Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/897061-9217-403c-a0e5-13d28c653efe/1/5RqvirOx8nj8NpZzjbH_A6bcrV4.roa
File: 5RqvirOx8nj8NpZzjbH_A6bcrV4.roa (raw, json)
Hash identifier: MCm7wGsSVzlzT0Mfd2N7qH1ibbNef8puasxu39dtSFY=
Subject key identifier: E5:1A:AF:8A:B3:B1:F2:78:FC:36:96:73:8D:B1:FF:03:A6:DC:AD:5E
Certificate issuer: /CN=64f906653fb6732a556ad35528d1d5938d1b0e98
Certificate serial: 1828E567
Authority key identifier: 64:F9:06:65:3F:B6:73:2A:55:6A:D3:55:28:D1:D5:93:8D:1B:0E:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPkGZT-2cypVatNVKNHVk40bDpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/897061-9217-403c-a0e5-13d28c653efe/1/5RqvirOx8nj8NpZzjbH_A6bcrV4.roa
Signing time: Sat 01 Jan 2022 14:58:24 +0000
ROA not before: Sat 01 Jan 2022 14:58:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60022
IP address blocks: 185.62.68.0/22 maxlen: 24
2a03:60::/32 maxlen: 48
2a03:66::/32 maxlen: 48
2a03:65::/32 maxlen: 48
2a03:62::/32 maxlen: 48
2a03:63::/32 maxlen: 48
2a03:61::/32 maxlen: 48
2a03:64::/32 maxlen: 48
2a03:67::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 405333351 (0x1828e567)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64f906653fb6732a556ad35528d1d5938d1b0e98
Validity
Not Before: Jan 1 14:58:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e51aaf8ab3b1f278fc3696738db1ff03a6dcad5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:40:57:ea:88:ea:bf:f4:bf:3d:b6:4b:93:1a:
58:95:93:1c:c7:02:33:77:4d:20:f3:bc:4f:6e:76:
25:1c:2c:26:2e:1b:1e:26:29:0d:f3:d8:54:f5:bc:
83:77:86:82:38:55:53:df:34:dc:e7:66:d5:f3:47:
4f:8b:7c:19:ac:60:87:cc:4d:e7:e0:2e:bd:76:73:
1e:5a:9e:1d:ff:7c:f5:bb:e5:33:c9:16:fc:2b:cd:
ce:5f:4c:fd:06:71:f1:fd:4f:4a:e8:96:24:58:48:
48:63:e2:97:91:26:fd:71:3b:b6:91:5c:7b:b2:67:
da:e6:e3:52:eb:6c:41:9e:e7:e5:66:b9:ab:68:10:
44:d6:53:f5:5f:85:c5:47:e4:ff:f9:04:9d:7c:9d:
50:fb:2b:d3:47:02:9b:09:7b:e1:fa:42:97:a8:c3:
f5:ed:69:8a:50:60:50:fe:16:7f:9a:26:ca:56:f1:
14:91:03:0f:0a:e3:2e:12:90:12:a2:f2:7b:52:7b:
dc:80:66:3b:71:86:6c:a6:2d:4e:ec:fa:6b:a3:cc:
aa:f5:0f:22:53:49:17:cb:8a:8b:8d:04:7d:e1:d8:
66:5c:56:53:9f:4f:43:68:e9:b7:62:8f:78:8e:99:
24:3d:33:37:19:6a:2c:6c:07:a5:27:28:19:df:34:
11:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:1A:AF:8A:B3:B1:F2:78:FC:36:96:73:8D:B1:FF:03:A6:DC:AD:5E
X509v3 Authority Key Identifier:
keyid:64:F9:06:65:3F:B6:73:2A:55:6A:D3:55:28:D1:D5:93:8D:1B:0E:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPkGZT-2cypVatNVKNHVk40bDpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/897061-9217-403c-a0e5-13d28c653efe/1/5RqvirOx8nj8NpZzjbH_A6bcrV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/897061-9217-403c-a0e5-13d28c653efe/1/ZPkGZT-2cypVatNVKNHVk40bDpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.62.68.0/22
IPv6:
2a03:60::/29
Signature Algorithm: sha256WithRSAEncryption
45:e6:41:1a:ee:44:7b:9f:df:8b:27:13:25:3b:f7:29:2a:8a:
3a:e1:9a:70:f9:53:db:31:70:47:45:11:57:89:22:66:60:03:
dd:ab:1d:f4:55:af:13:f7:93:a8:8f:06:ff:38:26:3a:20:c3:
98:2e:5c:db:36:0a:e3:da:73:a3:fa:f2:62:54:f2:62:16:ad:
53:d7:90:81:61:19:c4:00:da:8b:b0:cb:d7:19:ea:72:91:10:
fa:1d:d9:0e:66:32:d0:99:f0:43:ac:08:8d:02:c1:f0:28:4a:
d2:c8:d4:ec:ea:6e:5d:59:e5:03:c4:5d:40:13:61:42:45:38:
8f:57:f6:dd:b3:4f:37:4c:80:7a:8d:4b:f1:92:b9:2e:22:6b:
f7:5b:64:67:eb:03:bc:ad:26:32:f8:84:30:6f:e5:cc:de:e3:
7a:6a:da:d9:c8:5c:97:f8:9d:71:b6:ad:80:3f:25:d7:af:f9:
a6:05:db:55:9b:a9:62:42:3c:93:a3:a7:d5:c4:8b:54:f2:a7:
af:6c:20:11:fc:4f:47:2a:b3:82:a4:6f:5b:82:7f:32:85:03:
da:9b:c3:d7:f6:38:d7:b5:f0:f7:a8:15:50:06:36:92:01:b1:
5c:db:de:56:a9:13:eb:0a:3b:0a:5e:f1:c6:2d:fa:c7:d3:67:
1f:c9:d0:70
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEGCjlZzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
NGY5MDY2NTNmYjY3MzJhNTU2YWQzNTUyOGQxZDU5MzhkMWIwZTk4MB4XDTIyMDEw
MTE0NTgyNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTUxYWFmOGFiM2Ix
ZjI3OGZjMzY5NjczOGRiMWZmMDNhNmRjYWQ1ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMNAV+qI6r/0vz22S5MaWJWTHMcCM3dNIPO8T252JRwsJi4b
HiYpDfPYVPW8g3eGgjhVU9803Odm1fNHT4t8Gaxgh8xN5+AuvXZzHlqeHf989bvl
M8kW/CvNzl9M/QZx8f1PSuiWJFhISGPil5Em/XE7tpFce7Jn2ubjUutsQZ7n5Wa5
q2gQRNZT9V+FxUfk//kEnXydUPsr00cCmwl74fpCl6jD9e1pilBgUP4Wf5omylbx
FJEDDwrjLhKQEqLye1J73IBmO3GGbKYtTuz6a6PMqvUPIlNJF8uKi40EfeHYZlxW
U59PQ2jpt2KPeI6ZJD0zNxlqLGwHpScoGd80ESsCAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBTlGq+Ks7HyePw2lnONsf8DptytXjAfBgNVHSMEGDAWgBRk+QZlP7ZzKlVq
01Uo0dWTjRsOmDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1pQa0daVC0yY3lwVmF0TlZLTkhWazQwYkRwZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTIvODk3MDYxLTkyMTctNDAzYy1hMGU1LTEzZDI4YzY1M2VmZS8x
LzVScXZpck94OG5qOE5wWnpqYkhfQTZiY3JWNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTIv
ODk3MDYxLTkyMTctNDAzYy1hMGU1LTEzZDI4YzY1M2VmZS8xL1pQa0daVC0yY3lw
VmF0TlZLTkhWazQwYkRwZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArk+RDANBAIAAjAHAwUDKgMAYDAN
BgkqhkiG9w0BAQsFAAOCAQEAReZBGu5Ee5/fiycTJTv3KSqKOuGacPlT2zFwR0UR
V4kiZmAD3asd9FWvE/eTqI8G/zgmOiDDmC5c2zYK49pzo/ryYlTyYhatU9eQgWEZ
xADai7DL1xnqcpEQ+h3ZDmYy0JnwQ6wIjQLB8ChK0sjU7OpuXVnlA8RdQBNhQkU4
j1f23bNPN0yAeo1L8ZK5LiJr91tkZ+sDvK0mMviEMG/lzN7jemra2chcl/idcbat
gD8l16/5pgXbVZupYkI8k6On1cSLVPKnr2wgEfxPRyqzgqRvW4J/MoUD2pvD1/Y4
17Xw96gVUAY2kgGxXNveVqkT6wo7Cl7xxi36x9NnH8nQcA==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:47:37 2025 by rpki-client