Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/U-wb5I91aypM4N8P5A8ReVr0uTo.roa
File: U-wb5I91aypM4N8P5A8ReVr0uTo.roa (raw, json)
Hash identifier: Wfv2tl+QUdcjdr3nlGBGXLaF720EiDK+Mgl+ds3Jy8c=
Subject key identifier: 53:EC:1B:E4:8F:75:6B:2A:4C:E0:DF:0F:E4:0F:11:79:5A:F4:B9:3A
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 0183F60E5B45E583A4C9418F5C449768E053
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/U-wb5I91aypM4N8P5A8ReVr0uTo.roa
Signing time: Thu 20 Oct 2022 15:41:19 +0000
ROA not before: Thu 20 Oct 2022 15:41:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42337
IP address blocks: 87.107.44.0/22 maxlen: 22
87.107.44.0/24 maxlen: 24
87.107.48.0/23 maxlen: 23
87.107.45.0/24 maxlen: 24
87.107.46.0/24 maxlen: 24
87.107.47.0/24 maxlen: 24
87.107.72.0/21 maxlen: 24
87.107.84.0/24 maxlen: 24
87.107.80.0/22 maxlen: 22
87.107.80.0/21 maxlen: 21
87.107.86.0/23 maxlen: 23
87.107.16.0/21 maxlen: 21
87.107.20.0/22 maxlen: 22
87.107.18.0/24 maxlen: 24
87.107.28.0/22 maxlen: 22
87.107.30.0/24 maxlen: 24
87.107.32.0/23 maxlen: 23
87.107.36.0/22 maxlen: 22
87.107.37.0/24 maxlen: 24
87.107.36.0/24 maxlen: 24
87.107.92.0/24 maxlen: 24
87.107.94.0/23 maxlen: 23
87.107.92.0/22 maxlen: 22
87.107.100.0/22 maxlen: 22
87.107.104.0/21 maxlen: 21
87.107.104.0/22 maxlen: 22
87.107.136.0/21 maxlen: 21
87.107.136.0/22 maxlen: 22
87.107.138.0/24 maxlen: 24
87.107.139.0/24 maxlen: 24
87.107.136.0/24 maxlen: 24
87.107.137.0/24 maxlen: 24
87.107.142.0/23 maxlen: 23
87.107.140.0/23 maxlen: 23
87.107.140.0/24 maxlen: 24
81.12.0.0/21 maxlen: 21
81.12.4.0/24 maxlen: 24
81.12.7.0/24 maxlen: 24
81.12.5.0/24 maxlen: 24
81.12.37.0/24 maxlen: 24
81.12.32.0/21 maxlen: 21
81.12.44.0/24 maxlen: 24
81.12.39.0/24 maxlen: 24
81.12.40.0/24 maxlen: 24
81.12.40.0/21 maxlen: 21
81.12.46.0/24 maxlen: 24
81.12.47.0/24 maxlen: 24
81.12.45.0/24 maxlen: 24
81.12.112.0/22 maxlen: 22
81.12.116.0/22 maxlen: 24
81.12.115.0/24 maxlen: 24
81.12.120.0/21 maxlen: 24
81.12.54.0/24 maxlen: 24
81.12.55.0/24 maxlen: 24
81.12.54.0/23 maxlen: 23
81.12.56.0/23 maxlen: 23
81.12.63.0/24 maxlen: 24
81.12.62.0/24 maxlen: 24
81.12.60.0/22 maxlen: 22
81.12.64.0/18 maxlen: 18
81.12.72.0/24 maxlen: 24
81.12.74.0/23 maxlen: 24
81.12.76.0/22 maxlen: 24
81.12.73.0/24 maxlen: 24
81.12.80.0/22 maxlen: 22
81.12.84.0/23 maxlen: 23
81.12.90.0/23 maxlen: 23
81.12.86.0/24 maxlen: 24
81.12.87.0/24 maxlen: 24
81.12.88.0/24 maxlen: 24
81.12.89.0/24 maxlen: 24
81.12.96.0/21 maxlen: 24
81.12.94.0/24 maxlen: 24
81.12.95.0/24 maxlen: 24
81.12.104.0/21 maxlen: 24
62.220.113.0/24 maxlen: 24
62.220.118.0/23 maxlen: 24
62.220.112.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f6:0e:5b:45:e5:83:a4:c9:41:8f:5c:44:97:68:e0:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Oct 20 15:41:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=53ec1be48f756b2a4ce0df0fe40f11795af4b93a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:6c:a6:8a:c8:95:ba:60:13:9b:95:5b:c0:71:
ee:5d:67:dc:64:80:0a:e6:b9:00:a5:39:76:42:ad:
20:57:58:b4:65:df:6a:24:71:17:53:4c:03:5f:ea:
e7:80:5d:f9:5a:27:5d:4e:ff:83:55:c8:59:b6:a0:
80:ca:7f:94:79:96:e5:44:d9:8d:53:e4:e2:69:82:
26:b7:87:ac:bc:73:e2:c8:1b:f2:12:72:ef:d4:f5:
7a:da:10:b7:40:69:a1:08:2d:6e:14:95:07:e4:17:
a9:9b:7b:70:f2:a6:5e:e3:f1:c4:d3:3a:5b:eb:21:
10:1d:59:28:92:e6:ae:4b:ab:94:77:52:e8:b0:b9:
f8:4c:d7:2f:34:9e:2f:46:8c:20:05:36:07:34:d2:
07:a2:3d:a8:b8:6c:c5:76:cf:50:a6:c6:9b:0f:ac:
28:81:3e:c8:12:28:c1:8e:6f:8e:6a:f1:0c:7a:0e:
4b:57:de:79:49:2e:89:77:f7:b9:9b:31:34:98:55:
1b:ce:68:40:db:43:80:42:ff:29:bf:eb:7f:25:ed:
79:64:ab:94:4d:2c:47:9e:1b:25:1e:f5:d5:1d:bf:
20:e4:86:a6:b3:0c:a9:20:b2:c6:7d:72:b4:50:eb:
e5:fa:35:16:79:e5:6c:18:e3:87:34:49:d3:7d:9b:
55:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:EC:1B:E4:8F:75:6B:2A:4C:E0:DF:0F:E4:0F:11:79:5A:F4:B9:3A
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/U-wb5I91aypM4N8P5A8ReVr0uTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.220.112.0/21
81.12.0.0/21
81.12.32.0/20
81.12.54.0-81.12.57.255
81.12.60.0-81.12.127.255
87.107.16.0/21
87.107.28.0-87.107.33.255
87.107.36.0/22
87.107.44.0-87.107.49.255
87.107.72.0-87.107.87.255
87.107.92.0/22
87.107.100.0-87.107.111.255
87.107.136.0/21
Signature Algorithm: sha256WithRSAEncryption
89:c9:12:5e:b5:29:5e:b2:b8:47:b6:6a:38:b3:87:9e:75:db:
0d:6d:55:41:ea:86:71:92:46:e6:c5:ee:dd:c0:cb:4e:0a:b4:
5d:b7:09:a0:27:13:d7:5b:1d:22:7c:1f:60:a1:a8:f8:5c:6d:
ce:ec:14:23:ed:6f:46:a1:0a:f8:ac:c4:ea:ad:5a:6a:59:5f:
f4:aa:22:47:bd:73:bd:71:84:30:4d:de:df:39:2c:be:b9:60:
89:77:e6:90:c5:b6:92:bf:13:ef:4e:12:5a:a0:d4:e9:aa:44:
e5:c6:d0:34:64:28:0c:ba:f9:bc:b0:1a:e5:17:29:95:ae:d5:
c5:75:80:aa:50:c5:71:4b:60:4f:71:c4:0b:82:99:94:b4:25:
8e:bd:fc:11:60:93:5e:68:34:0e:88:a0:42:6b:8e:d9:41:3d:
8e:2a:1a:52:e6:fb:fa:ac:02:2f:0c:92:65:15:08:fd:1e:f9:
19:aa:d9:69:2b:4d:1b:53:3e:9b:34:60:6e:13:57:aa:ed:55:
58:78:d1:76:08:b6:1f:a7:15:10:6d:94:46:17:65:7e:2e:9e:
5e:4a:29:44:31:c0:c2:5f:0e:43:a9:04:19:40:fa:e5:3c:dc:
d2:51:88:b9:14:ec:6c:8e:5b:58:f0:f3:ad:e0:8e:96:8d:be:
d6:a3:f7:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:56 2024 by rpki-client on console-fra.rpki-client.org