Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/TU4MoGYPGT7gNj0EYZuMuKzs5w8.roa
File: TU4MoGYPGT7gNj0EYZuMuKzs5w8.roa (raw, json)
Hash identifier: KaX44ZEl8Q6r6JZAmloPSMElf8rMsZhQva0aHqHe/Sc=
Subject key identifier: 4D:4E:0C:A0:66:0F:19:3E:E0:36:3D:04:61:9B:8C:B8:AC:EC:E7:0F
Certificate issuer: /CN=db9d197fbbee2a1dccb4f55722a8210d3105b042
Certificate serial: 02A9C828
Authority key identifier: DB:9D:19:7F:BB:EE:2A:1D:CC:B4:F5:57:22:A8:21:0D:31:05:B0:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/TU4MoGYPGT7gNj0EYZuMuKzs5w8.roa
Signing time: Sat 01 Jan 2022 15:57:08 +0000
ROA not before: Sat 01 Jan 2022 15:57:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48943
IP address blocks: 62.116.5.0/24 maxlen: 24
62.116.121.0/24 maxlen: 24
213.235.196.0/24 maxlen: 24
62.116.84.0/24 maxlen: 24
62.116.83.0/24 maxlen: 24
213.235.234.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44681256 (0x2a9c828)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9d197fbbee2a1dccb4f55722a8210d3105b042
Validity
Not Before: Jan 1 15:57:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4d4e0ca0660f193ee0363d04619b8cb8acece70f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:60:f5:c1:88:cb:5f:bc:e4:60:df:66:8d:08:
ce:94:53:d4:49:5d:bf:fd:8a:06:ae:17:58:3a:2a:
60:d9:35:44:7d:61:39:96:a1:3c:dc:a0:97:b8:4d:
44:be:f0:ce:e9:83:6f:fa:92:a9:4e:4d:e5:10:ce:
de:1f:6d:6a:42:13:72:34:34:44:6e:14:22:e8:87:
d5:a9:e2:0f:ad:86:6c:9f:5a:8a:7b:a1:01:03:71:
48:7e:7c:45:06:44:8d:55:ad:3e:50:4a:16:9c:b8:
e2:30:27:8a:b1:2b:10:bc:d4:a4:94:f7:3c:21:21:
a5:5b:fd:ee:cb:e1:f9:fe:c0:ef:b4:96:04:71:2c:
b8:62:5c:9c:d4:a7:d0:99:86:ea:9d:a9:69:04:6b:
3c:c5:6c:84:c8:db:fd:9f:52:be:26:4b:a7:4f:4f:
8a:7f:ab:33:ed:6d:34:e2:04:a4:9c:57:03:d8:6d:
14:5a:d4:74:17:5e:c7:a2:0e:7e:0e:92:33:10:3e:
77:d3:ab:40:b5:00:d0:20:3f:ad:9c:3a:42:73:82:
6b:c4:e5:5e:04:17:f7:f8:e9:04:7b:5a:9f:d6:b4:
3a:bc:48:28:09:85:fd:18:15:26:35:90:19:5a:3e:
77:ec:24:93:53:dd:96:a4:32:31:0f:27:15:2b:5b:
6f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:4E:0C:A0:66:0F:19:3E:E0:36:3D:04:61:9B:8C:B8:AC:EC:E7:0F
X509v3 Authority Key Identifier:
keyid:DB:9D:19:7F:BB:EE:2A:1D:CC:B4:F5:57:22:A8:21:0D:31:05:B0:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/TU4MoGYPGT7gNj0EYZuMuKzs5w8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.116.5.0/24
62.116.83.0-62.116.84.255
62.116.121.0/24
213.235.196.0/24
213.235.234.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:07:68:96:76:ca:1d:0f:97:91:f8:33:54:b7:da:d6:f1:67:
4a:b7:0b:71:92:41:b4:da:59:cf:47:2d:1c:e9:b1:8d:eb:5c:
53:77:15:f3:62:81:88:ac:c3:73:7e:9a:72:45:bf:c4:8c:fb:
09:84:b8:1d:7b:4f:99:9f:c8:5c:09:8f:71:5a:17:2c:36:0e:
2f:ba:ea:a5:f4:80:de:d9:98:ee:95:28:9e:a5:80:a1:d2:4c:
c0:e9:2c:9a:e9:60:11:48:19:50:06:d1:ad:70:4a:6f:62:9b:
ad:06:be:8b:11:d4:1a:5d:7e:9f:08:23:bf:e8:0a:e9:d7:33:
1d:c0:fd:87:bc:b3:70:e9:f1:5e:1b:45:9c:a8:ff:2c:ce:51:
41:66:ac:67:2f:20:cf:cf:1d:a3:49:f0:e8:57:6c:47:f3:87:
b3:a8:c9:02:78:f2:8c:a2:3c:f3:ee:28:ae:37:f3:ba:c8:b5:
8b:a9:14:81:20:c8:6c:7f:bb:8b:f3:20:f5:f7:18:be:34:cc:
72:51:69:ea:8e:89:f6:85:44:ee:61:fb:07:74:93:c3:df:9b:
39:af:00:a9:4b:fb:9f:db:33:3c:99:72:5a:61:33:e8:f6:0a:
b2:d7:44:f9:3d:4a:03:70:0a:f7:55:40:7d:8b:20:3d:48:d9:
8d:bb:75:ce
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgIEAqnIKDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
YjlkMTk3ZmJiZWUyYTFkY2NiNGY1NTcyMmE4MjEwZDMxMDViMDQyMB4XDTIyMDEw
MTE1NTcwOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNGQ0ZTBjYTA2NjBm
MTkzZWUwMzYzZDA0NjE5YjhjYjhhY2VjZTcwZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOpg9cGIy1+85GDfZo0IzpRT1Eldv/2KBq4XWDoqYNk1RH1h
OZahPNygl7hNRL7wzumDb/qSqU5N5RDO3h9takITcjQ0RG4UIuiH1aniD62GbJ9a
inuhAQNxSH58RQZEjVWtPlBKFpy44jAnirErELzUpJT3PCEhpVv97svh+f7A77SW
BHEsuGJcnNSn0JmG6p2paQRrPMVshMjb/Z9SviZLp09Pin+rM+1tNOIEpJxXA9ht
FFrUdBdex6IOfg6SMxA+d9OrQLUA0CA/rZw6QnOCa8TlXgQX9/jpBHtan9a0OrxI
KAmF/RgVJjWQGVo+d+wkk1PdlqQyMQ8nFStbb48CAwEAAaOCAikwggIlMB0GA1Ud
DgQWBBRNTgygZg8ZPuA2PQRhm4y4rOznDzAfBgNVHSMEGDAWgBTbnRl/u+4qHcy0
9VciqCENMQWwQjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzI1MFpmN3Z1S2gzTXRQVlhJcWdoRFRFRnNFSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWEvMDlkMTM3LTQ3N2ItNGVmZS1hM2QzLTRiMjM5NTZmYmQ4Ni8x
L1RVNE1vR1lQR1Q3Z05qMEVZWnVNdUt6czV3OC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWEv
MDlkMTM3LTQ3N2ItNGVmZS1hM2QzLTRiMjM5NTZmYmQ4Ni8xLzI1MFpmN3Z1S2gz
TXRQVlhJcWdoRFRFRnNFSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA/
BggrBgEFBQcBBwEB/wQwMC4wLAQCAAEwJgMEAD50BTAMAwQAPnRTAwQAPnRUAwQA
PnR5AwQA1evEAwQA1evqMA0GCSqGSIb3DQEBCwUAA4IBAQBNB2iWdsodD5eR+DNU
t9rW8WdKtwtxkkG02lnPRy0c6bGN61xTdxXzYoGIrMNzfppyRb/EjPsJhLgde0+Z
n8hcCY9xWhcsNg4vuuql9IDe2ZjulSiepYCh0kzA6Sya6WARSBlQBtGtcEpvYput
Br6LEdQaXX6fCCO/6Arp1zMdwP2HvLNw6fFeG0WcqP8szlFBZqxnLyDPzx2jSfDo
V2xH84ezqMkCePKMojzz7iiuN/O6yLWLqRSBIMhsf7uL8yD19xi+NMxyUWnqjon2
hUTuYfsHdJPD35s5rwCpS/uf2zM8mXJaYTPo9gqy10T5PUoDcAr3VUB9iyA9SNmN
u3XO
-----END CERTIFICATE-----
Generated at Sun Apr 20 15:33:10 2025 by rpki-client