Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/897061-9217-403c-a0e5-13d28c653efe/1/LnlspG7z9VP3sibuA29PpnDJWi8.roa
File: LnlspG7z9VP3sibuA29PpnDJWi8.roa (raw, json)
Hash identifier: iDJYAFjYO++cnl0PTXsbHm53Ug8/zaXKRJhfgtdRI8Q=
Subject key identifier: 2E:79:6C:A4:6E:F3:F5:53:F7:B2:26:EE:03:6F:4F:A6:70:C9:5A:2F
Certificate issuer: /CN=64f906653fb6732a556ad35528d1d5938d1b0e98
Certificate serial: 199D6B5C
Authority key identifier: 64:F9:06:65:3F:B6:73:2A:55:6A:D3:55:28:D1:D5:93:8D:1B:0E:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPkGZT-2cypVatNVKNHVk40bDpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/897061-9217-403c-a0e5-13d28c653efe/1/LnlspG7z9VP3sibuA29PpnDJWi8.roa
Signing time: Sat 11 Jun 2022 17:44:02 +0000
ROA not before: Sat 11 Jun 2022 17:44:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60022
IP address blocks: 185.62.68.0/22 maxlen: 24
45.133.160.0/22 maxlen: 24
2a03:60::/32 maxlen: 48
2a0e:7640::/29 maxlen: 48
2a03:66::/32 maxlen: 48
2a03:65::/32 maxlen: 48
2a03:62::/32 maxlen: 48
2a03:63::/32 maxlen: 48
2a03:61::/32 maxlen: 48
2a03:64::/32 maxlen: 48
2a03:67::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 429747036 (0x199d6b5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64f906653fb6732a556ad35528d1d5938d1b0e98
Validity
Not Before: Jun 11 17:44:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2e796ca46ef3f553f7b226ee036f4fa670c95a2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:fa:24:28:d1:ba:22:fe:20:3c:09:11:53:47:
74:90:71:de:32:22:c8:2a:e5:29:08:7b:bf:9e:6b:
42:9f:58:86:28:59:fe:b0:4c:35:3f:5c:ab:bf:bc:
8c:56:eb:17:55:b9:70:a1:99:4b:06:57:6d:01:2c:
41:f4:52:6f:d0:fe:51:c4:fd:04:1c:fd:80:a7:64:
bd:a8:4c:35:af:ea:5e:de:f1:48:c5:0a:a1:7b:4a:
97:ab:bd:fa:67:e6:44:f2:68:c3:87:55:35:76:e1:
7c:58:84:8e:42:f7:73:36:04:18:ca:2e:2c:91:ae:
c3:93:17:05:d8:dc:a4:91:a2:77:42:f7:fd:0d:c3:
a5:a0:14:4b:7f:e0:ab:c6:91:f4:f3:c7:c7:b8:a7:
3f:cf:cc:43:27:cd:ba:ac:ec:87:cc:75:fb:3c:60:
b7:24:73:97:fb:10:58:cf:36:ec:65:80:a4:c1:26:
4d:04:95:1c:4e:a4:ef:e1:e9:75:35:cd:fa:ff:86:
0a:b1:c9:8f:ff:f5:5d:55:3a:34:e1:f3:23:41:2b:
b9:77:fd:ce:1d:40:61:97:e4:6c:c4:ab:c2:10:ba:
02:31:ee:14:38:7e:d4:f7:ce:e4:b6:83:85:ae:f9:
bd:74:65:6a:3d:0f:72:b9:5a:23:4b:c8:95:0d:8c:
62:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:79:6C:A4:6E:F3:F5:53:F7:B2:26:EE:03:6F:4F:A6:70:C9:5A:2F
X509v3 Authority Key Identifier:
keyid:64:F9:06:65:3F:B6:73:2A:55:6A:D3:55:28:D1:D5:93:8D:1B:0E:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPkGZT-2cypVatNVKNHVk40bDpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/897061-9217-403c-a0e5-13d28c653efe/1/LnlspG7z9VP3sibuA29PpnDJWi8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/897061-9217-403c-a0e5-13d28c653efe/1/ZPkGZT-2cypVatNVKNHVk40bDpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.160.0/22
185.62.68.0/22
IPv6:
2a03:60::/29
2a0e:7640::/29
Signature Algorithm: sha256WithRSAEncryption
7c:98:b2:fe:05:7d:fe:1d:03:09:92:9c:84:3e:35:a7:6a:9d:
d1:d8:70:d2:71:ec:c2:3a:83:27:3a:80:4f:97:89:1e:fc:97:
9f:78:4d:46:f0:a9:5e:cf:ff:68:32:1a:35:ff:9f:a0:5c:10:
f2:2a:57:dc:ed:19:c6:86:6d:3a:f9:7e:5f:ea:ec:1f:fd:79:
3f:c4:ea:47:33:3b:5d:0f:d6:f3:9c:2a:c5:07:b5:03:8a:9b:
ca:36:eb:5b:d3:de:b8:e5:84:38:2b:69:64:77:9e:2a:e4:89:
ce:17:37:1a:43:bf:a9:ee:3a:e6:1e:7a:44:76:15:82:52:ce:
64:fd:c3:01:55:ac:37:04:b6:f0:df:eb:1e:89:db:47:3c:30:
6b:95:ae:3e:19:f0:35:f2:ca:ee:d8:6b:77:aa:31:47:ff:8d:
ae:a6:6b:88:2f:b5:0e:15:46:58:a1:c6:cf:6e:84:25:25:8d:
b4:b6:2c:0b:3f:81:4a:63:8a:ee:a9:58:3e:87:b5:dd:70:b9:
c5:01:b7:e1:9c:c3:95:89:25:72:cd:75:d4:fa:6d:86:ca:e6:
bf:47:5a:09:65:b8:28:03:3b:d3:5b:d8:28:9c:5e:bb:b2:e1:
d4:af:35:44:c2:24:72:dd:d4:8b:b3:85:4e:41:98:2f:03:8b:
a2:29:81:4a
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIEGZ1rXDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
NGY5MDY2NTNmYjY3MzJhNTU2YWQzNTUyOGQxZDU5MzhkMWIwZTk4MB4XDTIyMDYx
MTE3NDQwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMmU3OTZjYTQ2ZWYz
ZjU1M2Y3YjIyNmVlMDM2ZjRmYTY3MGM5NWEyZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOn6JCjRuiL+IDwJEVNHdJBx3jIiyCrlKQh7v55rQp9YhihZ
/rBMNT9cq7+8jFbrF1W5cKGZSwZXbQEsQfRSb9D+UcT9BBz9gKdkvahMNa/qXt7x
SMUKoXtKl6u9+mfmRPJow4dVNXbhfFiEjkL3czYEGMouLJGuw5MXBdjcpJGid0L3
/Q3DpaAUS3/gq8aR9PPHx7inP8/MQyfNuqzsh8x1+zxgtyRzl/sQWM827GWApMEm
TQSVHE6k7+HpdTXN+v+GCrHJj//1XVU6NOHzI0EruXf9zh1AYZfkbMSrwhC6AjHu
FDh+1PfO5LaDha75vXRlaj0PcrlaI0vIlQ2MYhUCAwEAAaOCAiUwggIhMB0GA1Ud
DgQWBBQueWykbvP1U/eyJu4Db0+mcMlaLzAfBgNVHSMEGDAWgBRk+QZlP7ZzKlVq
01Uo0dWTjRsOmDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1pQa0daVC0yY3lwVmF0TlZLTkhWazQwYkRwZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTIvODk3MDYxLTkyMTctNDAzYy1hMGU1LTEzZDI4YzY1M2VmZS8x
L0xubHNwRzd6OVZQM3NpYnVBMjlQcG5ESldpOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTIv
ODk3MDYxLTkyMTctNDAzYy1hMGU1LTEzZDI4YzY1M2VmZS8xL1pQa0daVC0yY3lw
VmF0TlZLTkhWazQwYkRwZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA7
BggrBgEFBQcBBwEB/wQsMCowEgQCAAEwDAMEAi2FoAMEArk+RDAUBAIAAjAOAwUD
KgMAYAMFAyoOdkAwDQYJKoZIhvcNAQELBQADggEBAHyYsv4Fff4dAwmSnIQ+Nadq
ndHYcNJx7MI6gyc6gE+XiR78l594TUbwqV7P/2gyGjX/n6BcEPIqV9ztGcaGbTr5
fl/q7B/9eT/E6kczO10P1vOcKsUHtQOKm8o261vT3rjlhDgraWR3nirkic4XNxpD
v6nuOuYeekR2FYJSzmT9wwFVrDcEtvDf6x6J20c8MGuVrj4Z8DXyyu7Ya3eqMUf/
ja6ma4gvtQ4VRlihxs9uhCUljbS2LAs/gUpjiu6pWD6Htd1wucUBt+Gcw5WJJXLN
ddT6bYbK5r9HWglluCgDO9Nb2CicXruy4dSvNUTCJHLd1IuzhU5BmC8Di6IpgUo=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:25 2023 by rpki-client on console-fra.rpki-client.org