Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/ZPHqw6lzVEAD82_NelruTfdLbEI.roa
File: ZPHqw6lzVEAD82_NelruTfdLbEI.roa (raw, json)
Hash identifier: j4AyeXXIDp+nhsbEkGnbKwoci9tpXDmDRmlnhmqMXaA=
Subject key identifier: 64:F1:EA:C3:A9:73:54:40:03:F3:6F:CD:7A:5A:EE:4D:F7:4B:6C:42
Certificate issuer: /CN=510b419f0c17b4c8be217f64388d268d14dc261e
Certificate serial: 018750A88667B87DFFB3DA235BA2D5309FCA
Authority key identifier: 51:0B:41:9F:0C:17:B4:C8:BE:21:7F:64:38:8D:26:8D:14:DC:26:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/ZPHqw6lzVEAD82_NelruTfdLbEI.roa
Signing time: Wed 05 Apr 2023 09:03:54 +0000
ROA not before: Wed 05 Apr 2023 09:03:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207990
IP address blocks: 206.204.0.0/20 maxlen: 32
206.204.16.0/20 maxlen: 32
43.252.28.0/22 maxlen: 32
103.211.184.0/23 maxlen: 32
206.204.32.0/20 maxlen: 32
203.78.168.0/21 maxlen: 32
206.204.48.0/20 maxlen: 32
37.61.226.0/24 maxlen: 32
94.176.48.0/20 maxlen: 32
92.255.86.0/23 maxlen: 32
216.194.80.0/20 maxlen: 32
103.225.128.0/22 maxlen: 32
89.223.18.0/23 maxlen: 32
45.130.120.0/22 maxlen: 32
92.255.32.0/21 maxlen: 32
103.207.152.0/23 maxlen: 32
213.188.64.0/22 maxlen: 32
193.151.52.0/22 maxlen: 32
116.212.188.0/22 maxlen: 32
180.94.216.0/22 maxlen: 32
213.188.80.0/20 maxlen: 32
85.208.148.0/22 maxlen: 32
103.30.12.0/22 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:50:a8:86:67:b8:7d:ff:b3:da:23:5b:a2:d5:30:9f:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=510b419f0c17b4c8be217f64388d268d14dc261e
Validity
Not Before: Apr 5 09:03:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64f1eac3a973544003f36fcd7a5aee4df74b6c42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:db:e2:d5:8c:30:b9:62:57:73:30:bc:93:5b:
9b:d4:be:a4:9b:b5:a8:83:d1:99:c8:c0:39:0f:79:
85:2d:45:a1:50:1f:9e:f0:5a:19:9d:04:4e:36:1b:
ad:c4:92:33:e5:0a:bc:a2:7c:4f:a1:77:eb:bf:49:
61:3a:e4:eb:5a:04:11:e1:69:90:14:11:46:67:c4:
a9:65:32:ac:b5:1b:bb:4d:b2:55:9d:d4:d6:ae:36:
1e:96:0e:e4:cf:7b:3d:f7:86:98:e1:d9:09:09:75:
4d:5d:f2:b0:b9:4e:ef:69:4c:9d:4b:e6:8d:86:1d:
55:e4:8b:f1:3f:b4:e5:c3:99:62:af:39:a6:ee:2c:
e0:4a:7e:34:cf:b0:4a:0f:d9:74:a5:a9:89:6a:2a:
60:14:30:d7:17:da:0e:26:02:9a:2f:ec:85:06:13:
81:c8:7f:b6:12:b0:01:a8:3a:f8:82:8e:4e:46:a7:
9c:db:96:8d:e7:9d:53:ed:c3:30:77:56:e6:5a:fc:
eb:ac:7c:9b:b6:74:8a:7c:aa:71:be:a2:fc:73:83:
32:55:a8:53:13:17:c7:1b:09:0e:3f:60:69:28:15:
6f:aa:75:6f:b9:6f:73:06:d0:e4:23:a4:88:1f:a1:
9f:55:49:9e:3d:38:ac:13:40:37:0f:da:76:07:3f:
b8:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:F1:EA:C3:A9:73:54:40:03:F3:6F:CD:7A:5A:EE:4D:F7:4B:6C:42
X509v3 Authority Key Identifier:
keyid:51:0B:41:9F:0C:17:B4:C8:BE:21:7F:64:38:8D:26:8D:14:DC:26:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/ZPHqw6lzVEAD82_NelruTfdLbEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.61.226.0/24
43.252.28.0/22
45.130.120.0/22
85.208.148.0/22
89.223.18.0/23
92.255.32.0/21
92.255.86.0/23
94.176.48.0/20
103.30.12.0/22
103.207.152.0/23
103.211.184.0/23
103.225.128.0/22
116.212.188.0/22
180.94.216.0/22
193.151.52.0/22
203.78.168.0/21
206.204.0.0/18
213.188.64.0/22
213.188.80.0/20
216.194.80.0/20
Signature Algorithm: sha256WithRSAEncryption
7f:f7:9b:33:98:60:99:8e:63:8b:03:8d:66:31:a2:4f:cc:61:
b2:2d:70:c9:df:09:5c:d2:24:c0:34:62:b9:b4:a1:00:ac:d8:
a3:fc:c2:de:88:ce:cb:67:4c:43:6e:f1:c1:d3:37:73:73:2e:
43:db:b3:7a:2b:cf:3a:83:f4:d7:94:0a:ce:c9:74:d6:bb:8a:
5e:38:6c:f4:b5:b4:3b:e0:93:58:e4:3d:9b:c6:07:77:9f:07:
fb:66:d3:7c:53:e4:19:c0:04:9c:d7:2d:73:f8:ed:b0:ff:23:
09:fe:80:80:38:c4:9a:50:a2:c9:66:48:1b:ee:7e:24:45:6c:
cf:9d:ad:87:d2:9b:74:f4:02:f3:15:5e:d9:ce:3e:bc:c8:f2:
66:37:32:47:dd:82:c8:d8:42:38:11:89:3b:e2:d3:be:f5:67:
03:48:7b:2b:e3:f3:dd:09:7e:b1:f0:ce:14:af:1c:dd:40:33:
34:83:80:34:da:f5:a9:2f:e6:97:7d:d7:71:cb:31:bc:b9:51:
03:24:8e:60:6c:62:e8:88:d9:0f:5c:2d:e4:66:cf:12:5a:1e:
5e:e4:96:d5:af:4c:15:c3:4b:cc:1d:65:7b:06:87:36:42:cd:
68:d1:9b:80:91:b8:80:dc:d6:2f:08:4c:1e:9b:25:d3:ae:e9:
2e:73:c6:44
-----BEGIN CERTIFICATE-----
MIIFcjCCBFqgAwIBAgISAYdQqIZnuH3/s9ojW6LVMJ/KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxMGI0MTlmMGMxN2I0YzhiZTIxN2Y2NDM4OGQyNjhkMTRk
YzI2MWUwHhcNMjMwNDA1MDkwMzU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NGYxZWFjM2E5NzM1NDQwMDNmMzZmY2Q3YTVhZWU0ZGY3NGI2YzQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytvi1YwwuWJXczC8k1ub1L6km7Wo
g9GZyMA5D3mFLUWhUB+e8FoZnQRONhutxJIz5Qq8onxPoXfrv0lhOuTrWgQR4WmQ
FBFGZ8SpZTKstRu7TbJVndTWrjYelg7kz3s994aY4dkJCXVNXfKwuU7vaUydS+aN
hh1V5IvxP7Tlw5lirzmm7izgSn40z7BKD9l0pamJaipgFDDXF9oOJgKaL+yFBhOB
yH+2ErABqDr4go5ORqec25aN551T7cMwd1bmWvzrrHybtnSKfKpxvqL8c4MyVahT
ExfHGwkOP2BpKBVvqnVvuW9zBtDkI6SIH6GfVUmePTisE0A3D9p2Bz+4/wIDAQAB
o4ICfjCCAnowHQYDVR0OBBYEFGTx6sOpc1RAA/NvzXpa7k33S2xCMB8GA1UdIwQY
MBaAFFELQZ8MF7TIviF/ZDiNJo0U3CYeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVF0Qm53d1h0TWktSVg5a09JMG1qUlRjSmg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8zMGNkMGEtOTNjZi00NWRjLTkzNTYt
MTRhMDk5OTNkNjcxLzEvWlBIcXc2bHpWRUFEODJfTmVscnVUZmRMYkVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8zMGNkMGEtOTNjZi00NWRjLTkzNTYtMTRhMDk5OTNkNjcx
LzEvVVF0Qm53d1h0TWktSVg5a09JMG1qUlRjSmg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGTBggrBgEFBQcBBwEB/wSBgzCBgDB+BAIAATB4AwQAJT3i
AwQCK/wcAwQCLYJ4AwQCVdCUAwQBWd8SAwQDXP8gAwQBXP9WAwQEXrAwAwQCZx4M
AwQBZ8+YAwQBZ9O4AwQCZ+GAAwQCdNS8AwQCtF7YAwQCwZc0AwQDy06oAwQGzswA
AwQC1bxAAwQE1bxQAwQE2MJQMA0GCSqGSIb3DQEBCwUAA4IBAQB/95szmGCZjmOL
A41mMaJPzGGyLXDJ3wlc0iTANGK5tKEArNij/MLeiM7LZ0xDbvHB0zdzcy5D27N6
K886g/TXlArOyXTWu4peOGz0tbQ74JNY5D2bxgd3nwf7ZtN8U+QZwASc1y1z+O2w
/yMJ/oCAOMSaUKLJZkgb7n4kRWzPna2H0pt09ALzFV7Zzj68yPJmNzJH3YLI2EI4
EYk74tO+9WcDSHsr4/PdCX6x8M4UrxzdQDM0g4A02vWpL+aXfddxyzG8uVEDJI5g
bGLoiNkPXC3kZs8SWh5e5JbVr0wVw0vMHWV7Boc2Qs1o0ZuAkbiA3NYvCEwemyXT
rukuc8ZE
-----END CERTIFICATE-----
Generated at Mon May 12 05:31:36 2025 by rpki-client