Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/0df56c-68a9-4feb-bf53-d7f11d684737/1/zJxFB-79NgG8mDCmo8Z3carbmWw.roa
File: zJxFB-79NgG8mDCmo8Z3carbmWw.roa (raw, json)
Hash identifier: uCWBUORPHFpoohOt2zeNzaEOPd/mfT6VHTASaArncl8=
Subject key identifier: CC:9C:45:07:EE:FD:36:01:BC:98:30:A6:A3:C6:77:71:AA:DB:99:6C
Certificate issuer: /CN=6fd60d9b943b08c447cf7e54989f52b0dec5f7e7
Certificate serial: 379CDBD2
Authority key identifier: 6F:D6:0D:9B:94:3B:08:C4:47:CF:7E:54:98:9F:52:B0:DE:C5:F7:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/0df56c-68a9-4feb-bf53-d7f11d684737/1/zJxFB-79NgG8mDCmo8Z3carbmWw.roa
Signing time: Sat 01 Jan 2022 04:59:12 +0000
ROA not before: Sat 01 Jan 2022 04:59:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13267
IP address blocks: 62.240.192.0/23 maxlen: 23
62.240.192.0/22 maxlen: 22
62.240.196.0/22 maxlen: 22
62.240.196.0/23 maxlen: 23
62.240.194.0/23 maxlen: 23
62.240.200.0/21 maxlen: 21
62.240.208.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 933026770 (0x379cdbd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fd60d9b943b08c447cf7e54989f52b0dec5f7e7
Validity
Not Before: Jan 1 04:59:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cc9c4507eefd3601bc9830a6a3c67771aadb996c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:28:89:6c:31:25:07:aa:2d:a5:0b:d6:8a:89:
81:f4:fd:92:05:49:b5:15:63:04:74:57:01:17:01:
c0:67:36:7b:f5:77:b0:fe:b9:e1:9d:00:7d:bd:d5:
27:29:b6:a7:fd:34:cc:26:5c:92:bd:03:04:c0:39:
3e:f9:0e:7c:f6:1a:2a:59:53:17:61:28:5b:79:02:
70:6b:4b:fa:f6:80:a6:9b:d6:77:8f:c1:6f:76:b0:
97:cf:0c:3d:0d:05:68:fa:2f:58:3f:f6:a5:50:2d:
a8:04:d5:0e:50:d3:bb:60:23:f2:e0:1f:b1:c0:a4:
e4:60:80:31:ad:f0:1a:40:3b:53:28:4f:e6:e0:9b:
34:bd:09:75:1f:f9:6b:59:b0:4a:83:82:16:5b:6f:
2f:06:f4:45:38:e3:94:f1:73:dd:30:1f:46:8e:b5:
1b:04:bd:59:14:bb:e3:4f:ab:27:56:31:42:1d:c3:
2b:8c:92:5d:06:5f:24:53:b3:f2:5a:79:da:a8:c3:
6e:9c:f8:2d:ed:31:dc:03:99:07:84:ad:32:f1:28:
7c:2a:5f:65:a0:24:0d:3f:0b:2c:f2:12:14:2b:fb:
e0:bc:56:d1:fb:f0:24:a7:47:2b:d5:4f:f0:b8:ff:
86:48:da:e7:d8:b2:6a:8b:32:ac:75:f1:a3:ad:0b:
5a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:9C:45:07:EE:FD:36:01:BC:98:30:A6:A3:C6:77:71:AA:DB:99:6C
X509v3 Authority Key Identifier:
keyid:6F:D6:0D:9B:94:3B:08:C4:47:CF:7E:54:98:9F:52:B0:DE:C5:F7:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/0df56c-68a9-4feb-bf53-d7f11d684737/1/zJxFB-79NgG8mDCmo8Z3carbmWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/0df56c-68a9-4feb-bf53-d7f11d684737/1/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.240.192.0/19
Signature Algorithm: sha256WithRSAEncryption
0d:37:c7:67:8f:4d:33:ed:ba:86:9e:d4:5c:ad:b4:db:e6:a5:
eb:fc:38:c1:1e:fd:0b:64:a1:5f:14:3b:f4:91:fd:73:1b:20:
a9:95:c3:80:f9:39:e4:33:a4:b3:3d:9c:4f:86:de:0e:cc:e9:
03:c2:41:2c:1f:3b:86:a3:78:ce:ae:70:62:96:e1:b9:f8:e7:
05:46:c6:50:1c:af:9b:a3:39:41:8a:0a:70:05:fb:22:e8:dd:
72:84:f2:5d:f5:12:8e:4d:9e:12:47:41:c3:6f:38:8d:0c:4c:
1b:10:9a:17:85:ef:f3:88:af:36:ab:7d:45:e5:bb:de:6e:0b:
60:85:53:0d:fd:4c:81:57:dc:d4:25:10:d2:16:fe:28:4a:ec:
de:58:48:61:be:29:e1:39:2f:83:58:1f:25:2e:66:f0:f3:f9:
2a:be:b4:d8:90:cd:ef:94:7e:53:66:d2:f7:b3:3a:d7:0e:9e:
8a:a3:80:54:53:9f:5a:f6:46:d0:aa:3c:8b:64:a9:47:a0:de:
3f:a0:32:ed:77:a9:d2:d0:3a:e4:03:be:a1:07:a9:60:2f:69:
f9:fe:e9:42:c0:37:6c:80:88:5c:dc:4a:3a:84:a1:83:ff:c2:
44:a1:2f:af:55:98:bf:45:b7:da:74:d7:b0:a0:8a:99:48:1a:
43:09:a0:06
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEN5zb0jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
ZmQ2MGQ5Yjk0M2IwOGM0NDdjZjdlNTQ5ODlmNTJiMGRlYzVmN2U3MB4XDTIyMDEw
MTA0NTkxMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoY2M5YzQ1MDdlZWZk
MzYwMWJjOTgzMGE2YTNjNjc3NzFhYWRiOTk2YzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIgoiWwxJQeqLaUL1oqJgfT9kgVJtRVjBHRXARcBwGc2e/V3
sP654Z0Afb3VJym2p/00zCZckr0DBMA5PvkOfPYaKllTF2EoW3kCcGtL+vaAppvW
d4/Bb3awl88MPQ0FaPovWD/2pVAtqATVDlDTu2Aj8uAfscCk5GCAMa3wGkA7UyhP
5uCbNL0JdR/5a1mwSoOCFltvLwb0RTjjlPFz3TAfRo61GwS9WRS740+rJ1YxQh3D
K4ySXQZfJFOz8lp52qjDbpz4Le0x3AOZB4StMvEofCpfZaAkDT8LLPISFCv74LxW
0fvwJKdHK9VP8Lj/hkja59iyaosyrHXxo60LWsUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTMnEUH7v02AbyYMKajxndxqtuZbDAfBgNVHSMEGDAWgBRv1g2blDsIxEfP
flSYn1Kw3sX35zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2I5WU5tNVE3Q01SSHozNVVtSjlTc043RjktYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjcvMGRmNTZjLTY4YTktNGZlYi1iZjUzLWQ3ZjExZDY4NDczNy8x
L3pKeEZCLTc5TmdHOG1EQ21vOFozY2FyYm1Xdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjcv
MGRmNTZjLTY4YTktNGZlYi1iZjUzLWQ3ZjExZDY4NDczNy8xL2I5WU5tNVE3Q01S
SHozNVVtSjlTc043RjktYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBT7wwDANBgkqhkiG9w0BAQsFAAOC
AQEADTfHZ49NM+26hp7UXK202+al6/w4wR79C2ShXxQ79JH9cxsgqZXDgPk55DOk
sz2cT4beDszpA8JBLB87hqN4zq5wYpbhufjnBUbGUByvm6M5QYoKcAX7IujdcoTy
XfUSjk2eEkdBw284jQxMGxCaF4Xv84ivNqt9ReW73m4LYIVTDf1MgVfc1CUQ0hb+
KErs3lhIYb4p4Tkvg1gfJS5m8PP5Kr602JDN75R+U2bS97M61w6eiqOAVFOfWvZG
0Ko8i2SpR6DeP6Ay7Xep0tA65AO+oQepYC9p+f7pQsA3bICIXNxKOoShg//CRKEv
r1WYv0W32nTXsKCKmUgaQwmgBg==
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:58:20 2025 by rpki-client