Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/bd4JOrSdX5rNlvccyissrs5u254.roa
File: bd4JOrSdX5rNlvccyissrs5u254.roa (raw, json)
Hash identifier: xfhePpP/uRzwNbM6d2gSPvIH0xZCo2sKkJ+2ZRrcoeQ=
Subject key identifier: 6D:DE:09:3A:B4:9D:5F:9A:CD:96:F7:1C:CA:2B:2C:AE:CE:6E:DB:9E
Certificate issuer: /CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Certificate serial: 370D3F2E
Authority key identifier: 36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/bd4JOrSdX5rNlvccyissrs5u254.roa
Signing time: Sat 01 Jan 2022 11:55:01 +0000
ROA not before: Sat 01 Jan 2022 11:55:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44217
IP address blocks: 62.201.228.0/22 maxlen: 22
62.201.229.0/24 maxlen: 24
62.201.227.0/24 maxlen: 24
62.201.228.0/24 maxlen: 24
62.201.232.0/24 maxlen: 24
62.201.233.0/24 maxlen: 24
62.201.230.0/24 maxlen: 24
62.201.231.0/24 maxlen: 24
62.201.232.0/22 maxlen: 22
62.201.236.0/24 maxlen: 24
62.201.234.0/24 maxlen: 24
62.201.235.0/24 maxlen: 24
62.201.239.0/24 maxlen: 24
62.201.240.0/24 maxlen: 24
62.201.237.0/24 maxlen: 24
62.201.238.0/24 maxlen: 24
62.201.240.0/21 maxlen: 21
62.201.242.0/23 maxlen: 23
62.201.241.0/24 maxlen: 24
62.201.246.0/24 maxlen: 24
62.201.244.0/23 maxlen: 23
62.201.253.0/24 maxlen: 24
62.201.252.0/22 maxlen: 22
62.201.251.0/24 maxlen: 24
62.201.247.0/24 maxlen: 24
62.201.248.0/23 maxlen: 23
62.201.250.0/24 maxlen: 24
62.201.248.0/24 maxlen: 24
62.201.249.0/24 maxlen: 24
62.201.254.0/23 maxlen: 23
89.33.66.0/23 maxlen: 23
62.201.192.0/23 maxlen: 23
62.201.194.0/24 maxlen: 24
62.201.195.0/24 maxlen: 24
62.201.192.0/18 maxlen: 18
62.201.193.0/24 maxlen: 24
62.201.200.0/22 maxlen: 22
62.201.201.0/24 maxlen: 24
62.201.202.0/24 maxlen: 24
62.201.200.0/24 maxlen: 24
62.201.204.0/24 maxlen: 24
62.201.205.0/24 maxlen: 24
62.201.203.0/24 maxlen: 24
62.201.204.0/23 maxlen: 23
62.201.206.0/23 maxlen: 23
62.201.212.0/24 maxlen: 24
62.201.208.0/24 maxlen: 24
62.201.209.0/24 maxlen: 24
62.201.208.0/22 maxlen: 22
62.201.207.0/24 maxlen: 24
62.201.211.0/24 maxlen: 24
62.201.212.0/22 maxlen: 22
62.201.210.0/24 maxlen: 24
62.201.213.0/24 maxlen: 24
62.201.215.0/24 maxlen: 24
62.201.216.0/24 maxlen: 24
62.201.214.0/24 maxlen: 24
62.201.218.0/24 maxlen: 24
62.201.219.0/24 maxlen: 24
62.201.217.0/24 maxlen: 24
62.201.221.0/24 maxlen: 24
62.201.222.0/24 maxlen: 24
62.201.220.0/22 maxlen: 22
62.201.220.0/24 maxlen: 24
62.201.225.0/24 maxlen: 24
62.201.224.0/22 maxlen: 22
62.201.226.0/24 maxlen: 24
62.201.223.0/24 maxlen: 24
62.201.224.0/24 maxlen: 24
2a02:b60:2010::/48 maxlen: 48
2a02:b60::/64 maxlen: 64
2a02:b60:2000::/48 maxlen: 48
2a02:b60:4000::/48 maxlen: 48
2a02:b60:2000:3::/64 maxlen: 64
2a02:b60:0:f::/64 maxlen: 64
2a02:b60:4000::/34 maxlen: 34
2a02:b60:2000::/35 maxlen: 35
2a02:b60::/32 maxlen: 32
2a02:b60:20::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 923615022 (0x370d3f2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Validity
Not Before: Jan 1 11:55:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6dde093ab49d5f9acd96f71cca2b2caece6edb9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:53:ad:ac:ab:de:79:79:cc:75:fe:19:9c:3b:
f8:cd:05:77:5b:f2:16:20:0a:0f:7e:4a:39:62:24:
95:6a:ca:11:42:70:0a:2a:54:67:e5:e0:cc:5c:0c:
86:e5:c7:b9:d7:a0:c7:f3:49:60:63:68:bf:51:04:
a2:db:1f:6c:5d:10:35:65:cc:95:d6:cc:d2:b0:dc:
e7:9a:d7:c7:87:80:bd:4f:c7:03:be:79:dc:ad:de:
bb:7b:be:08:6a:79:cf:1b:4c:ca:43:4d:4b:54:0f:
1d:f2:2e:7a:f9:48:2e:08:72:3f:fc:81:85:85:52:
d2:4b:f4:ab:1d:1b:76:e1:8c:f8:ef:0c:a8:f3:40:
bc:b9:49:4f:17:d0:58:83:00:c0:81:0d:25:dd:1f:
b5:60:82:2a:31:b9:e8:9a:de:79:84:56:dc:f1:9f:
57:56:cb:4a:c7:9b:c1:f7:9e:27:83:58:77:fa:95:
e4:cf:be:be:ca:2e:b8:d5:51:20:e5:0b:e0:20:22:
5b:26:20:50:bb:85:5d:df:18:33:57:8c:41:ab:82:
08:dd:6f:8e:f8:b5:b2:9e:5a:a9:85:58:a8:5c:74:
9b:5b:0e:48:3c:94:71:77:72:e4:80:88:76:76:7c:
7a:c0:3a:cc:42:62:f9:cc:06:63:b2:0d:86:79:64:
d1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:DE:09:3A:B4:9D:5F:9A:CD:96:F7:1C:CA:2B:2C:AE:CE:6E:DB:9E
X509v3 Authority Key Identifier:
keyid:36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/bd4JOrSdX5rNlvccyissrs5u254.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.201.192.0/18
89.33.66.0/23
IPv6:
2a02:b60::/32
Signature Algorithm: sha256WithRSAEncryption
32:07:e6:0a:e9:e1:e7:bc:ad:6c:70:3b:bb:59:50:4a:07:6b:
08:61:af:9b:b3:82:40:87:17:5b:d9:4e:e5:dd:5e:63:92:5e:
bb:48:e0:11:2d:5e:b3:4a:a8:52:98:4c:90:12:c1:56:c3:34:
5d:02:fd:2d:4a:cb:5c:dd:25:e2:53:7f:d5:2f:99:ff:df:0a:
b3:72:db:e8:13:31:1d:0d:44:13:55:6d:6f:09:89:9e:a1:ee:
2d:93:c2:d3:02:68:e1:34:92:ff:2c:02:33:e3:6e:52:9e:53:
c0:a1:8c:e1:90:c6:03:a5:51:c3:5b:f4:f7:34:fe:a0:09:c5:
0b:98:60:68:7d:bf:7d:4f:a9:59:c6:1f:87:10:b1:d1:21:0d:
ce:8b:f9:78:0d:d9:97:ac:87:c0:49:19:d8:3d:11:55:09:9f:
5d:05:1d:ca:92:fe:18:ae:aa:6b:d4:2e:c5:ab:40:9f:fa:f8:
c1:fd:6c:86:72:c6:10:00:81:71:2e:a9:0e:ab:f8:a1:7d:f4:
ea:ab:c9:23:d7:1b:bf:79:4f:cc:78:48:83:8e:95:15:96:4c:
21:82:d4:d7:ae:45:80:5c:f3:48:bc:55:0d:2e:74:43:1e:aa:
cf:2f:c5:ca:22:b5:87:4f:e4:9f:b3:e0:47:cd:f7:dd:aa:55:
f0:db:f6:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 13:18:08 2025 by rpki-client