Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/zbNAntD5unajNg7etzt9NNdWveg.roa
File: zbNAntD5unajNg7etzt9NNdWveg.roa (raw, json)
Hash identifier: CxemNvdgKJNuJvw0qKjQQcFkOZXoz8h4AnSRkxCPLdI=
Subject key identifier: CD:B3:40:9E:D0:F9:BA:76:A3:36:0E:DE:B7:3B:7D:34:D7:56:BD:E8
Certificate issuer: /CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Certificate serial: 3767ACF8
Authority key identifier: 36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/zbNAntD5unajNg7etzt9NNdWveg.roa
Signing time: Mon 07 Feb 2022 10:57:38 +0000
ROA not before: Mon 07 Feb 2022 10:57:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44217
IP address blocks: 62.201.228.0/22 maxlen: 22
62.201.229.0/24 maxlen: 24
62.201.227.0/24 maxlen: 24
62.201.228.0/24 maxlen: 24
62.201.232.0/24 maxlen: 24
62.201.233.0/24 maxlen: 24
62.201.230.0/24 maxlen: 24
62.201.231.0/24 maxlen: 24
62.201.232.0/22 maxlen: 22
62.201.236.0/24 maxlen: 24
62.201.234.0/24 maxlen: 24
62.201.235.0/24 maxlen: 24
62.201.239.0/24 maxlen: 24
62.201.240.0/24 maxlen: 24
62.201.237.0/24 maxlen: 24
62.201.238.0/24 maxlen: 24
62.201.240.0/21 maxlen: 21
62.201.242.0/23 maxlen: 23
62.201.241.0/24 maxlen: 24
62.201.246.0/24 maxlen: 24
62.201.244.0/23 maxlen: 23
62.201.253.0/24 maxlen: 24
62.201.251.0/24 maxlen: 24
62.201.252.0/22 maxlen: 24
62.201.247.0/24 maxlen: 24
62.201.248.0/23 maxlen: 23
62.201.250.0/24 maxlen: 24
62.201.248.0/24 maxlen: 24
62.201.249.0/24 maxlen: 24
62.201.254.0/23 maxlen: 23
89.33.66.0/23 maxlen: 23
62.201.192.0/23 maxlen: 23
62.201.194.0/24 maxlen: 24
62.201.195.0/24 maxlen: 24
62.201.192.0/18 maxlen: 18
62.201.193.0/24 maxlen: 24
62.201.200.0/22 maxlen: 22
62.201.201.0/24 maxlen: 24
62.201.202.0/24 maxlen: 24
62.201.200.0/24 maxlen: 24
62.201.204.0/24 maxlen: 24
62.201.205.0/24 maxlen: 24
62.201.203.0/24 maxlen: 24
62.201.204.0/23 maxlen: 23
62.201.206.0/23 maxlen: 23
62.201.212.0/24 maxlen: 24
62.201.208.0/24 maxlen: 24
62.201.209.0/24 maxlen: 24
62.201.208.0/22 maxlen: 22
62.201.207.0/24 maxlen: 24
62.201.211.0/24 maxlen: 24
62.201.212.0/22 maxlen: 22
62.201.210.0/24 maxlen: 24
62.201.213.0/24 maxlen: 24
62.201.215.0/24 maxlen: 24
62.201.216.0/24 maxlen: 24
62.201.214.0/24 maxlen: 24
62.201.218.0/24 maxlen: 24
62.201.219.0/24 maxlen: 24
62.201.217.0/24 maxlen: 24
62.201.221.0/24 maxlen: 24
62.201.222.0/24 maxlen: 24
62.201.220.0/22 maxlen: 22
62.201.220.0/24 maxlen: 24
62.201.225.0/24 maxlen: 24
62.201.224.0/22 maxlen: 22
62.201.226.0/24 maxlen: 24
62.201.223.0/24 maxlen: 24
62.201.224.0/24 maxlen: 24
2a02:b60:2010::/48 maxlen: 48
2a02:b60::/64 maxlen: 64
2a02:b60:4000::/48 maxlen: 48
2a02:b60:2000::/48 maxlen: 48
2a02:b60:2000:3::/64 maxlen: 64
2a02:b60:0:f::/64 maxlen: 64
2a02:b60:4000::/34 maxlen: 34
2a02:b60:2000::/35 maxlen: 35
2a02:b60::/32 maxlen: 32
2a02:b60:20::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 929541368 (0x3767acf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Validity
Not Before: Feb 7 10:57:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cdb3409ed0f9ba76a3360edeb73b7d34d756bde8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:23:63:5e:28:3f:32:79:9f:9d:bf:79:cb:a9:
eb:d4:f4:1a:46:9f:25:2b:34:f2:51:25:18:f5:1d:
45:e3:66:80:a5:7f:e6:01:f1:2d:6c:2e:6e:e5:9b:
ec:89:5d:3d:54:38:e1:0c:10:7d:99:8a:2a:cf:a6:
e2:c9:d8:ff:ee:9a:9e:c4:c7:65:e3:8e:3c:e2:83:
74:b8:a5:52:91:81:65:75:15:87:79:ec:86:9d:ab:
fa:d3:62:77:dd:9e:23:47:ff:0f:66:05:75:e3:ac:
27:cf:f0:06:aa:d8:1a:9b:10:e4:c3:cc:af:96:af:
2e:7a:f1:e7:6a:1f:89:f4:57:74:7b:7b:0a:94:52:
e0:a8:f3:05:6b:2f:5d:12:bc:c5:3d:7d:3a:61:dd:
16:89:2d:68:11:84:7d:c2:cd:ec:20:79:6d:9b:40:
55:9e:50:e9:ab:54:0a:85:d6:a5:bd:f2:0b:90:a1:
f3:04:9f:95:31:2e:53:2d:f3:a8:04:cc:16:01:df:
69:42:a2:a3:af:03:bf:a0:52:39:df:e7:61:03:46:
82:aa:9e:3d:c1:b2:b3:37:bc:e3:a4:c8:df:ab:39:
7a:f1:18:cc:f6:bd:c1:a5:83:0e:d6:30:f7:9d:4d:
2e:2f:3a:e5:1d:1f:8a:9b:e8:37:2c:61:01:33:95:
ff:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B3:40:9E:D0:F9:BA:76:A3:36:0E:DE:B7:3B:7D:34:D7:56:BD:E8
X509v3 Authority Key Identifier:
keyid:36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/zbNAntD5unajNg7etzt9NNdWveg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.201.192.0/18
89.33.66.0/23
IPv6:
2a02:b60::/32
Signature Algorithm: sha256WithRSAEncryption
b0:ed:42:8f:0a:2a:12:d3:b8:c5:34:cf:20:6d:1a:4d:dd:db:
9d:f2:a2:75:06:c5:ff:3b:17:dc:9b:a3:31:f0:4c:98:b1:65:
f9:b1:cd:a2:0c:e8:ff:f9:a8:04:bd:d7:e0:d6:08:a8:1f:9d:
bc:a2:7f:f3:87:53:aa:7a:92:47:1d:a7:4e:71:2a:77:7a:b5:
8e:70:6b:4c:75:23:79:3b:24:25:e7:6a:8d:8f:66:d7:ba:86:
49:4e:c4:7d:de:c7:b6:b0:24:f3:79:78:fd:38:7f:24:c0:0c:
1b:41:76:3d:7c:e5:2e:75:ab:45:3d:75:6c:24:b9:b5:f6:66:
fc:cb:9b:18:2e:1c:f1:e0:a1:a6:bc:ba:6d:68:9e:3e:f5:46:
aa:f1:0e:e7:d9:37:5e:32:e3:cb:79:e6:84:8d:61:ed:74:9e:
94:6f:74:97:18:a1:d2:24:f9:1e:fa:6c:f7:f5:fa:1f:5d:b8:
1c:b7:f2:f3:d3:51:c5:89:5e:e7:72:db:5d:0d:5f:b7:87:89:
f6:6f:0e:06:ef:ee:ce:df:dd:00:e6:35:fc:0b:30:73:4f:a3:
d2:3e:6a:54:9b:85:79:60:fd:15:fa:a5:83:04:ab:fd:e4:9b:
81:75:69:f7:a0:b8:db:95:31:1e:e8:a3:41:53:8c:9d:70:96:
9b:a9:56:12
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIEN2es+DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
NjkyZmVkZjU5YzYwZDMyNTRlMzdhOWM4ZWNkZTExYzliYTEyODJhMB4XDTIyMDIw
NzEwNTczOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoY2RiMzQwOWVkMGY5
YmE3NmEzMzYwZWRlYjczYjdkMzRkNzU2YmRlODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKojY14oPzJ5n52/ecup69T0GkafJSs08lElGPUdReNmgKV/
5gHxLWwubuWb7IldPVQ44QwQfZmKKs+m4snY/+6ansTHZeOOPOKDdLilUpGBZXUV
h3nshp2r+tNid92eI0f/D2YFdeOsJ8/wBqrYGpsQ5MPMr5avLnrx52ofifRXdHt7
CpRS4KjzBWsvXRK8xT19OmHdFoktaBGEfcLN7CB5bZtAVZ5Q6atUCoXWpb3yC5Ch
8wSflTEuUy3zqATMFgHfaUKio68Dv6BSOd/nYQNGgqqePcGysze846TI36s5evEY
zPa9waWDDtYw951NLi865R0fipvoNyxhATOV/1ECAwEAAaOCAh4wggIaMB0GA1Ud
DgQWBBTNs0Ce0Pm6dqM2Dt63O30011a96DAfBgNVHSMEGDAWgBQ2kv7fWcYNMlTj
epyOzeEcm6EoKjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L05wTC0zMW5HRFRKVTQzcWNqczNoSEp1aEtDby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzIvNWM1YWQwLWQyZGEtNDBkYi05NWQxLWU3YmU1ZTMwYWQyZC8x
L3piTkFudEQ1dW5hak5nN2V0enQ5Tk5kV3ZlZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzIv
NWM1YWQwLWQyZGEtNDBkYi05NWQxLWU3YmU1ZTMwYWQyZC8xL05wTC0zMW5HRFRK
VTQzcWNqczNoSEp1aEtDby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEBj7JwAMEAVkhQjANBAIAAjAHAwUA
KgILYDANBgkqhkiG9w0BAQsFAAOCAQEAsO1CjwoqEtO4xTTPIG0aTd3bnfKidQbF
/zsX3JujMfBMmLFl+bHNogzo//moBL3X4NYIqB+dvKJ/84dTqnqSRx2nTnEqd3q1
jnBrTHUjeTskJedqjY9m17qGSU7Efd7HtrAk83l4/Th/JMAMG0F2PXzlLnWrRT11
bCS5tfZm/MubGC4c8eChpry6bWiePvVGqvEO59k3XjLjy3nmhI1h7XSelG90lxih
0iT5Hvps9/X6H124HLfy89NRxYle53LbXQ1ft4eJ9m8OBu/uzt/dAOY1/Aswc0+j
0j5qVJuFeWD9FfqlgwSr/eSbgXVp96C425UxHuijQVOMnXCWm6lWEg==
-----END CERTIFICATE-----
Generated at Mon Apr 14 13:27:29 2025 by rpki-client