Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/LLCUnCAmtfckldXSTuj0vq7Qn_w.roa
File: LLCUnCAmtfckldXSTuj0vq7Qn_w.roa (raw, json)
Hash identifier: 6C0f6i0R75VFmLhxu/ZCfRfPm9lnM9m/mzyGFOpOT4A=
Subject key identifier: 2C:B0:94:9C:20:26:B5:F7:24:95:D5:D2:4E:E8:F4:BE:AE:D0:9F:FC
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 379EDE69
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/LLCUnCAmtfckldXSTuj0vq7Qn_w.roa
Signing time: Sat 01 Jan 2022 08:55:45 +0000
ROA not before: Sat 01 Jan 2022 08:55:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42337
IP address blocks: 87.107.44.0/22 maxlen: 22
87.107.44.0/24 maxlen: 24
87.107.48.0/23 maxlen: 23
87.107.45.0/24 maxlen: 24
87.107.46.0/24 maxlen: 24
87.107.47.0/24 maxlen: 24
87.107.72.0/21 maxlen: 21
87.107.84.0/24 maxlen: 24
87.107.80.0/22 maxlen: 22
87.107.80.0/21 maxlen: 21
87.107.86.0/23 maxlen: 23
87.107.16.0/21 maxlen: 21
87.107.20.0/22 maxlen: 22
87.107.18.0/24 maxlen: 24
87.107.28.0/22 maxlen: 22
87.107.30.0/24 maxlen: 24
87.107.32.0/23 maxlen: 23
87.107.36.0/22 maxlen: 22
87.107.37.0/24 maxlen: 24
87.107.36.0/24 maxlen: 24
87.107.92.0/24 maxlen: 24
87.107.94.0/23 maxlen: 23
87.107.92.0/22 maxlen: 22
87.107.100.0/22 maxlen: 22
87.107.104.0/21 maxlen: 21
87.107.104.0/22 maxlen: 22
87.107.136.0/21 maxlen: 21
87.107.136.0/22 maxlen: 22
87.107.138.0/24 maxlen: 24
87.107.139.0/24 maxlen: 24
87.107.136.0/24 maxlen: 24
87.107.137.0/24 maxlen: 24
87.107.142.0/23 maxlen: 23
87.107.140.0/23 maxlen: 23
87.107.140.0/24 maxlen: 24
81.12.0.0/21 maxlen: 21
81.12.4.0/24 maxlen: 24
81.12.7.0/24 maxlen: 24
81.12.5.0/24 maxlen: 24
81.12.37.0/24 maxlen: 24
81.12.32.0/21 maxlen: 21
81.12.44.0/24 maxlen: 24
81.12.39.0/24 maxlen: 24
81.12.40.0/24 maxlen: 24
81.12.40.0/21 maxlen: 21
81.12.46.0/24 maxlen: 24
81.12.47.0/24 maxlen: 24
81.12.45.0/24 maxlen: 24
81.12.112.0/22 maxlen: 22
81.12.108.0/24 maxlen: 24
81.12.111.0/24 maxlen: 24
81.12.106.0/24 maxlen: 24
81.12.107.0/24 maxlen: 24
81.12.115.0/24 maxlen: 24
81.12.118.0/24 maxlen: 24
81.12.120.0/21 maxlen: 21
81.12.123.0/24 maxlen: 24
81.12.124.0/24 maxlen: 24
81.12.121.0/24 maxlen: 24
81.12.126.0/23 maxlen: 23
81.12.54.0/24 maxlen: 24
81.12.55.0/24 maxlen: 24
81.12.54.0/23 maxlen: 23
81.12.56.0/23 maxlen: 23
81.12.63.0/24 maxlen: 24
81.12.62.0/24 maxlen: 24
81.12.60.0/22 maxlen: 22
81.12.64.0/18 maxlen: 18
81.12.72.0/24 maxlen: 24
81.12.76.0/22 maxlen: 22
81.12.74.0/23 maxlen: 23
81.12.77.0/24 maxlen: 24
81.12.78.0/24 maxlen: 24
81.12.73.0/24 maxlen: 24
81.12.74.0/24 maxlen: 24
81.12.76.0/24 maxlen: 24
81.12.80.0/22 maxlen: 22
81.12.84.0/23 maxlen: 23
81.12.90.0/23 maxlen: 23
81.12.86.0/24 maxlen: 24
81.12.88.0/24 maxlen: 24
81.12.89.0/24 maxlen: 24
81.12.94.0/24 maxlen: 24
81.12.95.0/24 maxlen: 24
62.220.113.0/24 maxlen: 24
62.220.112.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 933158505 (0x379ede69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jan 1 08:55:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2cb0949c2026b5f72495d5d24ee8f4beaed09ffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5d:df:a3:0b:3c:7b:b9:40:c4:af:84:3e:7a:
48:fc:73:69:e9:5e:3d:75:2b:5e:c1:af:aa:0a:aa:
4d:ab:59:0d:7f:f7:ec:04:94:85:59:f5:1f:7c:ec:
43:9f:bc:35:09:6d:e0:04:f0:1e:a0:29:1f:4b:9a:
65:b8:5f:16:dc:47:50:44:86:f0:29:4c:16:50:1e:
81:de:ed:6b:5c:7e:5b:05:65:1c:ec:7d:09:a6:1b:
a8:42:ba:b0:1d:3a:ff:33:92:69:cb:8d:42:c2:37:
3e:07:3f:c3:f8:fd:70:f3:da:93:73:69:58:6d:f5:
09:ed:85:ca:9f:0b:a0:9b:ca:1c:e6:e0:8b:db:9f:
b4:2d:c8:f8:f2:28:47:9d:b4:a3:9c:9f:55:8c:42:
cb:20:bf:b3:48:43:a7:01:db:94:71:7a:30:51:be:
fc:d9:35:4d:d2:9f:b5:c4:0f:13:09:5a:42:56:36:
fe:56:d0:80:1f:f5:a0:e3:75:53:18:b2:5e:1a:17:
68:8c:8b:97:ad:b6:77:de:66:18:b8:d0:17:dd:b4:
ce:03:85:53:ce:cb:b6:68:b1:da:60:35:78:22:79:
6c:69:e8:96:78:f8:ec:89:dc:54:c9:83:ca:88:3f:
26:ff:d5:27:60:c7:e3:52:69:3a:51:67:e9:2e:ff:
61:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B0:94:9C:20:26:B5:F7:24:95:D5:D2:4E:E8:F4:BE:AE:D0:9F:FC
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/LLCUnCAmtfckldXSTuj0vq7Qn_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.220.112.0/21
81.12.0.0/21
81.12.32.0/20
81.12.54.0-81.12.57.255
81.12.60.0-81.12.127.255
87.107.16.0/21
87.107.28.0-87.107.33.255
87.107.36.0/22
87.107.44.0-87.107.49.255
87.107.72.0-87.107.87.255
87.107.92.0/22
87.107.100.0-87.107.111.255
87.107.136.0/21
Signature Algorithm: sha256WithRSAEncryption
20:ef:d5:d7:c6:f0:0d:9d:c3:72:f3:f5:52:6c:12:0c:4c:f5:
17:8d:44:57:f4:f9:f0:2b:86:98:74:de:44:2a:4e:79:9d:52:
2c:65:4c:b1:9e:6a:4c:1a:8c:a9:08:0a:bf:b7:32:0d:93:62:
13:3b:b1:46:58:81:6b:12:3d:6f:7a:ee:29:a5:3e:32:dd:d3:
89:3f:6f:b9:aa:ce:f9:37:50:e4:2a:dc:db:5b:b0:4a:15:6e:
55:4e:9a:fb:bd:69:42:e1:e0:de:c0:dd:6e:c4:0d:d3:72:69:
f8:88:39:71:f9:44:37:97:a6:13:f6:5c:92:1f:33:e9:0e:7e:
e8:11:c6:fa:ea:3a:42:aa:f7:6f:48:c6:0f:95:70:77:c6:34:
d9:8d:c9:f3:29:e4:ba:23:f2:ea:8e:e6:29:ac:85:9e:e0:dd:
70:b2:4d:26:3a:cb:9d:67:af:66:db:d7:56:c6:15:11:1f:e9:
b6:72:45:17:76:09:67:52:c0:42:cc:0a:a6:0c:cb:6c:97:59:
71:a6:7e:c1:60:a4:c9:5d:48:30:4f:69:ec:50:f2:db:1a:78:
e6:72:d6:7a:22:c5:61:7b:e2:c7:c8:47:b3:97:13:9e:34:9c:
7e:88:3f:af:b3:55:40:dd:1a:14:9e:db:a3:f8:1f:7d:bc:ef:
41:2b:00:ce
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:56 2024 by rpki-client on console-fra.rpki-client.org