Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/LTRjqYrAKep2jzliMOaL7dAv-cU.roa
File: LTRjqYrAKep2jzliMOaL7dAv-cU.roa (raw, json)
Hash identifier: OBrcpRCR/PgO2EhM4v3BRdy3F9yeAiCPzXU33t6pJGE=
Subject key identifier: 2D:34:63:A9:8A:C0:29:EA:76:8F:39:62:30:E6:8B:ED:D0:2F:F9:C5
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 37F3AD81
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/LTRjqYrAKep2jzliMOaL7dAv-cU.roa
Signing time: Wed 26 Jan 2022 09:52:05 +0000
ROA not before: Wed 26 Jan 2022 09:52:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21341
IP address blocks: 87.107.42.0/23 maxlen: 23
87.107.40.0/23 maxlen: 23
87.107.41.0/24 maxlen: 24
87.107.40.0/24 maxlen: 24
87.107.50.0/23 maxlen: 23
87.107.51.0/24 maxlen: 24
87.107.50.0/24 maxlen: 24
87.107.52.0/22 maxlen: 22
87.107.52.0/23 maxlen: 23
87.107.68.0/22 maxlen: 22
87.107.88.0/22 maxlen: 22
87.107.24.0/22 maxlen: 22
87.107.34.0/23 maxlen: 23
62.220.120.0/22 maxlen: 22
62.220.124.0/22 maxlen: 22
185.60.136.0/24 maxlen: 24
185.60.139.0/24 maxlen: 24
185.60.138.0/24 maxlen: 24
185.60.137.0/24 maxlen: 24
87.107.173.0/24 maxlen: 24
87.107.96.0/22 maxlen: 22
87.107.122.0/24 maxlen: 24
87.107.120.0/21 maxlen: 21
87.107.132.0/22 maxlen: 22
87.107.128.0/22 maxlen: 22
62.220.96.0/21 maxlen: 21
62.220.104.0/21 maxlen: 21
81.12.8.0/22 maxlen: 22
81.12.12.0/22 maxlen: 22
81.12.16.0/21 maxlen: 21
81.12.24.0/22 maxlen: 22
81.12.48.0/22 maxlen: 22
81.12.58.0/24 maxlen: 24
81.12.58.0/23 maxlen: 23
81.12.52.0/23 maxlen: 23
81.12.59.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 938716545 (0x37f3ad81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jan 26 09:52:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2d3463a98ac029ea768f396230e68bedd02ff9c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:47:6f:f8:86:e3:7a:2a:fa:bb:82:a1:6e:19:
3d:46:10:47:58:14:ae:0b:6b:94:b3:4e:90:f5:2c:
be:d6:7c:9f:a5:1a:48:22:74:06:ff:b2:5b:8e:52:
86:62:10:83:41:f3:2e:d2:ba:3e:05:21:9a:f9:cf:
ce:75:a3:99:07:e2:4a:25:c0:b3:05:3a:23:95:ed:
b8:89:79:37:a1:0b:ce:cb:a3:3e:d7:96:42:78:08:
5d:09:4d:e4:db:7b:7f:3b:d9:ea:89:f2:20:49:09:
fe:8e:46:9b:7d:f5:6c:27:6c:5c:b8:c8:c9:3a:39:
77:e1:7c:a7:82:a6:87:8f:3c:86:bd:38:e3:27:36:
79:c4:3d:f2:38:97:eb:d4:d3:66:ca:e0:ee:05:bd:
8e:84:ea:d5:7c:09:fe:4f:5f:93:32:1d:fc:60:10:
e4:f0:62:24:85:da:1d:0c:a4:c2:76:cc:70:30:f9:
83:8f:98:25:fd:9c:db:97:40:66:1b:6b:1d:09:e9:
0a:85:5c:4f:f5:69:c6:ae:ef:da:d4:f4:0a:f6:79:
fa:90:ec:c3:f7:13:81:45:7a:81:bf:ef:d6:ae:b1:
53:66:de:70:4c:7d:91:3f:f2:c5:fc:b7:e4:08:c0:
9d:b4:22:a7:f8:d0:b3:1b:38:a4:34:b9:e2:eb:31:
13:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:34:63:A9:8A:C0:29:EA:76:8F:39:62:30:E6:8B:ED:D0:2F:F9:C5
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/LTRjqYrAKep2jzliMOaL7dAv-cU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.220.96.0/20
62.220.120.0/21
81.12.8.0-81.12.27.255
81.12.48.0-81.12.53.255
81.12.58.0/23
87.107.24.0/22
87.107.34.0/23
87.107.40.0/22
87.107.50.0-87.107.55.255
87.107.68.0/22
87.107.88.0/22
87.107.96.0/22
87.107.120.0-87.107.135.255
87.107.173.0/24
185.60.136.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:b2:92:07:86:14:22:bb:8b:4c:f1:c5:e1:9e:e5:a8:c9:74:
19:24:34:8c:a6:2b:80:32:7e:0d:04:9e:0b:2c:42:c1:36:b7:
10:4b:67:e5:d2:2a:84:ba:9a:16:e8:c6:8c:d7:36:3c:96:f3:
48:a8:82:34:f8:1f:19:0e:be:bc:b6:6d:ed:16:82:b0:de:15:
ad:38:4b:c6:51:c4:42:f1:27:0a:b5:d0:93:e0:83:8b:3e:79:
7e:15:99:1e:c3:2b:24:b9:7d:90:a1:c4:79:59:61:ed:13:a1:
e6:e9:52:d5:01:58:41:5d:cb:e5:69:f1:d8:e9:7b:63:bf:c6:
be:10:cf:dd:f2:53:aa:4a:3f:11:e5:81:fe:d2:6c:7b:ee:9f:
8a:6d:79:0e:2e:7e:a1:aa:89:69:a8:b2:8c:42:6d:f9:97:c8:
38:55:f9:37:ff:1c:66:3e:f6:9b:a3:a4:63:6d:ba:68:17:2d:
46:04:01:d7:54:ab:6b:7a:c9:69:bb:98:db:3b:b8:ca:35:0e:
cf:81:04:d8:19:50:6c:fa:f5:88:64:13:ad:f0:6a:1b:8a:a0:
19:dd:bc:4d:d7:f5:95:38:65:db:0f:5f:25:cd:91:3c:83:48:
73:85:75:71:46:53:20:d9:b6:7f:c9:8c:57:8b:37:6f:78:6c:
89:3a:ff:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:39 2023 by rpki-client on console-fra.rpki-client.org