Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/Yzt9DzpN7gXlOWUdSHrh5SvZeqw.roa
File: Yzt9DzpN7gXlOWUdSHrh5SvZeqw.roa (raw, json)
Hash identifier: b41p12C2Zy+9xtEOFPKvoQfC810tSuTptwGG3oMyci8=
Subject key identifier: 63:3B:7D:0F:3A:4D:EE:05:E5:39:65:1D:48:7A:E1:E5:2B:D9:7A:AC
Certificate issuer: /CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Certificate serial: 37B8EBC7
Authority key identifier: 36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/Yzt9DzpN7gXlOWUdSHrh5SvZeqw.roa
Signing time: Thu 10 Mar 2022 06:01:46 +0000
ROA not before: Thu 10 Mar 2022 06:01:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44217
IP address blocks: 62.201.228.0/22 maxlen: 22
62.201.229.0/24 maxlen: 24
62.201.227.0/24 maxlen: 24
62.201.228.0/24 maxlen: 24
62.201.232.0/24 maxlen: 24
62.201.233.0/24 maxlen: 24
62.201.230.0/24 maxlen: 24
62.201.231.0/24 maxlen: 24
62.201.232.0/22 maxlen: 22
62.201.236.0/24 maxlen: 24
62.201.234.0/24 maxlen: 24
62.201.235.0/24 maxlen: 24
62.201.239.0/24 maxlen: 24
62.201.240.0/24 maxlen: 24
62.201.237.0/24 maxlen: 24
62.201.238.0/24 maxlen: 24
62.201.240.0/21 maxlen: 21
62.201.243.0/24 maxlen: 24
62.201.241.0/24 maxlen: 24
62.201.242.0/24 maxlen: 24
62.201.242.0/23 maxlen: 24
62.201.246.0/24 maxlen: 24
62.201.244.0/23 maxlen: 23
62.201.253.0/24 maxlen: 24
62.201.251.0/24 maxlen: 24
62.201.252.0/22 maxlen: 24
62.201.247.0/24 maxlen: 24
62.201.248.0/23 maxlen: 23
62.201.250.0/24 maxlen: 24
62.201.248.0/24 maxlen: 24
62.201.249.0/24 maxlen: 24
62.201.254.0/23 maxlen: 24
89.33.66.0/23 maxlen: 23
62.201.192.0/23 maxlen: 23
62.201.194.0/24 maxlen: 24
62.201.195.0/24 maxlen: 24
62.201.192.0/18 maxlen: 18
62.201.193.0/24 maxlen: 24
62.201.200.0/22 maxlen: 22
62.201.201.0/24 maxlen: 24
62.201.202.0/24 maxlen: 24
62.201.200.0/24 maxlen: 24
62.201.204.0/24 maxlen: 24
62.201.205.0/24 maxlen: 24
62.201.203.0/24 maxlen: 24
62.201.204.0/23 maxlen: 23
62.201.206.0/23 maxlen: 23
62.201.212.0/24 maxlen: 24
62.201.208.0/24 maxlen: 24
62.201.209.0/24 maxlen: 24
62.201.208.0/22 maxlen: 22
62.201.207.0/24 maxlen: 24
62.201.211.0/24 maxlen: 24
62.201.212.0/22 maxlen: 22
62.201.210.0/24 maxlen: 24
62.201.213.0/24 maxlen: 24
62.201.215.0/24 maxlen: 24
62.201.216.0/24 maxlen: 24
62.201.214.0/24 maxlen: 24
62.201.218.0/24 maxlen: 24
62.201.219.0/24 maxlen: 24
62.201.217.0/24 maxlen: 24
62.201.221.0/24 maxlen: 24
62.201.222.0/24 maxlen: 24
62.201.220.0/22 maxlen: 22
62.201.220.0/24 maxlen: 24
62.201.225.0/24 maxlen: 24
62.201.224.0/22 maxlen: 22
62.201.226.0/24 maxlen: 24
62.201.223.0/24 maxlen: 24
62.201.224.0/24 maxlen: 24
185.1.98.0/24 maxlen: 24
2a02:b60:2010::/48 maxlen: 48
2a02:b60::/64 maxlen: 64
2a02:b60:2000::/48 maxlen: 48
2a02:b60:4000::/48 maxlen: 48
2a02:b60:2000:3::/64 maxlen: 64
2a02:b60:4005::/48 maxlen: 48
2a02:b60:0:f::/64 maxlen: 64
2a02:b60:4000::/34 maxlen: 34
2a02:b60:2000::/35 maxlen: 35
2a02:b60::/32 maxlen: 32
2a02:b60:20::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 934865863 (0x37b8ebc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Validity
Not Before: Mar 10 06:01:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=633b7d0f3a4dee05e539651d487ae1e52bd97aac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:20:2e:2c:7d:64:7a:6a:a3:9b:99:b8:4a:00:
14:5a:34:39:de:6e:ef:d6:af:00:14:9f:75:11:f2:
a3:67:30:9c:8a:2c:93:f6:6f:b0:12:99:4f:f5:03:
ee:13:1f:80:73:46:5c:13:72:2d:e7:5e:fc:52:f6:
2a:51:c1:aa:2a:aa:4e:88:77:35:35:3d:9e:4f:5f:
7e:ed:71:34:79:7b:0e:27:5c:5e:37:07:d4:f7:91:
39:21:0e:be:0e:a9:1f:ae:29:3a:fc:27:a8:f3:9d:
aa:0e:a0:d2:68:38:42:e8:76:5f:38:ae:d4:4d:e8:
9f:1e:da:50:57:1a:7b:69:98:2a:f0:aa:76:0a:e7:
3b:45:91:45:31:ad:da:f6:b4:a1:3e:93:27:06:6a:
46:2a:6a:14:56:05:ea:8a:43:a1:0a:cd:ff:b4:ea:
18:d1:21:0c:7b:58:f4:ec:ba:1f:28:0b:12:e6:6e:
e0:3b:bc:4c:89:82:ab:74:1b:68:26:80:b0:a5:23:
18:80:15:1d:4e:12:a2:a5:c6:54:7e:6f:a9:60:f3:
6a:18:af:0f:cc:55:70:05:93:51:19:11:39:ec:d4:
81:d7:67:04:1d:a8:c9:05:6f:9e:12:59:f2:30:cf:
d6:6f:3a:19:a1:94:a7:b1:45:96:3c:26:f6:1c:d1:
07:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:3B:7D:0F:3A:4D:EE:05:E5:39:65:1D:48:7A:E1:E5:2B:D9:7A:AC
X509v3 Authority Key Identifier:
keyid:36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/Yzt9DzpN7gXlOWUdSHrh5SvZeqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.201.192.0/18
89.33.66.0/23
185.1.98.0/24
IPv6:
2a02:b60::/32
Signature Algorithm: sha256WithRSAEncryption
d3:a5:65:d7:7b:87:6b:6b:99:f7:80:b3:37:81:e6:28:98:3e:
48:2f:51:45:df:a4:11:8b:b9:54:0d:68:4d:46:c6:5c:fd:54:
18:77:4d:60:ab:b4:9a:e6:43:7f:03:bf:09:5e:eb:a4:be:12:
32:e8:e3:d9:fc:44:f9:26:55:26:21:71:6c:6e:90:6d:a8:70:
29:de:f6:ec:14:5b:f2:50:98:26:90:0e:59:1e:8d:08:a3:17:
94:ee:ee:aa:82:a5:a2:53:da:f0:8f:3c:a8:de:db:58:ec:1d:
43:ff:77:34:1c:d6:36:b4:71:a4:e6:6b:67:43:fe:4c:fb:ba:
8d:f3:2c:26:c8:d2:87:a8:d0:27:a5:97:e8:83:97:1a:5a:57:
8f:0c:56:37:0a:c6:e4:09:a6:7b:33:1f:1e:14:1f:8f:54:04:
af:00:4e:81:51:c8:ab:92:7a:cf:bb:bd:00:49:48:c0:f2:46:
7f:bd:cd:21:96:9c:ce:56:9b:47:37:77:9d:c5:28:39:16:02:
9f:62:03:5c:96:71:a8:64:d2:ea:35:ff:91:20:5b:4c:22:05:
a6:b4:ac:9d:0f:70:8e:f1:08:84:3c:62:4a:01:c7:5e:75:6c:
bd:97:9a:f9:eb:18:9a:bd:b1:0d:ed:e4:6e:b5:44:8c:22:f9:
a9:de:c2:2b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 14 13:29:50 2025 by rpki-client