Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/Jy5u6wHd6P2B131F3WQmZjfUEh0.roa
File: Jy5u6wHd6P2B131F3WQmZjfUEh0.roa (raw, json)
Hash identifier: dF8PhlYuS9eZtR1zxxVggH1ErwDpwwL2FB/1QId7OhA=
Subject key identifier: 27:2E:6E:EB:01:DD:E8:FD:81:D7:7D:45:DD:64:26:66:37:D4:12:1D
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 379D65D9
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/Jy5u6wHd6P2B131F3WQmZjfUEh0.roa
Signing time: Sat 01 Jan 2022 08:55:44 +0000
ROA not before: Sat 01 Jan 2022 08:55:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34865
IP address blocks: 87.107.168.0/22 maxlen: 22
87.107.112.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 933062105 (0x379d65d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jan 1 08:55:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=272e6eeb01dde8fd81d77d45dd64266637d4121d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7d:85:22:f2:59:02:49:6a:79:f1:8c:a2:3a:
d3:53:f9:7a:71:24:34:fb:bb:bd:26:24:17:f4:a4:
de:4b:f9:b1:67:84:dc:ff:9c:34:c4:10:3a:b2:98:
af:76:0c:31:fe:8b:35:84:30:0b:32:49:3e:7f:9f:
7e:07:36:fc:20:db:07:c4:c3:1c:34:3d:cc:f5:72:
a2:71:21:f3:e2:8e:d5:d8:dc:53:36:a8:8b:91:45:
4c:8d:31:f1:f8:98:96:cd:7d:ef:59:92:4f:33:00:
9f:d5:72:42:05:f2:6e:59:2b:09:76:44:33:1d:05:
ed:9f:14:4a:98:4c:76:6d:62:e5:b5:e2:ea:0e:b8:
37:db:04:3b:70:70:69:a4:26:f9:b4:ac:a9:67:2a:
ec:fd:92:85:7e:99:8e:e0:1d:ea:ec:34:61:d8:5c:
0c:90:8b:19:57:69:e0:98:77:69:e2:c0:3e:13:0c:
25:1a:3f:94:d6:9e:ba:4b:d0:4f:85:bf:47:89:01:
f4:77:ef:3c:00:0d:0e:b6:69:9b:46:14:1d:b0:23:
f9:9f:7e:e2:95:f0:f0:06:92:ba:05:10:0d:30:89:
a4:6c:41:8d:1c:9e:6e:1a:3c:ea:8c:2e:5a:68:ac:
7c:66:1e:0e:61:6e:78:8b:c1:c6:95:cc:fc:ef:e8:
2b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:2E:6E:EB:01:DD:E8:FD:81:D7:7D:45:DD:64:26:66:37:D4:12:1D
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/Jy5u6wHd6P2B131F3WQmZjfUEh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.107.112.0/22
87.107.168.0/22
Signature Algorithm: sha256WithRSAEncryption
bd:f8:e9:08:e7:bf:45:fb:e0:f2:29:4a:1c:7f:18:6f:3f:13:
ee:e8:82:d2:4f:98:2a:79:0e:96:1c:13:0b:5a:92:3b:4f:1d:
83:93:ce:68:14:4a:10:e3:27:d4:8b:f5:9c:36:68:43:44:49:
38:c7:8b:a0:81:62:c2:c3:4b:7f:50:da:ae:e6:2a:60:a7:3e:
f3:d6:85:63:42:0f:3b:40:f9:c6:84:ad:68:4b:a8:9f:86:85:
49:56:90:89:f3:a0:cc:3b:e8:25:d8:d8:98:8a:21:f2:20:f8:
6d:31:63:c8:f3:ed:a9:80:15:8f:6d:1f:63:fa:de:64:4e:8e:
c8:46:ff:94:b9:e1:26:00:9a:65:c4:63:ab:32:c6:49:b8:95:
ff:20:56:55:a0:02:f5:4d:ab:29:97:20:dd:ae:7b:72:48:fb:
5d:43:14:a9:68:fb:51:13:f3:21:26:07:34:ba:58:e5:67:a2:
df:42:ce:1b:94:89:0a:5e:76:33:31:5a:89:51:13:4c:66:f9:
0b:83:13:41:a9:78:de:1d:a8:b5:b1:44:35:be:de:b1:38:c6:
80:28:2f:28:47:83:26:b9:fa:6d:43:ce:b5:f9:83:0b:74:9e:
3e:69:75:fa:10:04:31:6b:9a:d5:9f:25:6d:32:bd:91:0e:2b:
0f:a0:62:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:21:58 2025 by rpki-client