Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/S1PK0y3XRKYA9IS5aO3S4eAFRZ8.roa
File: S1PK0y3XRKYA9IS5aO3S4eAFRZ8.roa (raw, json)
Hash identifier: iKM7KK1q+eLYIjS1K3mbRCGF7BiP0R63mzLDvARwpkk=
Subject key identifier: 4B:53:CA:D3:2D:D7:44:A6:00:F4:84:B9:68:ED:D2:E1:E0:05:45:9F
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 37A22F22
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/S1PK0y3XRKYA9IS5aO3S4eAFRZ8.roa
Signing time: Sat 01 Jan 2022 08:55:47 +0000
ROA not before: Sat 01 Jan 2022 08:55:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49100
IP address blocks: 87.107.39.0/24 maxlen: 24
81.12.40.0/21 maxlen: 21
87.107.104.0/21 maxlen: 21
87.107.228.0/24 maxlen: 24
87.107.38.0/24 maxlen: 24
87.107.37.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 933375778 (0x37a22f22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jan 1 08:55:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4b53cad32dd744a600f484b968edd2e1e005459f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:dd:94:71:ac:3a:fe:e7:cf:8b:03:5b:97:30:
09:48:15:1a:c5:0a:83:e4:d5:4d:ac:4a:18:f5:ff:
ac:15:cd:82:49:3d:20:5d:60:11:2e:b3:b7:dd:da:
86:f8:39:3e:ac:79:e9:70:54:08:56:42:88:24:85:
2a:63:09:67:90:3f:dd:ff:76:33:51:c0:c1:41:7f:
d3:f6:cc:46:c7:8a:f8:90:34:5e:b8:8f:8d:56:8b:
71:c8:f7:d6:a5:87:3e:fd:a6:fa:0e:1d:06:63:e1:
ec:60:f9:61:c4:7c:97:07:16:d9:67:5c:f5:8c:59:
cc:fb:04:f7:42:61:2e:54:bc:64:53:89:4e:dc:f1:
f3:81:6d:61:bc:9b:2b:cc:be:35:e3:50:52:5d:3b:
f7:a4:fc:73:d4:ee:f3:d3:24:d2:ad:17:15:9e:f7:
dc:ca:a5:ea:71:77:9a:16:a5:ac:1e:ef:48:11:13:
8d:c1:fc:37:e5:cc:04:57:13:3b:ef:96:70:c5:ca:
de:8d:8a:47:f5:7c:56:4c:9a:7a:63:cc:51:fd:0e:
94:f2:19:a0:54:60:78:91:22:97:ba:6f:dc:fe:28:
06:e5:c8:39:e4:df:b3:9c:ca:20:50:70:b1:2b:3c:
9f:e9:21:03:c9:9e:bc:e9:63:dd:e9:7a:61:76:56:
c5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:53:CA:D3:2D:D7:44:A6:00:F4:84:B9:68:ED:D2:E1:E0:05:45:9F
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/S1PK0y3XRKYA9IS5aO3S4eAFRZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.12.40.0/21
87.107.37.0-87.107.39.255
87.107.104.0/21
87.107.228.0/24
Signature Algorithm: sha256WithRSAEncryption
be:26:06:4e:92:76:49:8c:26:4a:37:75:86:e7:37:eb:bf:21:
83:1d:67:d1:22:5e:f4:e1:9e:00:2e:29:4d:96:87:b3:b5:31:
42:49:03:b9:37:16:8c:fe:24:1f:b4:dd:84:7a:12:d5:4f:ad:
3b:44:66:3a:a8:13:5e:3b:a2:e2:c3:38:51:e9:a3:99:5a:7e:
9e:a4:4c:32:9a:a8:e8:f0:7b:9e:41:fb:4e:a5:a1:5f:dc:09:
a1:7a:1b:f1:48:2d:d5:d8:a3:9a:42:4d:7b:93:e6:b1:3a:bf:
45:29:48:6b:60:db:72:6f:00:96:83:d8:ee:dd:5a:57:b8:78:
70:1a:07:e3:f0:2f:09:58:99:4a:68:33:fe:ce:ac:81:15:9f:
6f:f7:2d:50:62:46:98:ca:3c:e0:11:9b:08:09:33:30:f9:df:
45:bf:20:56:0c:72:27:09:cd:ba:10:b9:b7:38:1a:09:d5:f4:
a4:54:55:95:ff:86:d5:3f:6d:30:49:f4:d3:26:a6:fe:f1:76:
d2:7a:f4:0d:45:4d:8b:39:a2:2f:ee:6f:f4:aa:80:cd:21:38:
01:85:69:46:3b:3c:42:8e:d2:0d:c8:b3:a6:6a:d4:04:b0:14:
02:26:4d:32:10:fb:3d:d9:ea:92:64:90:80:a3:4c:ed:e6:b3:
fd:02:67:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:33 2023 by rpki-client on console-ams.rpki-client.org