Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/DDDs9_arEDUt0pktdjhtj7EKSnc.roa
File: DDDs9_arEDUt0pktdjhtj7EKSnc.roa (raw, json)
Hash identifier: F3EACWc0A/u9M1NRifGa2CdHs0aa9GcjUw5OgjkWXmc=
Subject key identifier: 0C:30:EC:F7:F6:AB:10:35:2D:D2:99:2D:76:38:6D:8F:B1:0A:4A:77
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 01882FEA26ED70222A7AEBB6A60D55930D26
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/DDDs9_arEDUt0pktdjhtj7EKSnc.roa
Signing time: Thu 18 May 2023 17:30:54 +0000
ROA not before: Thu 18 May 2023 17:30:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21341
IP address blocks: 87.107.42.0/23 maxlen: 23
87.107.41.0/24 maxlen: 24
87.107.40.0/24 maxlen: 24
87.107.51.0/24 maxlen: 24
87.107.50.0/23 maxlen: 24
87.107.50.0/24 maxlen: 24
87.107.52.0/23 maxlen: 23
87.107.68.0/22 maxlen: 24
87.107.88.0/22 maxlen: 22
87.107.24.0/22 maxlen: 22
87.107.34.0/23 maxlen: 23
62.220.120.0/22 maxlen: 22
62.220.124.0/23 maxlen: 23
87.107.168.0/22 maxlen: 24
87.107.173.0/24 maxlen: 24
185.60.136.0/24 maxlen: 24
185.60.139.0/24 maxlen: 24
185.60.138.0/24 maxlen: 24
185.60.137.0/24 maxlen: 24
87.107.96.0/22 maxlen: 24
87.107.112.0/22 maxlen: 24
87.107.116.0/23 maxlen: 23
87.107.120.0/21 maxlen: 24
87.107.128.0/22 maxlen: 22
87.107.132.0/22 maxlen: 22
62.220.96.0/21 maxlen: 24
62.220.104.0/21 maxlen: 24
81.12.8.0/22 maxlen: 22
81.12.12.0/22 maxlen: 22
81.12.16.0/21 maxlen: 21
81.12.24.0/22 maxlen: 22
81.12.48.0/22 maxlen: 22
81.12.58.0/24 maxlen: 24
81.12.52.0/23 maxlen: 23
81.12.59.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:2f:ea:26:ed:70:22:2a:7a:eb:b6:a6:0d:55:93:0d:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: May 18 17:30:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0c30ecf7f6ab10352dd2992d76386d8fb10a4a77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:25:9b:e7:94:04:67:fc:0f:eb:92:c1:a8:9f:
ee:f7:0e:39:e5:8d:ef:e9:8e:67:9b:7c:cd:41:73:
7e:cc:37:ba:4c:0d:c9:0c:7f:59:15:4d:b2:80:a5:
1c:ec:8e:e7:cb:06:4f:04:79:8f:0c:4e:ec:11:4b:
1d:fd:73:5a:af:0b:e4:1d:67:88:fa:29:0a:01:2d:
00:79:f3:65:6c:09:08:4d:0f:c4:6f:54:c8:86:b0:
7f:33:5e:b7:b9:32:8c:a0:ad:9e:bd:17:09:15:05:
0f:86:7c:a3:cf:84:b7:15:c8:c2:b6:fe:a5:53:e5:
2e:5b:5f:d7:bd:0c:c4:95:0f:62:66:15:16:40:42:
ee:98:5e:84:22:20:ac:60:71:d6:34:7a:09:a4:8f:
a0:51:6a:51:07:0a:3b:cc:ae:a3:d1:e3:17:7a:03:
b1:61:02:19:cd:5c:a8:fd:24:fb:c5:a0:b4:7a:2c:
37:ca:e8:67:9c:c2:0d:85:15:80:54:71:0b:e7:85:
40:82:5c:6b:11:0b:7d:e6:3f:d8:74:7d:c5:9a:6f:
0b:50:f1:8b:4f:c4:4f:43:23:db:ef:f2:ae:e2:de:
4a:5f:22:a0:06:7d:76:49:46:ec:9c:80:6d:48:1c:
01:24:a5:d3:8f:8f:69:d8:c4:9e:c8:cd:4e:90:c0:
d1:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:30:EC:F7:F6:AB:10:35:2D:D2:99:2D:76:38:6D:8F:B1:0A:4A:77
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/DDDs9_arEDUt0pktdjhtj7EKSnc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.220.96.0/20
62.220.120.0-62.220.125.255
81.12.8.0-81.12.27.255
81.12.48.0-81.12.53.255
81.12.58.0/23
87.107.24.0/22
87.107.34.0/23
87.107.40.0/22
87.107.50.0-87.107.53.255
87.107.68.0/22
87.107.88.0/22
87.107.96.0/22
87.107.112.0-87.107.117.255
87.107.120.0-87.107.135.255
87.107.168.0/22
87.107.173.0/24
185.60.136.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:9d:68:e8:45:71:16:77:aa:b3:70:7e:7b:40:46:d0:93:58:
21:3a:e8:94:ab:c1:14:04:e9:1b:07:e3:69:48:ae:ca:7b:e0:
6b:f0:f8:cf:d3:02:35:f9:d2:b0:01:9e:dd:aa:9d:df:57:14:
da:e8:58:02:00:89:60:ef:9d:37:1c:86:fe:80:ee:e9:5e:ee:
c5:14:a0:25:6d:df:65:8b:a5:e9:6d:a2:d6:08:26:03:08:dd:
c8:6f:57:2d:0c:64:8b:d9:33:72:b1:60:5c:6f:80:3a:e8:b2:
be:e1:68:db:b3:92:bf:7d:ec:89:1b:d7:d6:47:08:12:4f:e9:
ec:e6:dc:45:12:c8:e5:1f:da:00:f0:12:2d:db:90:ed:1c:e9:
02:ea:6a:ad:e6:85:0a:c3:10:a3:fa:26:90:7c:fe:36:f9:16:
37:79:19:e1:ec:86:85:7b:9d:16:e9:55:51:e9:c4:9a:c3:e8:
fd:e9:1c:d5:d4:6c:84:93:34:b3:1e:43:e8:b6:3f:e6:13:82:
40:01:6c:0e:a6:df:64:dc:22:df:10:19:f4:f0:d7:e3:9b:9a:
96:3b:9c:1a:39:51:3d:88:95:39:ea:2b:3a:7d:df:7d:19:51:
95:de:ad:c7:2c:b6:f2:08:1f:29:71:82:a5:9c:e9:b9:f3:03:
f8:18:8a:32
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgISAYgv6ibtcCIqeuu2pg1Vkw0mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwNzc1ZDk0NzFiODVkOTYzZmVmNmQyODM1OTBlMmQ5NDJk
ZDVjMjEwHhcNMjMwNTE4MTczMDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYzMwZWNmN2Y2YWIxMDM1MmRkMjk5MmQ3NjM4NmQ4ZmIxMGE0YTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiWb55QEZ/wP65LBqJ/u9w455Y3v
6Y5nm3zNQXN+zDe6TA3JDH9ZFU2ygKUc7I7nywZPBHmPDE7sEUsd/XNarwvkHWeI
+ikKAS0AefNlbAkITQ/Eb1TIhrB/M163uTKMoK2evRcJFQUPhnyjz4S3FcjCtv6l
U+UuW1/XvQzElQ9iZhUWQELumF6EIiCsYHHWNHoJpI+gUWpRBwo7zK6j0eMXegOx
YQIZzVyo/ST7xaC0eiw3yuhnnMINhRWAVHEL54VAglxrEQt95j/YdH3Fmm8LUPGL
T8RPQyPb7/Ku4t5KXyKgBn12SUbsnIBtSBwBJKXTj49p2MSeyM1OkMDRrwIDAQAB
o4ICnjCCApowHQYDVR0OBBYEFAww7Pf2qxA1LdKZLXY4bY+xCkp3MB8GA1UdIwQY
MBaAFAB3XZRxuF2WP+9tKDWQ4tlC3VwhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQt
NzZiMzNlNGNlODIxLzEvREREczlfYXJFRFV0MHBrdGRqaHRqN0VLU25jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQtNzZiMzNlNGNlODIx
LzEvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGzBggrBgEFBQcBBwEB/wSBozCBoDCBnQQCAAEwgZYDBAQ+
3GAwDAMEAz7ceAMEAT7cfDAMAwQDUQwIAwQCUQwYMAwDBARRDDADBAFRDDQDBAFR
DDoDBAJXaxgDBAFXayIDBAJXaygwDAMEAVdrMgMEAVdrNAMEAldrRAMEAldrWAME
AldrYDAMAwQEV2twAwQBV2t0MAwDBANXa3gDBANXa4ADBAJXa6gDBABXa60DBAK5
PIgwDQYJKoZIhvcNAQELBQADggEBAEydaOhFcRZ3qrNwfntARtCTWCE66JSrwRQE
6RsH42lIrsp74Gvw+M/TAjX50rABnt2qnd9XFNroWAIAiWDvnTcchv6A7ule7sUU
oCVt32WLpeltotYIJgMI3chvVy0MZIvZM3KxYFxvgDrosr7haNuzkr997Ikb19ZH
CBJP6ezm3EUSyOUf2gDwEi3bkO0c6QLqaq3mhQrDEKP6JpB8/jb5Fjd5GeHshoV7
nRbpVVHpxJrD6P3pHNXUbISTNLMeQ+i2P+YTgkABbA6m32TcIt8QGfTw1+ObmpY7
nBo5UT2IlTnqKzp9330ZUZXerccstvIIHylxgqWc6bnzA/gYijI=
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:11:01 2025 by rpki-client