Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/1997s7kz1iV6TWxUW22-PXvjPX0.roa
File: 1997s7kz1iV6TWxUW22-PXvjPX0.roa (raw, json)
Hash identifier: t78s3kYbAflhDoUaWzUmNPNI6I9a+mODq0Dbczg3BCU=
Subject key identifier: D7:DF:7B:B3:B9:33:D6:25:7A:4D:6C:54:5B:6D:BE:3D:7B:E3:3D:7D
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 01886B8FC770DCB254CEB0DD899EC54C0E6B
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/1997s7kz1iV6TWxUW22-PXvjPX0.roa
Signing time: Tue 30 May 2023 07:29:24 +0000
ROA not before: Tue 30 May 2023 07:29:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208161
IP address blocks: 87.107.146.0/23 maxlen: 24
87.107.154.0/24 maxlen: 24
87.107.155.0/24 maxlen: 24
87.107.164.0/23 maxlen: 24
87.107.54.0/23 maxlen: 24
87.107.104.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:6b:8f:c7:70:dc:b2:54:ce:b0:dd:89:9e:c5:4c:0e:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: May 30 07:29:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d7df7bb3b933d6257a4d6c545b6dbe3d7be33d7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:97:47:1e:eb:5a:b8:56:8d:a0:10:5f:f2:1f:
72:d2:99:de:52:34:c4:4b:52:7f:d3:39:a3:da:57:
f6:a9:6f:7a:a5:43:90:b6:cd:e7:df:a8:65:ef:0c:
36:d0:fb:1b:98:fd:41:11:13:63:2a:6b:52:e6:a7:
22:31:27:45:31:ab:a7:c7:6b:5d:33:df:55:6a:6d:
ad:37:40:b5:c2:13:15:14:43:0d:68:0a:c7:1c:26:
3b:c7:93:e1:63:dc:9b:05:54:5d:17:e9:69:c8:9a:
6b:3c:19:54:cf:0e:eb:17:85:59:04:ac:71:e9:0b:
25:e1:44:e3:a4:32:a0:1d:45:c4:42:1e:a7:10:3b:
4a:88:3c:a5:6b:37:37:7d:ad:ec:56:63:b4:16:4e:
65:b4:59:4f:d4:14:48:88:87:c4:a1:cc:fe:15:85:
06:56:d3:96:24:3d:3f:ec:0e:cd:00:13:89:f0:e5:
1a:8d:20:d3:ae:b2:cb:5c:9b:80:5a:c0:c0:5d:d5:
ff:88:55:8d:e8:e9:64:2d:44:1a:3c:02:87:ea:de:
e5:96:cb:19:72:cc:bf:52:a4:1e:6f:19:d3:9c:92:
77:a9:9e:27:d1:d2:2c:83:04:9d:8b:94:23:31:15:
a4:a1:80:42:bb:6c:40:9d:01:84:36:a3:c4:50:0e:
bc:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:DF:7B:B3:B9:33:D6:25:7A:4D:6C:54:5B:6D:BE:3D:7B:E3:3D:7D
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/1997s7kz1iV6TWxUW22-PXvjPX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.107.54.0/23
87.107.104.0/23
87.107.146.0/23
87.107.154.0/23
87.107.164.0/23
Signature Algorithm: sha256WithRSAEncryption
40:fa:27:a4:5a:14:76:d6:f7:7f:42:86:37:5a:62:66:6f:0a:
e9:10:45:bf:88:f5:1b:b0:0a:a3:35:d3:02:2b:76:31:12:ff:
4e:e9:ab:9f:1e:9c:52:9e:6e:82:c9:a8:79:8c:54:d0:f3:13:
19:46:05:da:fc:27:74:82:7c:07:00:8a:e1:43:05:b6:22:08:
13:de:3c:4d:1a:67:91:92:0e:b3:4a:19:2b:12:b3:1b:ee:05:
c1:8d:b0:1a:1e:e9:22:2f:6c:17:94:94:84:c0:06:48:71:ea:
85:65:de:74:f9:a2:49:fe:b7:c0:8d:11:81:f3:14:46:37:a4:
42:fd:ac:89:51:14:f3:e0:99:67:3b:e8:da:9d:57:f4:8c:64:
07:2a:de:59:87:4d:05:7e:36:3d:c6:17:95:b9:f0:e7:4a:c4:
cc:52:15:19:79:a9:ef:90:af:f2:a8:1d:e6:c7:66:1f:7a:6c:
35:00:d6:2b:59:e3:fd:31:f6:42:29:cf:aa:f5:ad:9c:fd:45:
fb:ab:b1:f8:6f:fc:3d:54:47:fc:d5:55:70:a4:7f:40:60:51:
0e:b4:1e:d1:8d:24:61:bd:5c:fb:98:df:4d:0a:89:fa:86:e9:
f0:e9:9a:1d:ae:b5:12:f6:5e:0b:8e:c8:2b:de:fd:22:64:45:
69:a6:6c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:29:04 2025 by rpki-client