Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS60068.roa
File: AS60068.roa (raw, json)
Hash identifier: 8j28j0ZRBTCRZSPAGT2URMw4UtQA9vmvBPabcLwf5no=
Subject key identifier: B6:9B:75:81:5A:6B:7F:7A:BC:9C:AF:96:7A:72:38:01:3E:53:0A:32
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 390944253EF9B32258237CCA709ED71D9B6D0D8E
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS60068.roa
Signing time: Mon 22 Jan 2024 11:38:54 +0000
ROA not before: Mon 22 Jan 2024 11:33:54 +0000
ROA not after: Mon 20 Jan 2025 11:38:54 +0000
asID: 60068
IP address blocks: 92.119.32.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:09:44:25:3e:f9:b3:22:58:23:7c:ca:70:9e:d7:1d:9b:6d:0d:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jan 22 11:33:54 2024 GMT
Not After : Jan 20 11:38:54 2025 GMT
Subject: CN=B69B75815A6B7F7ABC9CAF967A7238013E530A32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c3:03:82:f0:8a:e1:9c:60:a8:50:ed:8a:e7:
6c:95:69:ec:7a:6b:29:26:cf:d9:b9:21:f6:a4:db:
b2:8d:e3:23:58:c4:c2:7e:68:5e:3c:6f:22:b4:1c:
6e:03:f1:c0:dd:49:f7:1d:f9:c7:69:d3:40:9f:21:
64:24:12:94:9d:11:d2:be:dc:0d:d2:31:24:7e:22:
cd:36:30:b8:6c:3b:8a:56:f2:80:c1:89:79:5a:5d:
96:41:df:21:6b:32:45:28:2e:a3:c8:84:3f:74:96:
f1:77:53:ed:f6:c1:c2:f8:a8:e0:bd:5e:b3:bb:31:
ce:fa:e2:39:ee:7d:d2:d9:5e:6a:fc:98:21:58:48:
ab:3a:a5:fa:58:ad:07:e0:63:ef:88:04:cb:26:88:
8b:15:dd:80:84:5c:8e:8d:14:af:94:22:84:5b:27:
51:90:ae:49:11:8c:27:ac:6b:bc:01:62:9f:14:cf:
95:56:50:93:14:61:5c:de:ae:be:08:cb:2d:c4:0c:
64:ed:d3:88:7b:ec:57:88:6d:ec:09:25:20:1c:42:
f9:9e:f8:d1:09:71:61:aa:d7:6c:74:1c:95:71:d1:
92:34:54:e8:b2:9d:93:46:51:c6:fe:ce:90:71:04:
90:1b:9f:51:cb:8d:ac:bf:75:ac:c8:a7:d5:87:48:
34:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:9B:75:81:5A:6B:7F:7A:BC:9C:AF:96:7A:72:38:01:3E:53:0A:32
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS60068.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.32.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:03:d7:09:62:9b:fe:d2:6f:7e:bb:18:79:61:ca:e0:ab:a5:
8d:1b:da:5f:1c:75:d8:ac:4b:1a:b2:9d:bb:3e:fe:54:43:7d:
0a:6b:82:d8:5b:e4:3f:1b:95:d8:b2:a8:83:46:d9:1b:fe:23:
39:7f:5d:86:bd:11:80:2a:f6:49:69:8c:b6:bd:a2:63:80:a0:
c8:05:f8:18:35:48:d6:26:a7:a5:e2:e6:bd:e4:1d:09:f0:70:
31:37:03:af:9b:b4:78:39:23:f7:78:c4:2b:58:37:aa:26:ce:
f9:fa:19:d6:85:4c:69:37:38:ae:2f:e3:db:57:f1:36:5e:26:
3f:3a:03:8d:e9:1a:55:e3:b3:0a:f5:df:e9:12:6d:05:6e:d7:
69:38:3e:24:6a:19:ef:c4:9d:e2:ad:47:f6:5c:9f:4d:0b:9a:
b7:d0:ea:85:80:63:56:7a:3f:79:5c:de:3e:93:1f:d3:ac:54:
f4:ab:2a:6c:ab:7f:42:38:ee:92:1d:36:65:50:ec:bc:04:18:
67:65:36:33:f8:d5:e3:c0:14:45:3e:f1:43:9b:0d:4d:df:09:
53:bc:ac:1e:11:4b:bb:a8:a9:51:e5:eb:5e:3d:d2:9d:4d:ac:
79:a1:94:98:0e:bb:ed:c6:f3:20:b5:6e:23:1f:31:bf:9e:a5:
af:8f:02:99
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUOQlEJT75syJYI3zKcJ7XHZttDY4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNDAxMjIxMTMzNTRaFw0yNTAxMjAxMTM4NTRaMDMxMTAvBgNV
BAMTKEI2OUI3NTgxNUE2QjdGN0FCQzlDQUY5NjdBNzIzODAxM0U1MzBBMzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvwwOC8IrhnGCoUO2K52yVaex6
aykmz9m5Ifak27KN4yNYxMJ+aF48byK0HG4D8cDdSfcd+cdp00CfIWQkEpSdEdK+
3A3SMSR+Is02MLhsO4pW8oDBiXlaXZZB3yFrMkUoLqPIhD90lvF3U+32wcL4qOC9
XrO7Mc764jnufdLZXmr8mCFYSKs6pfpYrQfgY++IBMsmiIsV3YCEXI6NFK+UIoRb
J1GQrkkRjCesa7wBYp8Uz5VWUJMUYVzerr4Iyy3EDGTt04h77FeIbewJJSAcQvme
+NEJcWGq12x0HJVx0ZI0VOiynZNGUcb+zpBxBJAbn1HLjay/dazIp9WHSDQVAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUtpt1gVprf3q8nK+WenI4AT5TCjIwHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTNjAwNjgucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABcdyAw
DQYJKoZIhvcNAQELBQADggEBAJ0D1wlim/7Sb367GHlhyuCrpY0b2l8cddisSxqy
nbs+/lRDfQprgthb5D8bldiyqING2Rv+Izl/XYa9EYAq9klpjLa9omOAoMgF+Bg1
SNYmp6Xi5r3kHQnwcDE3A6+btHg5I/d4xCtYN6omzvn6GdaFTGk3OK4v49tX8TZe
Jj86A43pGlXjswr13+kSbQVu12k4PiRqGe/EneKtR/Zcn00LmrfQ6oWAY1Z6P3lc
3j6TH9OsVPSrKmyrf0I47pIdNmVQ7LwEGGdlNjP41ePAFEU+8UObDU3fCVO8rB4R
S7uoqVHl61490p1NrHmhlJgOu+3G8yC1biMfMb+epa+PApk=
-----END CERTIFICATE-----
Generated at Thu Jun 5 03:21:44 2025 by rpki-client