:dc:70:67:34:e7:1c:1d:e6:cb:da:5b:69:
74:f4:82:ef:74:06:5f:95:8b:0f:8d:85:4c:2c:61:
78:7f:41:e9:07:2f:29:29:d8:94:d6:ae:99:9a:b2:
66:68:b4:73:7d:28:41:a6:95:92:a2:98:0c:e4:3e:
92:57:68:99:3c:ab:4d:66:61:77:d6:97:f1:3b:91:
ea:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:61:F2:48:96:87:B3:4C:D4:52:CC:EE:11:E4:5D:6A:80:2A:70:E3
X509v3 Authority Key Identifier:
keyid:4A:AE:42:A2:7E:7B:C2:CC:35:07:EF:A7:E3:CB:C2:9D:32:EE:A1:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sq5Con57wsw1B--n48vCnTLuoTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/62f25f-8b1b-415b-9fc8-cc935cd73632/1/Z2HySJaHs0zUUszuEeRdaoAqcOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/62f25f-8b1b-415b-9fc8-cc935cd73632/1/Sq5Con57wsw1B--n48vCnTLuoTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.176.0/22
62.77.152.0/21
79.98.24.0/21
80.208.224.0/21
80.209.224.0/20
89.40.0.0/20
89.47.160.0/21
89.47.172.0/22
94.176.232.0/21
109.235.64.0/21
176.223.128.0/20
185.5.52.0/22
185.69.52.0/22
185.81.164.0/22
194.135.80.0/20
195.181.240.0/21
212.24.96.0/20
212.237.232.0/22
IPv6:
2a02:7b40::/32
Signature Algorithm: sha256WithRSAEncryption
7f:37:29:aa:dc:90:6d:e1:b4:dc:f6:eb:ff:3a:b0:d1:72:95:
26:45:e4:40:38:82:da:10:a5:2b:4a:31:68:55:64:4d:b3:d0:
61:9e:75:f8:10:09:5e:20:de:71:db:1d:05:b1:50:db:1c:62:
11:3c:c6:af:f2:69:ec:e5:ea:d7:e6:a2:3a:ca:12:ab:e4:d9:
46:95:07:62:74:b5:8e:f8:16:61:e5:e5:1f:a5:da:5e:6a:93:
59:b4:2d:32:6b:c6:ae:51:e8:68:f4:8a:d5:f9:a0:8e:97:03:
f2:10:65:f9:e5:c0:13:17:ef:0e:f3:09:b7:55:b8:fb:93:62:
1e:08:92:44:64:ff:92:13:a4:62:45:9b:8d:cb:0e:2d:d2:b5:
1b:9c:7f:9d:9f:7c:de:b7:d5:d2:a4:44:54:c7:2a:12:cd:e1:
b3:7b:12:ec:c4:f9:d8:f3:74:0c:f4:eb:a3:1b:dd:57:ae:20:
5b:09:f7:a5:5a:73:bc:ce:ff:c7:af:41:0a:11:67:ce:52:49:
99:62:93:ba:3b:03:7b:75:5c:03:b0:75:d7:53:0c:ce:09:40:
e6:69:34:8f:88:6f:e3:de:4d:c4:35:79:35:de:09:e5:66:0c:
1b:82:fd:16:3e:4d:29:8c:36:35:14:27:c8:d0:58:e1:65:1d:
f5:fc:12:e3
-----BEGIN CERTIFICATE-----
MIIFZzCCBE+gAwIBAgIEA+tKvzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YWFlNDJhMjdlN2JjMmNjMzUwN2VmYTdlM2NiYzI5ZDMyZWVhMTMzMB4XDTIyMDEw
MTExNTQyOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjc2MWYyNDg5Njg3
YjM0Y2Q0NTJjY2VlMTFlNDVkNmE4MDJhNzBlMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKKVw9ZLvCDf4Tq5zfs579EgXe/MxGs1Iypn27GlavFYnRm+
zPfw5nsw41sE4wbsb+TlqYoS7PUXsgp3qgSCVzdFUCGcffIheemxuoxE8lAc/F+o
9J7VWDKf8dPWTwe6la//VjINIEuYw4tSBq7LQkg6bpj4MmChRHxkcJ6EAvpxQuef
gMxWXEjy/v0H6xjt/2NLGpFExMXe0zrUsjYkpgyGABiC4EVK0pohgWYZHj1nJIlH
kFqt3HBnNOccHebL2ltpdPSC73QGX5WLD42FTCxheH9B6QcvKSnYlNaumZqyZmi0
c30oQaaVkqKYDOQ+kldomTyrTWZhd9aX8TuR6uUCAwEAAaOCAoEwggJ9MB0GA1Ud
DgQWBBRnYfJIloezTNRSzO4R5F1qgCpw4zAfBgNVHSMEGDAWgBRKrkKifnvCzDUH
76fjy8KdMu6hMzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1NxNUNvbjU3d3N3MUItLW40OHZDblRMdW9UTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzAvNjJmMjVmLThiMWItNDE1Yi05ZmM4LWNjOTM1Y2Q3MzYzMi8x
L1oySHlTSmFIczB6VVVzenVFZVJkYW9BcWNPTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzAv
NjJmMjVmLThiMWItNDE1Yi05ZmM4LWNjOTM1Y2Q3MzYzMi8xL1NxNUNvbjU3d3N3
MUItLW40OHZDblRMdW9UTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCB
lgYIKwYBBQUHAQcBAf8EgYYwgYMwcgQCAAEwbAMEAh8OsAMEAz5NmAMEA09iGAME
A1DQ4AMEBFDR4AMEBFkoAAMEA1kvoAMEAlkvrAMEA16w6AMEA23rQAMEBLDfgAME
ArkFNAMEArlFNAMEArlRpAMEBMKHUAMEA8O18AMEBNQYYAMEAtTt6DANBAIAAjAH
AwUAKgJ7QDANBgkqhkiG9w0BAQsFAAOCAQEAfzcpqtyQbeG03Pbr/zqw0XKVJkXk
QDiC2hClK0oxaFVkTbPQYZ51+BAJXiDecdsdBbFQ2xxiETzGr/Jp7OXq1+aiOsoS
q+TZRpUHYnS1jvgWYeXlH6XaXmqTWbQtMmvGrlHoaPSK1fmgjpcD8hBl+eXAExfv
DvMJt1W4+5NiHgiSRGT/khOkYkWbjcsOLdK1G5x/nZ983rfV0qREVMcqEs3hs3sS
7MT52PN0DPTroxvdV64gWwn3pVpzvM7/x69BChFnzlJJmWKTujsDe3VcA7B111MM
zglA5mk0j4hv495NxDV5Nd4J5WYMG4L9Fj5NKYw2NRQnyNBY4WUd9fwS4w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:28 2024 by rpki-client on console-fra.rpki-client.org