Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/4wP_J-RbOL4hhhksWnSLyiBchlg.roa
File: 4wP_J-RbOL4hhhksWnSLyiBchlg.roa (raw, json)
Hash identifier: HKvwr96gvulQzMmeaNO27BsgBfwiRhCJZnNv1uDPd5M=
Subject key identifier: E3:03:FF:27:E4:5B:38:BE:21:86:19:2C:5A:74:8B:CA:20:5C:86:58
Certificate issuer: /CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Certificate serial: 37B5E5F3
Authority key identifier: 36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/4wP_J-RbOL4hhhksWnSLyiBchlg.roa
Signing time: Wed 09 Mar 2022 10:55:57 +0000
ROA not before: Wed 09 Mar 2022 10:55:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44217
IP address blocks: 62.201.228.0/22 maxlen: 22
62.201.229.0/24 maxlen: 24
62.201.227.0/24 maxlen: 24
62.201.228.0/24 maxlen: 24
62.201.232.0/24 maxlen: 24
62.201.233.0/24 maxlen: 24
62.201.230.0/24 maxlen: 24
62.201.231.0/24 maxlen: 24
62.201.232.0/22 maxlen: 22
62.201.236.0/24 maxlen: 24
62.201.234.0/24 maxlen: 24
62.201.235.0/24 maxlen: 24
62.201.239.0/24 maxlen: 24
62.201.240.0/24 maxlen: 24
62.201.237.0/24 maxlen: 24
62.201.238.0/24 maxlen: 24
62.201.240.0/21 maxlen: 21
62.201.243.0/24 maxlen: 24
62.201.241.0/24 maxlen: 24
62.201.242.0/23 maxlen: 24
62.201.242.0/24 maxlen: 24
62.201.246.0/24 maxlen: 24
62.201.244.0/23 maxlen: 23
62.201.253.0/24 maxlen: 24
62.201.251.0/24 maxlen: 24
62.201.252.0/22 maxlen: 24
62.201.247.0/24 maxlen: 24
62.201.248.0/23 maxlen: 23
62.201.250.0/24 maxlen: 24
62.201.248.0/24 maxlen: 24
62.201.249.0/24 maxlen: 24
62.201.254.0/23 maxlen: 24
89.33.66.0/23 maxlen: 23
62.201.192.0/23 maxlen: 23
62.201.194.0/24 maxlen: 24
62.201.195.0/24 maxlen: 24
62.201.192.0/18 maxlen: 18
62.201.193.0/24 maxlen: 24
62.201.200.0/22 maxlen: 22
62.201.201.0/24 maxlen: 24
62.201.202.0/24 maxlen: 24
62.201.200.0/24 maxlen: 24
62.201.204.0/24 maxlen: 24
62.201.205.0/24 maxlen: 24
62.201.203.0/24 maxlen: 24
62.201.204.0/23 maxlen: 23
62.201.206.0/23 maxlen: 23
62.201.212.0/24 maxlen: 24
62.201.208.0/24 maxlen: 24
62.201.209.0/24 maxlen: 24
62.201.208.0/22 maxlen: 22
62.201.207.0/24 maxlen: 24
62.201.211.0/24 maxlen: 24
62.201.212.0/22 maxlen: 22
62.201.210.0/24 maxlen: 24
62.201.213.0/24 maxlen: 24
62.201.215.0/24 maxlen: 24
62.201.216.0/24 maxlen: 24
62.201.214.0/24 maxlen: 24
62.201.218.0/24 maxlen: 24
62.201.219.0/24 maxlen: 24
62.201.217.0/24 maxlen: 24
62.201.221.0/24 maxlen: 24
62.201.222.0/24 maxlen: 24
62.201.220.0/22 maxlen: 22
62.201.220.0/24 maxlen: 24
62.201.225.0/24 maxlen: 24
62.201.224.0/22 maxlen: 22
62.201.226.0/24 maxlen: 24
62.201.223.0/24 maxlen: 24
62.201.224.0/24 maxlen: 24
185.1.98.0/24 maxlen: 24
2a02:b60:2010::/48 maxlen: 48
2a02:b60::/64 maxlen: 64
2a02:b60:4000::/48 maxlen: 48
2a02:b60:2000::/48 maxlen: 48
2a02:b60:2000:3::/64 maxlen: 64
2a02:b60:0:f::/64 maxlen: 64
2a02:b60:4000::/34 maxlen: 34
2a02:b60:2000::/35 maxlen: 35
2a02:b60::/32 maxlen: 32
2a02:b60:20::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 934667763 (0x37b5e5f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Validity
Not Before: Mar 9 10:55:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e303ff27e45b38be2186192c5a748bca205c8658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ce:59:e0:28:c9:09:4d:d8:08:92:d0:60:9c:
91:1b:66:0d:0f:84:4c:6f:3d:b6:e6:ff:3b:8e:4b:
e6:70:e5:b9:4c:48:8e:b7:2f:f3:23:ee:4c:44:4c:
5f:9f:73:e1:79:bd:44:b6:9f:3b:e0:e2:98:3a:af:
8e:42:8f:a9:b3:4a:a4:b5:90:2e:d6:bb:17:98:b2:
10:1d:e4:58:b1:d4:b0:7b:45:ab:a2:b5:0c:18:4c:
90:28:7e:64:e3:a1:73:46:2f:3e:3f:ea:d0:b1:64:
85:98:f2:6d:8f:be:ee:65:ac:34:2d:7a:d2:61:0d:
04:da:1b:f4:7c:82:9b:3b:f8:a0:84:95:2c:27:e8:
2b:bb:e7:5c:5d:7f:e4:46:eb:b5:1c:eb:10:60:03:
9f:0c:9c:17:76:24:78:81:58:82:35:d0:24:39:d6:
01:16:a2:2f:8a:a9:55:0d:6d:8d:65:38:df:ce:d1:
e0:27:31:ad:93:46:fa:22:e7:52:be:01:1f:22:24:
61:5d:8b:f8:2a:6b:f0:64:be:ec:cb:0c:18:c4:84:
6c:8b:b8:89:41:49:e8:69:79:fa:48:c6:c6:98:e4:
14:f3:3d:fc:a4:c6:fa:e8:1b:9f:c0:b9:a4:5d:e4:
e1:c2:3a:90:1b:ca:e4:b6:fd:bd:9b:24:3f:34:94:
ae:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:03:FF:27:E4:5B:38:BE:21:86:19:2C:5A:74:8B:CA:20:5C:86:58
X509v3 Authority Key Identifier:
keyid:36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/4wP_J-RbOL4hhhksWnSLyiBchlg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.201.192.0/18
89.33.66.0/23
185.1.98.0/24
IPv6:
2a02:b60::/32
Signature Algorithm: sha256WithRSAEncryption
13:e6:8a:5b:6f:af:c7:59:b7:95:9a:64:8a:b6:93:19:ff:b5:
dc:ba:f4:36:33:cc:05:49:47:87:e3:18:64:a5:f3:d6:78:f1:
36:c6:b1:f6:be:e4:60:95:a7:07:47:bb:82:13:1c:6e:f7:7f:
eb:a7:18:dd:f5:9d:2d:ef:ee:46:78:87:08:72:0e:d4:e9:bc:
de:82:c3:1e:9b:d6:75:4c:bf:16:5a:32:e6:c0:d7:a8:cf:52:
aa:20:70:2a:4e:1a:c0:31:97:fd:4e:48:e5:88:40:64:0a:9b:
11:f1:3d:3e:59:5c:df:70:e7:bb:1c:39:5c:dc:90:e3:ea:dc:
a8:75:76:02:c5:63:6e:a5:6f:84:81:99:55:de:da:7d:5f:ed:
b9:aa:1f:c3:e5:b3:19:68:56:91:f8:82:68:b2:70:25:24:84:
3c:1c:6a:fa:1e:12:d7:98:6a:8e:c1:c6:78:f4:96:64:7a:44:
94:b2:03:76:a2:05:a5:0c:7d:42:28:47:cd:5d:3e:3b:43:53:
1a:9b:8f:ea:10:1f:08:e3:da:c9:71:c5:c2:a0:3a:6f:d6:02:
74:9c:67:45:a0:26:d5:92:82:d6:9f:f9:ec:1a:7b:a0:d3:8e:
63:9c:34:30:8e:c2:6c:41:19:1d:2c:df:19:9c:88:fb:fc:ec:
8e:2d:7a:8f
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIEN7Xl8zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
NjkyZmVkZjU5YzYwZDMyNTRlMzdhOWM4ZWNkZTExYzliYTEyODJhMB4XDTIyMDMw
OTEwNTU1N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTMwM2ZmMjdlNDVi
MzhiZTIxODYxOTJjNWE3NDhiY2EyMDVjODY1ODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL/OWeAoyQlN2AiS0GCckRtmDQ+ETG89tub/O45L5nDluUxI
jrcv8yPuTERMX59z4Xm9RLafO+DimDqvjkKPqbNKpLWQLta7F5iyEB3kWLHUsHtF
q6K1DBhMkCh+ZOOhc0YvPj/q0LFkhZjybY++7mWsNC160mENBNob9HyCmzv4oISV
LCfoK7vnXF1/5EbrtRzrEGADnwycF3YkeIFYgjXQJDnWARaiL4qpVQ1tjWU4387R
4CcxrZNG+iLnUr4BHyIkYV2L+Cpr8GS+7MsMGMSEbIu4iUFJ6Gl5+kjGxpjkFPM9
/KTG+ugbn8C5pF3k4cI6kBvK5Lb9vZskPzSUrr8CAwEAAaOCAiQwggIgMB0GA1Ud
DgQWBBTjA/8n5Fs4viGGGSxadIvKIFyGWDAfBgNVHSMEGDAWgBQ2kv7fWcYNMlTj
epyOzeEcm6EoKjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L05wTC0zMW5HRFRKVTQzcWNqczNoSEp1aEtDby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzIvNWM1YWQwLWQyZGEtNDBkYi05NWQxLWU3YmU1ZTMwYWQyZC8x
LzR3UF9KLVJiT0w0aGhoa3NXblNMeWlCY2hsZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzIv
NWM1YWQwLWQyZGEtNDBkYi05NWQxLWU3YmU1ZTMwYWQyZC8xL05wTC0zMW5HRFRK
VTQzcWNqczNoSEp1aEtDby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA6
BggrBgEFBQcBBwEB/wQrMCkwGAQCAAEwEgMEBj7JwAMEAVkhQgMEALkBYjANBAIA
AjAHAwUAKgILYDANBgkqhkiG9w0BAQsFAAOCAQEAE+aKW2+vx1m3lZpkiraTGf+1
3Lr0NjPMBUlHh+MYZKXz1njxNsax9r7kYJWnB0e7ghMcbvd/66cY3fWdLe/uRniH
CHIO1Om83oLDHpvWdUy/Floy5sDXqM9SqiBwKk4awDGX/U5I5YhAZAqbEfE9Pllc
33Dnuxw5XNyQ4+rcqHV2AsVjbqVvhIGZVd7afV/tuaofw+WzGWhWkfiCaLJwJSSE
PBxq+h4S15hqjsHGePSWZHpElLIDdqIFpQx9QihHzV0+O0NTGpuP6hAfCOPayXHF
wqA6b9YCdJxnRaAm1ZKC1p/57Bp7oNOOY5w0MI7CbEEZHSzfGZyI+/zsji16jw==
-----END CERTIFICATE-----
Generated at Mon Apr 14 13:15:48 2025 by rpki-client