Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/suOIOjbeVj3n8dutdn2Fj2GB85Q.roa
File: suOIOjbeVj3n8dutdn2Fj2GB85Q.roa (raw, json)
Hash identifier: B3xAHDgu7tmlvUpf0Z6JQOCIP5x8xMOH2c1xBFtuWYM=
Subject key identifier: B2:E3:88:3A:36:DE:56:3D:E7:F1:DB:AD:76:7D:85:8F:61:81:F3:94
Certificate issuer: /CN=02bbd4f865a12d79a09a034486ce61ba023882c7
Certificate serial: 07B1EBD6
Authority key identifier: 02:BB:D4:F8:65:A1:2D:79:A0:9A:03:44:86:CE:61:BA:02:38:82:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArvU-GWhLXmgmgNEhs5hugI4gsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/suOIOjbeVj3n8dutdn2Fj2GB85Q.roa
Signing time: Sat 01 Jan 2022 12:05:14 +0000
ROA not before: Sat 01 Jan 2022 12:05:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198589
IP address blocks: 37.77.48.0/21 maxlen: 21
37.77.49.0/24 maxlen: 24
37.77.48.0/24 maxlen: 24
37.77.51.0/24 maxlen: 24
37.77.50.0/24 maxlen: 24
37.77.52.0/24 maxlen: 24
37.77.55.0/24 maxlen: 24
37.77.54.0/24 maxlen: 24
37.77.53.0/24 maxlen: 24
5.62.133.0/24 maxlen: 24
5.62.137.0/24 maxlen: 24
5.62.136.0/24 maxlen: 24
5.62.135.0/24 maxlen: 24
5.62.134.0/24 maxlen: 24
5.62.139.0/24 maxlen: 24
5.62.138.0/24 maxlen: 24
5.62.140.0/24 maxlen: 24
5.62.144.0/24 maxlen: 24
5.62.143.0/24 maxlen: 24
5.62.144.0/21 maxlen: 21
5.62.142.0/24 maxlen: 24
5.62.141.0/24 maxlen: 24
5.62.145.0/24 maxlen: 24
5.62.147.0/24 maxlen: 24
5.62.146.0/24 maxlen: 24
5.62.151.0/24 maxlen: 24
5.62.150.0/24 maxlen: 24
5.62.149.0/24 maxlen: 24
5.62.148.0/24 maxlen: 24
5.62.130.0/24 maxlen: 24
5.62.129.0/24 maxlen: 24
5.62.128.0/24 maxlen: 24
5.62.128.0/20 maxlen: 20
5.62.132.0/24 maxlen: 24
5.62.131.0/24 maxlen: 24
185.69.4.0/22 maxlen: 22
185.69.4.0/24 maxlen: 24
185.69.7.0/24 maxlen: 24
185.69.6.0/24 maxlen: 24
185.69.5.0/24 maxlen: 24
31.7.82.0/23 maxlen: 23
31.7.83.0/24 maxlen: 24
31.7.82.0/24 maxlen: 24
31.7.81.0/24 maxlen: 24
31.7.80.0/21 maxlen: 21
31.7.80.0/24 maxlen: 24
31.7.85.0/24 maxlen: 24
31.7.84.0/24 maxlen: 24
31.7.86.0/24 maxlen: 24
31.7.87.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 129100758 (0x7b1ebd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02bbd4f865a12d79a09a034486ce61ba023882c7
Validity
Not Before: Jan 1 12:05:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b2e3883a36de563de7f1dbad767d858f6181f394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5c:03:76:35:2e:12:32:8d:85:f7:f3:88:1b:
ab:50:83:51:bb:10:ad:e3:ff:41:88:de:0e:b5:14:
bd:f9:00:32:6a:bd:78:6e:86:24:d9:ac:e7:ff:5f:
ce:25:55:76:4d:9f:b9:53:fb:39:12:01:00:0f:6a:
b7:5c:1b:d0:7d:e4:0e:c3:a0:27:72:25:63:7f:b6:
ef:ee:bd:16:1d:dc:fa:87:a4:98:f7:fe:b8:4c:b4:
c7:bf:cf:a1:77:6a:90:b7:41:3c:f1:6f:ab:66:2f:
3b:a8:a4:d9:d1:b2:b2:a4:76:a1:9b:4c:eb:25:d9:
92:e7:89:60:2b:ea:28:31:92:28:86:c5:3b:78:55:
aa:69:12:2f:72:d0:35:68:36:7f:2a:41:5f:57:18:
d1:ff:16:00:86:5c:f9:b4:5e:07:d6:81:b6:48:95:
79:57:82:2e:26:8d:7a:36:6c:6d:a0:a1:16:46:e3:
94:e4:86:b4:2b:ae:34:6b:67:e0:ae:ed:d5:d4:dc:
52:dd:db:88:d1:f6:e5:b0:31:7d:03:ac:da:3d:bf:
f0:10:c8:37:2a:16:af:e0:b8:b0:f3:d3:91:f3:71:
88:67:b1:b8:d1:72:39:63:85:20:e0:a4:6d:e6:de:
2d:08:97:21:fb:39:46:d0:27:32:67:62:14:84:d8:
1f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:E3:88:3A:36:DE:56:3D:E7:F1:DB:AD:76:7D:85:8F:61:81:F3:94
X509v3 Authority Key Identifier:
keyid:02:BB:D4:F8:65:A1:2D:79:A0:9A:03:44:86:CE:61:BA:02:38:82:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArvU-GWhLXmgmgNEhs5hugI4gsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/suOIOjbeVj3n8dutdn2Fj2GB85Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/ArvU-GWhLXmgmgNEhs5hugI4gsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.62.128.0-5.62.151.255
31.7.80.0/21
37.77.48.0/21
185.69.4.0/22
Signature Algorithm: sha256WithRSAEncryption
97:80:a8:0d:7a:f0:d1:3f:66:8d:9d:d6:74:40:70:20:ec:c3:
3b:a4:ed:8a:89:f6:5b:57:b3:06:10:33:e7:62:8e:95:e9:ac:
22:ca:8a:3b:38:13:ea:32:fd:e5:34:81:12:40:27:56:8d:58:
64:bf:5d:e4:25:fd:a1:c4:c9:51:f3:ba:36:d8:6d:bb:c4:de:
81:55:a7:e0:75:39:ec:d4:92:2c:3a:3b:86:aa:a4:4a:e8:5f:
88:9a:95:9a:6e:d7:2b:7f:25:ce:da:34:16:74:38:cc:81:c8:
49:3a:4d:a3:af:6a:6c:e7:1d:55:da:e2:91:b6:ec:b7:a1:aa:
af:25:e5:5e:1c:ce:8b:71:cc:19:87:10:7e:2a:9d:56:9e:4c:
d7:d5:b1:13:0e:83:22:06:04:b7:e2:02:05:6f:e3:ce:2d:d8:
c0:74:ca:e4:ca:cc:03:c6:7a:c1:0e:ad:12:58:fb:31:3f:eb:
7e:c4:c6:10:ab:c4:d9:d4:3d:f1:27:6d:10:a0:7f:21:aa:04:
16:49:1a:cc:dc:db:78:a7:05:14:87:98:2b:6a:83:70:8f:81:
68:f5:59:28:32:10:6c:ed:01:06:f7:a0:7e:dc:4d:04:90:c0:
9d:3b:e0:a1:88:fe:e6:ee:6b:94:0a:44:38:fe:43:e3:bb:58:
ef:e9:5d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:08 2023 by rpki-client on console-ams.rpki-client.org