Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/_Wv-BAfFqkPfOVmQeSLvDgMQ1eU.roa
File: _Wv-BAfFqkPfOVmQeSLvDgMQ1eU.roa (raw, json)
Hash identifier: Vz7BTEo3wskqPv0iE3/RDAWvM9YdLDvYWEvc0+r9Cyw=
Subject key identifier: FD:6B:FE:04:07:C5:AA:43:DF:39:59:90:79:22:EF:0E:03:10:D5:E5
Certificate issuer: /CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Certificate serial: 018775B55323224D19360936499EBA13A948
Authority key identifier: 36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/_Wv-BAfFqkPfOVmQeSLvDgMQ1eU.roa
Signing time: Wed 12 Apr 2023 13:43:50 +0000
ROA not before: Wed 12 Apr 2023 13:43:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44217
IP address blocks: 62.201.228.0/22 maxlen: 22
62.201.229.0/24 maxlen: 24
62.201.227.0/24 maxlen: 24
62.201.228.0/24 maxlen: 24
62.201.232.0/24 maxlen: 24
62.201.233.0/24 maxlen: 24
62.201.230.0/24 maxlen: 24
62.201.231.0/24 maxlen: 24
62.201.232.0/22 maxlen: 22
62.201.236.0/24 maxlen: 24
62.201.234.0/24 maxlen: 24
62.201.235.0/24 maxlen: 24
62.201.239.0/24 maxlen: 24
62.201.240.0/24 maxlen: 24
62.201.237.0/24 maxlen: 24
62.201.238.0/24 maxlen: 24
62.201.240.0/21 maxlen: 21
62.201.243.0/24 maxlen: 24
62.201.241.0/24 maxlen: 24
62.201.242.0/23 maxlen: 24
62.201.242.0/24 maxlen: 24
62.201.246.0/24 maxlen: 24
62.201.244.0/23 maxlen: 23
62.201.253.0/24 maxlen: 24
62.201.251.0/24 maxlen: 24
62.201.252.0/22 maxlen: 24
62.201.247.0/24 maxlen: 24
62.201.248.0/23 maxlen: 23
62.201.250.0/24 maxlen: 24
62.201.248.0/24 maxlen: 24
62.201.249.0/24 maxlen: 24
62.201.254.0/23 maxlen: 24
89.33.66.0/23 maxlen: 23
62.201.192.0/23 maxlen: 23
62.201.197.0/24 maxlen: 24
62.201.194.0/24 maxlen: 24
62.201.195.0/24 maxlen: 24
62.201.192.0/18 maxlen: 18
62.201.193.0/24 maxlen: 24
62.201.200.0/22 maxlen: 22
62.201.201.0/24 maxlen: 24
62.201.202.0/24 maxlen: 24
62.201.200.0/24 maxlen: 24
62.201.204.0/24 maxlen: 24
62.201.205.0/24 maxlen: 24
62.201.203.0/24 maxlen: 24
62.201.204.0/23 maxlen: 23
62.201.206.0/23 maxlen: 23
62.201.212.0/24 maxlen: 24
62.201.208.0/24 maxlen: 24
62.201.209.0/24 maxlen: 24
62.201.208.0/22 maxlen: 22
62.201.207.0/24 maxlen: 24
62.201.211.0/24 maxlen: 24
62.201.212.0/22 maxlen: 22
62.201.210.0/24 maxlen: 24
62.201.213.0/24 maxlen: 24
62.201.215.0/24 maxlen: 24
62.201.216.0/24 maxlen: 24
62.201.214.0/24 maxlen: 24
62.201.218.0/24 maxlen: 24
62.201.219.0/24 maxlen: 24
62.201.217.0/24 maxlen: 24
62.201.221.0/24 maxlen: 24
62.201.222.0/24 maxlen: 24
62.201.220.0/22 maxlen: 22
62.201.220.0/24 maxlen: 24
62.201.225.0/24 maxlen: 24
62.201.224.0/22 maxlen: 22
62.201.226.0/24 maxlen: 24
62.201.223.0/24 maxlen: 24
62.201.224.0/24 maxlen: 24
185.1.98.0/24 maxlen: 24
2a02:b60:2010::/48 maxlen: 48
2a02:b60::/64 maxlen: 64
2a02:b60:4000::/48 maxlen: 48
2a02:b60:2000::/48 maxlen: 48
2a02:b60:2000:3::/64 maxlen: 64
2a02:b60:4005::/48 maxlen: 48
2a02:b60:0:f::/64 maxlen: 64
2a02:b60:4000::/34 maxlen: 34
2a02:b60:2000::/35 maxlen: 35
2a02:b60::/32 maxlen: 32
2a02:b60:20::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:75:b5:53:23:22:4d:19:36:09:36:49:9e:ba:13:a9:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Validity
Not Before: Apr 12 13:43:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fd6bfe0407c5aa43df3959907922ef0e0310d5e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:9b:e3:f5:0a:e9:bc:f2:62:fa:05:c2:16:b3:
cc:f9:42:88:ed:87:c6:86:7b:db:de:76:5b:36:29:
81:a6:1a:ed:cd:df:5e:28:89:72:b5:73:44:92:3f:
4b:40:56:37:6f:ad:d3:3c:55:b0:0e:ab:a1:22:3a:
81:c9:21:77:d0:21:44:0a:88:7f:cf:26:6a:8e:65:
a0:25:9c:65:d9:84:25:00:e4:67:69:1c:23:83:f3:
7b:37:55:2c:f1:c4:77:11:47:7d:d9:35:82:e9:c1:
69:9a:74:dd:01:d4:6a:e2:51:57:d3:7f:66:48:08:
4e:09:e2:c8:86:46:52:b1:27:f7:4f:0a:b3:28:f5:
1d:75:02:a8:af:90:fe:4b:df:b8:b4:60:b2:b9:20:
68:1a:cf:19:7f:87:be:ff:c9:bf:b8:73:a3:1b:7c:
6f:49:56:8e:e1:4b:ba:b3:43:3f:7f:f1:27:81:db:
73:c6:08:ad:b7:35:3b:b1:13:b6:6a:9c:aa:c0:19:
e8:29:32:34:dd:bf:ab:05:08:f8:c7:ba:b4:9c:f6:
88:c1:51:37:cc:04:15:69:a3:59:e4:80:d4:7c:a1:
1f:40:92:b8:c2:33:0e:98:8a:91:83:86:33:71:05:
3e:ba:cf:42:1a:e8:bb:f3:ee:f5:c7:73:e5:de:75:
11:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:6B:FE:04:07:C5:AA:43:DF:39:59:90:79:22:EF:0E:03:10:D5:E5
X509v3 Authority Key Identifier:
keyid:36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/_Wv-BAfFqkPfOVmQeSLvDgMQ1eU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.201.192.0/18
89.33.66.0/23
185.1.98.0/24
IPv6:
2a02:b60::/32
Signature Algorithm: sha256WithRSAEncryption
b8:53:12:39:e9:ee:a5:05:90:e0:05:68:50:90:cf:11:cc:99:
f3:0a:4b:26:87:85:3a:d1:f5:c3:10:5b:0d:6e:d9:59:31:66:
a1:26:76:9b:5c:5d:74:1c:3e:5d:76:81:05:95:c3:6b:ba:3f:
2e:89:dc:2a:0f:7c:17:6a:ea:a9:88:d7:b4:8b:bf:43:75:f8:
af:18:1f:9a:db:4a:9d:0e:0d:5e:d3:c0:0a:2d:de:a7:43:60:
eb:7c:74:5b:71:c2:89:02:68:1c:0f:21:e4:a2:c2:48:07:aa:
d4:9e:33:eb:76:c8:1d:92:5f:4e:d3:f4:2c:4e:d6:b1:c7:6b:
38:96:28:77:05:ce:a2:48:1e:42:36:ef:a0:3a:93:61:70:95:
aa:c3:a4:70:2b:19:ac:f4:ea:4e:cd:b6:87:ff:54:29:1f:5a:
41:08:83:ba:a2:b4:fb:14:06:7a:ec:a7:f5:1f:dd:a6:d7:a9:
bd:f8:c9:2a:85:ff:16:c6:81:be:8c:cb:90:9c:68:d6:02:ee:
96:36:cb:ff:45:4a:a6:24:27:3e:f4:c8:e7:69:59:7b:6a:3d:
0a:d5:b8:ef:04:12:c9:46:cf:b1:54:3c:d1:80:d7:0f:75:de:
53:79:d1:87:08:70:2f:0b:92:0b:7d:01:34:4d:cf:46:c0:28:
b6:57:94:19
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAYd1tVMjIk0ZNgk2SZ66E6lIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2OTJmZWRmNTljNjBkMzI1NGUzN2E5YzhlY2RlMTFjOWJh
MTI4MmEwHhcNMjMwNDEyMTM0MzUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZDZiZmUwNDA3YzVhYTQzZGYzOTU5OTA3OTIyZWYwZTAzMTBkNWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5vj9QrpvPJi+gXCFrPM+UKI7YfG
hnvb3nZbNimBphrtzd9eKIlytXNEkj9LQFY3b63TPFWwDquhIjqBySF30CFECoh/
zyZqjmWgJZxl2YQlAORnaRwjg/N7N1Us8cR3EUd92TWC6cFpmnTdAdRq4lFX039m
SAhOCeLIhkZSsSf3TwqzKPUddQKor5D+S9+4tGCyuSBoGs8Zf4e+/8m/uHOjG3xv
SVaO4Uu6s0M/f/EngdtzxgittzU7sRO2apyqwBnoKTI03b+rBQj4x7q0nPaIwVE3
zAQVaaNZ5IDUfKEfQJK4wjMOmIqRg4YzcQU+us9CGui78+71x3Pl3nURAQIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFP1r/gQHxapD3zlZkHki7w4DENXlMB8GA1UdIwQY
MBaAFDaS/t9Zxg0yVON6nI7N4RyboSgqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnBMLTMxbkdEVEpVNDNxY2pzM2hISnVoS0NvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi81YzVhZDAtZDJkYS00MGRiLTk1ZDEt
ZTdiZTVlMzBhZDJkLzEvX1d2LUJBZkZxa1BmT1ZtUWVTTHZEZ01RMWVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi81YzVhZDAtZDJkYS00MGRiLTk1ZDEtZTdiZTVlMzBhZDJk
LzEvTnBMLTMxbkdEVEpVNDNxY2pzM2hISnVoS0NvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQGPsnAAwQB
WSFCAwQAuQFiMA0EAgACMAcDBQAqAgtgMA0GCSqGSIb3DQEBCwUAA4IBAQC4UxI5
6e6lBZDgBWhQkM8RzJnzCksmh4U60fXDEFsNbtlZMWahJnabXF10HD5ddoEFlcNr
uj8uidwqD3wXauqpiNe0i79DdfivGB+a20qdDg1e08AKLd6nQ2DrfHRbccKJAmgc
DyHkosJIB6rUnjPrdsgdkl9O0/QsTtaxx2s4lih3Bc6iSB5CNu+gOpNhcJWqw6Rw
Kxms9OpOzbaH/1QpH1pBCIO6orT7FAZ67Kf1H92m16m9+Mkqhf8WxoG+jMuQnGjW
Au6WNsv/RUqmJCc+9MjnaVl7aj0K1bjvBBLJRs+xVDzRgNcPdd5TedGHCHAvC5IL
fQE0Tc9GwCi2V5QZ
-----END CERTIFICATE-----
Generated at Mon Apr 14 13:01:19 2025 by rpki-client