Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/Dh3oSMz0d1JgZ7dTlSOgv0leanU.roa
File: Dh3oSMz0d1JgZ7dTlSOgv0leanU.roa (raw, json)
Hash identifier: n36XFG+C3gp4eKD3zlYgshxe4HbkoGfRQesKW1qsVOY=
Subject key identifier: 0E:1D:E8:48:CC:F4:77:52:60:67:B7:53:95:23:A0:BF:49:5E:6A:75
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 0183B70BB6F3C6E4D2AF191FC8BCBE2443DD
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/Dh3oSMz0d1JgZ7dTlSOgv0leanU.roa
Signing time: Sat 08 Oct 2022 10:02:21 +0000
ROA not before: Sat 08 Oct 2022 10:02:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204650
IP address blocks: 62.220.118.0/24 maxlen: 24
62.220.118.0/23 maxlen: 24
62.220.119.0/24 maxlen: 24
81.12.43.0/24 maxlen: 24
87.107.100.0/22 maxlen: 22
81.12.77.0/24 maxlen: 24
81.12.96.0/22 maxlen: 22
81.12.96.0/21 maxlen: 24
81.12.100.0/24 maxlen: 24
81.12.102.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:b7:0b:b6:f3:c6:e4:d2:af:19:1f:c8:bc:be:24:43:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Oct 8 10:02:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0e1de848ccf477526067b7539523a0bf495e6a75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ff:d3:3b:c0:31:a0:5b:c4:0d:c7:d9:37:be:
ed:6f:03:1b:00:43:49:58:2f:e4:24:44:d2:38:bd:
28:4a:79:d2:39:66:b4:2b:b5:18:47:ac:40:5d:d1:
0d:58:7e:13:dd:96:80:21:0a:2d:56:2f:56:a1:66:
3d:4d:3b:73:68:97:13:45:c7:b1:31:ec:cf:ba:1a:
04:49:36:ed:ec:d6:cd:18:8c:ec:6b:0a:4d:ce:c2:
25:e8:29:f7:ef:29:62:97:dc:83:6d:5a:2d:4a:76:
ff:a0:eb:61:75:39:48:7d:80:d0:9d:7b:e6:b9:b5:
da:37:c5:ad:04:d0:cf:1e:6a:0f:90:35:79:f1:ad:
a4:48:4a:31:fa:7e:d5:d0:0a:d4:a8:89:a1:32:8f:
e5:92:6a:79:ff:a2:5f:fe:4f:19:58:c0:a3:1e:4e:
3e:b2:fe:da:e1:ea:00:f0:93:17:4b:83:60:24:42:
c5:26:c6:75:b3:1d:8d:b6:40:45:5f:20:1f:93:83:
d3:a2:a7:a0:a9:89:77:92:83:71:c9:c7:7f:12:61:
c6:eb:ac:48:25:e2:24:88:2a:6a:27:3f:4e:dd:51:
21:c9:e8:2b:00:82:42:25:51:c5:93:e7:b3:83:cc:
2c:59:52:ac:0d:d5:60:bd:83:d8:e2:dd:1a:16:ef:
7a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:1D:E8:48:CC:F4:77:52:60:67:B7:53:95:23:A0:BF:49:5E:6A:75
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/Dh3oSMz0d1JgZ7dTlSOgv0leanU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.220.118.0/23
81.12.43.0/24
81.12.77.0/24
81.12.96.0/21
87.107.100.0/22
Signature Algorithm: sha256WithRSAEncryption
35:ad:93:75:fa:e7:62:a1:d3:5f:9a:ab:cd:58:f0:2f:65:9d:
e3:cb:8f:c4:70:ca:f7:51:9e:44:cf:db:b9:be:ae:4c:29:eb:
fe:0a:a6:16:9e:96:d4:2b:66:3d:a4:40:80:c4:19:23:9c:be:
10:a3:ab:c5:7a:a8:02:a1:5a:37:d4:a1:85:34:c3:ca:b3:34:
2c:ba:be:3d:46:ac:75:cc:2f:e6:13:c6:29:bd:49:ee:c4:b1:
a1:92:92:6f:b8:0a:65:bf:ee:f2:2b:92:52:af:4e:3d:46:aa:
66:0a:8c:86:ce:5d:de:ca:b3:21:2d:68:6c:88:7f:ad:33:f8:
5f:9a:91:64:5c:31:b2:fb:f8:91:26:97:fe:3b:fd:c4:0e:f1:
1b:a9:69:fd:23:d6:38:c0:8c:cd:f9:f8:15:10:51:00:46:43:
ed:d7:dc:32:7c:12:30:5d:59:0b:5e:d3:a3:ee:cb:ac:f5:86:
84:eb:d9:47:98:d7:ca:1b:22:db:84:db:da:00:8d:be:91:56:
15:5e:a0:e4:fe:26:ff:34:7b:0f:dd:7a:9f:df:24:e0:59:85:
3b:b3:92:d9:7b:1a:a1:8b:8d:6c:2e:1d:de:16:a3:1f:12:41:
32:50:9f:1d:04:32:6c:1d:0e:35:d8:87:4f:3f:21:29:65:25:
ee:89:b7:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:33 2023 by rpki-client on console-ams.rpki-client.org