Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/JWUWHr7UOPg5coDUBLmYC_ili1g.roa
File: JWUWHr7UOPg5coDUBLmYC_ili1g.roa (raw, json)
Hash identifier: QXIYJPwpxc8x2/8Qf0w9b8842toYZxz3QikZHPMeapE=
Subject key identifier: 25:65:16:1E:BE:D4:38:F8:39:72:80:D4:04:B9:98:0B:F8:A5:8B:58
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 38103810
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/JWUWHr7UOPg5coDUBLmYC_ili1g.roa
Signing time: Tue 08 Feb 2022 09:11:34 +0000
ROA not before: Tue 08 Feb 2022 09:11:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21341
IP address blocks: 87.107.42.0/23 maxlen: 23
87.107.41.0/24 maxlen: 24
87.107.40.0/24 maxlen: 24
87.107.50.0/23 maxlen: 23
87.107.51.0/24 maxlen: 24
87.107.50.0/24 maxlen: 24
87.107.52.0/22 maxlen: 22
87.107.52.0/23 maxlen: 23
87.107.68.0/22 maxlen: 22
87.107.88.0/22 maxlen: 22
87.107.24.0/22 maxlen: 22
87.107.34.0/23 maxlen: 23
62.220.120.0/22 maxlen: 22
62.220.124.0/22 maxlen: 22
185.60.136.0/24 maxlen: 24
185.60.139.0/24 maxlen: 24
185.60.138.0/24 maxlen: 24
185.60.137.0/24 maxlen: 24
87.107.173.0/24 maxlen: 24
87.107.96.0/22 maxlen: 22
87.107.122.0/24 maxlen: 24
87.107.120.0/21 maxlen: 21
87.107.132.0/22 maxlen: 22
87.107.128.0/22 maxlen: 22
62.220.96.0/21 maxlen: 21
62.220.104.0/21 maxlen: 21
81.12.8.0/22 maxlen: 22
81.12.12.0/22 maxlen: 22
81.12.16.0/21 maxlen: 21
81.12.24.0/22 maxlen: 22
81.12.48.0/22 maxlen: 22
81.12.58.0/24 maxlen: 24
81.12.52.0/23 maxlen: 23
81.12.59.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 940587024 (0x38103810)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Feb 8 09:11:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2565161ebed438f8397280d404b9980bf8a58b58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cb:5d:ef:9c:82:36:ed:dd:d1:0e:c9:1e:ec:
25:0a:73:72:04:53:b9:45:a1:f4:ed:27:a4:a2:76:
47:a1:03:9f:d1:6f:7c:32:ec:31:6c:50:76:38:f5:
b2:cd:dd:e4:71:a3:b1:ad:bf:00:0e:aa:52:23:01:
9b:69:1f:05:d6:14:c8:25:d4:63:47:76:af:9c:73:
a2:94:c0:90:1b:97:6e:de:0f:2e:30:8a:dc:92:95:
82:2f:e7:35:b5:97:8c:21:e4:f0:93:ab:b2:df:97:
f9:98:ea:74:3d:d0:8e:bf:26:62:c2:ca:4c:ea:25:
ad:8b:53:dc:d7:be:fb:05:4d:3e:f3:6a:6b:78:6f:
cf:19:82:c8:3e:9a:f8:43:4a:fe:91:6f:d6:24:f4:
63:71:d7:89:56:1b:25:a9:e8:75:49:8e:d9:ae:39:
87:05:fb:6b:02:e2:02:d2:02:69:97:e1:56:3d:f3:
bb:44:91:48:98:06:98:13:2f:8c:f0:52:20:7c:33:
50:19:5e:36:cb:ba:e8:59:73:ef:8e:68:5e:51:b9:
ba:cf:7b:ce:21:61:37:c6:71:dd:42:cc:9f:09:6c:
4c:2a:a4:24:e3:48:c2:fb:e2:b4:9b:96:91:8b:a0:
45:ca:47:0b:e0:1b:ff:b5:78:91:b2:5a:42:96:2a:
6f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:65:16:1E:BE:D4:38:F8:39:72:80:D4:04:B9:98:0B:F8:A5:8B:58
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/JWUWHr7UOPg5coDUBLmYC_ili1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.220.96.0/20
62.220.120.0/21
81.12.8.0-81.12.27.255
81.12.48.0-81.12.53.255
81.12.58.0/23
87.107.24.0/22
87.107.34.0/23
87.107.40.0/22
87.107.50.0-87.107.55.255
87.107.68.0/22
87.107.88.0/22
87.107.96.0/22
87.107.120.0-87.107.135.255
87.107.173.0/24
185.60.136.0/22
Signature Algorithm: sha256WithRSAEncryption
82:a6:7a:18:9e:5e:9e:5d:46:24:fa:07:52:30:75:17:f8:af:
e4:dd:20:66:17:44:57:47:97:25:93:7e:29:7a:29:73:89:85:
99:92:28:1e:f1:64:73:b0:40:19:da:19:c8:97:8e:c7:56:65:
d8:d3:d0:e6:6b:7c:32:f7:54:5b:08:d1:61:52:64:25:23:88:
12:7c:2e:7a:d9:7c:6d:16:47:3d:66:ab:4a:d6:ad:39:90:36:
7c:36:6b:eb:70:cb:57:4a:92:90:53:54:e7:f2:68:f4:2a:b2:
f9:52:b8:9c:da:59:b3:f5:f5:86:dc:44:df:26:99:94:54:ac:
7c:cc:ca:6a:98:57:2e:6a:f8:e1:c1:52:01:bb:e1:47:d3:ff:
d9:e3:d8:ed:e5:27:7d:87:65:1d:8a:9f:75:90:28:a3:13:b7:
78:a8:8a:e2:85:96:39:1c:f6:2e:ff:b9:49:50:4e:23:49:1b:
ac:d2:f8:1a:93:0d:43:d4:dc:e0:7b:f4:63:ab:06:09:a7:8e:
83:3c:5a:14:6f:0d:43:ba:e1:cd:e0:89:e4:85:23:9b:25:0f:
28:7c:6d:85:6d:73:d7:07:ae:fc:94:2f:bd:68:f4:02:e0:1e:
28:b1:39:91:87:ea:88:52:e9:d9:9b:e1:00:bc:0a:cb:54:17:
87:10:51:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:39 2023 by rpki-client on console-fra.rpki-client.org