Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/fCbiYKCW6aIrq1MX9r0kmfCZtlc.roa
File: fCbiYKCW6aIrq1MX9r0kmfCZtlc.roa (raw, json)
Hash identifier: Xcf7Z4Ij1HfONPrO4DuQaenoZy5uQH2cDpzbkvPnSK4=
Subject key identifier: 7C:26:E2:60:A0:96:E9:A2:2B:AB:53:17:F6:BD:24:99:F0:99:B6:57
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 01879ED8810972BCEA8FA0098DEA0E92B9C5
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/fCbiYKCW6aIrq1MX9r0kmfCZtlc.roa
Signing time: Thu 20 Apr 2023 13:26:41 +0000
ROA not before: Thu 20 Apr 2023 13:26:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 53356
IP address blocks: 62.60.216.0/22 maxlen: 24
62.60.164.0/22 maxlen: 24
62.60.168.0/21 maxlen: 24
62.60.176.0/22 maxlen: 24
62.60.180.0/22 maxlen: 24
62.60.184.0/22 maxlen: 24
62.60.192.0/22 maxlen: 24
62.60.188.0/22 maxlen: 24
62.60.196.0/24 maxlen: 24
62.60.212.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:9e:d8:81:09:72:bc:ea:8f:a0:09:8d:ea:0e:92:b9:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Apr 20 13:26:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7c26e260a096e9a22bab5317f6bd2499f099b657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9d:17:29:1d:b7:32:95:33:45:88:0b:6e:e3:
69:e9:c6:f9:d5:ae:21:b1:50:c1:f1:05:e1:a6:3b:
d1:d0:9c:ec:6e:48:e4:d9:66:16:90:18:37:4b:b8:
99:02:94:ce:21:7e:7e:cc:44:dc:9a:4f:2b:a4:e6:
31:80:b8:d3:82:12:b1:66:d0:3a:7d:6a:98:db:0e:
f7:29:d8:01:45:b1:20:a9:e6:80:a0:6a:d5:d6:a8:
65:81:fd:d6:13:48:4c:1a:d9:b4:6b:39:f4:4b:1f:
59:1e:ea:1c:b6:a7:de:22:d9:b8:0f:24:5b:5d:e8:
22:b2:c3:c4:40:6d:51:52:fd:c4:24:71:86:25:57:
99:5a:9c:20:d6:67:13:fd:4e:45:08:f2:94:08:5f:
b9:ee:e5:89:e9:6c:a0:16:6c:3f:db:42:fc:41:a8:
9b:1f:d3:85:54:68:7f:33:c8:4c:06:a1:5c:8d:d8:
f4:b5:0e:63:26:44:6e:56:fd:61:85:dc:f9:1d:82:
8b:59:e5:97:24:f8:3e:72:5d:cc:52:e1:e4:9b:1f:
55:28:a1:61:84:f3:73:a2:14:11:fe:57:75:45:bb:
b3:2c:a4:a8:36:a3:8f:6d:b3:c3:a5:e5:71:6d:51:
de:c5:ac:2f:f6:7d:de:ab:86:d6:55:27:f6:a7:ce:
73:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:26:E2:60:A0:96:E9:A2:2B:AB:53:17:F6:BD:24:99:F0:99:B6:57
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/fCbiYKCW6aIrq1MX9r0kmfCZtlc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.164.0-62.60.196.255
62.60.212.0-62.60.219.255
Signature Algorithm: sha256WithRSAEncryption
b2:4f:d5:0d:f0:74:40:cb:5b:6e:d0:01:5c:0f:49:35:1a:ac:
3c:cf:12:b6:01:7d:23:33:0e:d9:88:46:a7:99:1d:91:5b:47:
3c:0c:d0:2a:ae:0d:78:e4:7c:34:d9:4d:a6:42:34:9c:a0:c5:
ca:78:30:e4:d9:89:2e:2c:8a:d8:82:6c:59:84:88:24:f3:2e:
a7:a1:cf:92:78:15:68:ff:ca:1b:78:11:d8:59:e0:d3:6c:39:
b0:b3:99:85:a8:76:46:e9:0d:78:a2:12:61:a4:de:39:d8:db:
45:78:f2:c3:75:df:bf:a5:51:ab:dd:af:5a:a5:1e:93:51:f5:
2b:05:1c:ea:e2:d6:eb:57:54:f4:7e:ee:34:f3:da:c1:07:9b:
76:a3:b2:48:03:62:91:24:08:25:cf:9f:5c:e4:33:65:33:5f:
3d:45:d0:50:41:98:4d:8d:75:9e:e6:3a:7b:2f:c5:4e:24:80:
65:4c:2f:7a:45:b9:98:59:75:05:c0:15:93:aa:0d:41:f4:d9:
3b:02:65:87:5d:99:8b:35:d2:33:93:2b:a9:06:fb:4b:b9:b3:
04:e0:8b:97:a1:bf:bf:73:ed:dc:f0:55:9d:7d:c1:80:2c:47:
04:bd:43:29:b0:08:53:4e:28:18:cd:2b:99:bd:0f:36:d8:f0:
27:a5:f2:cb
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAYee2IEJcrzqj6AJjeoOkrnFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl
OGRhZjgwHhcNMjMwNDIwMTMyNjQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YzI2ZTI2MGEwOTZlOWEyMmJhYjUzMTdmNmJkMjQ5OWYwOTliNjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApp0XKR23MpUzRYgLbuNp6cb51a4h
sVDB8QXhpjvR0Jzsbkjk2WYWkBg3S7iZApTOIX5+zETcmk8rpOYxgLjTghKxZtA6
fWqY2w73KdgBRbEgqeaAoGrV1qhlgf3WE0hMGtm0azn0Sx9ZHuoctqfeItm4DyRb
XegissPEQG1RUv3EJHGGJVeZWpwg1mcT/U5FCPKUCF+57uWJ6WygFmw/20L8Qaib
H9OFVGh/M8hMBqFcjdj0tQ5jJkRuVv1hhdz5HYKLWeWXJPg+cl3MUuHkmx9VKKFh
hPNzohQR/ld1RbuzLKSoNqOPbbPDpeVxbVHexawv9n3eq4bWVSf2p85zSwIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFHwm4mCglumiK6tTF/a9JJnwmbZXMB8GA1UdIwQY
MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt
MGNiYTMzZWZjNWJiLzEvZkNiaVlLQ1c2YUlycTFNWDlyMGttZkNadGxjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi
LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBAI+PKQD
BAA+PMQwDAMEAj481AMEAj482DANBgkqhkiG9w0BAQsFAAOCAQEAsk/VDfB0QMtb
btABXA9JNRqsPM8StgF9IzMO2YhGp5kdkVtHPAzQKq4NeOR8NNlNpkI0nKDFyngw
5NmJLiyK2IJsWYSIJPMup6HPkngVaP/KG3gR2Fng02w5sLOZhah2RukNeKISYaTe
OdjbRXjyw3Xfv6VRq92vWqUek1H1KwUc6uLW61dU9H7uNPPawQebdqOySANikSQI
Jc+fXOQzZTNfPUXQUEGYTY11nuY6ey/FTiSAZUwvekW5mFl1BcAVk6oNQfTZOwJl
h12ZizXSM5MrqQb7S7mzBOCLl6G/v3Pt3PBVnX3BgCxHBL1DKbAIU04oGM0rmb0P
NtjwJ6Xyyw==
-----END CERTIFICATE-----
Generated at Sun May 11 01:55:07 2025 by rpki-client