Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/VOr03-OMFGBmWdCM3B2LKAHua2A.roa
File: VOr03-OMFGBmWdCM3B2LKAHua2A.roa (raw, json)
Hash identifier: QaY9uoLQuBBXiGE1WwcFZJHMJz/aPJkgYInbIoMsDNM=
Subject key identifier: 54:EA:F4:DF:E3:8C:14:60:66:59:D0:8C:DC:1D:8B:28:01:EE:6B:60
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 0183B70BB614FE468EA876CAFA7401C86383
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/VOr03-OMFGBmWdCM3B2LKAHua2A.roa
Signing time: Sat 08 Oct 2022 10:02:21 +0000
ROA not before: Sat 08 Oct 2022 10:02:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42337
IP address blocks: 87.107.44.0/22 maxlen: 22
87.107.44.0/24 maxlen: 24
87.107.48.0/23 maxlen: 23
87.107.45.0/24 maxlen: 24
87.107.46.0/24 maxlen: 24
87.107.47.0/24 maxlen: 24
87.107.72.0/21 maxlen: 21
87.107.84.0/24 maxlen: 24
87.107.80.0/22 maxlen: 22
87.107.80.0/21 maxlen: 21
87.107.86.0/23 maxlen: 23
87.107.16.0/21 maxlen: 21
87.107.20.0/22 maxlen: 22
87.107.18.0/24 maxlen: 24
87.107.28.0/22 maxlen: 22
87.107.30.0/24 maxlen: 24
87.107.32.0/23 maxlen: 23
87.107.36.0/22 maxlen: 22
87.107.37.0/24 maxlen: 24
87.107.36.0/24 maxlen: 24
87.107.92.0/24 maxlen: 24
87.107.94.0/23 maxlen: 23
87.107.92.0/22 maxlen: 22
87.107.100.0/22 maxlen: 22
87.107.104.0/21 maxlen: 21
87.107.104.0/22 maxlen: 22
87.107.136.0/21 maxlen: 21
87.107.136.0/22 maxlen: 22
87.107.138.0/24 maxlen: 24
87.107.139.0/24 maxlen: 24
87.107.136.0/24 maxlen: 24
87.107.137.0/24 maxlen: 24
87.107.142.0/23 maxlen: 23
87.107.140.0/23 maxlen: 23
87.107.140.0/24 maxlen: 24
81.12.0.0/21 maxlen: 21
81.12.4.0/24 maxlen: 24
81.12.7.0/24 maxlen: 24
81.12.5.0/24 maxlen: 24
81.12.37.0/24 maxlen: 24
81.12.32.0/21 maxlen: 21
81.12.44.0/24 maxlen: 24
81.12.39.0/24 maxlen: 24
81.12.40.0/24 maxlen: 24
81.12.40.0/21 maxlen: 21
81.12.46.0/24 maxlen: 24
81.12.47.0/24 maxlen: 24
81.12.45.0/24 maxlen: 24
81.12.112.0/22 maxlen: 22
81.12.108.0/24 maxlen: 24
81.12.111.0/24 maxlen: 24
81.12.106.0/24 maxlen: 24
81.12.107.0/24 maxlen: 24
81.12.115.0/24 maxlen: 24
81.12.118.0/24 maxlen: 24
81.12.120.0/21 maxlen: 21
81.12.123.0/24 maxlen: 24
81.12.124.0/24 maxlen: 24
81.12.121.0/24 maxlen: 24
81.12.126.0/23 maxlen: 23
81.12.54.0/24 maxlen: 24
81.12.55.0/24 maxlen: 24
81.12.54.0/23 maxlen: 23
81.12.56.0/23 maxlen: 23
81.12.63.0/24 maxlen: 24
81.12.62.0/24 maxlen: 24
81.12.60.0/22 maxlen: 22
81.12.64.0/18 maxlen: 18
81.12.72.0/24 maxlen: 24
81.12.76.0/22 maxlen: 22
81.12.74.0/23 maxlen: 23
81.12.77.0/24 maxlen: 24
81.12.78.0/24 maxlen: 24
81.12.73.0/24 maxlen: 24
81.12.74.0/24 maxlen: 24
81.12.76.0/24 maxlen: 24
81.12.80.0/22 maxlen: 22
81.12.84.0/23 maxlen: 23
81.12.90.0/23 maxlen: 23
81.12.86.0/24 maxlen: 24
81.12.87.0/24 maxlen: 24
81.12.88.0/24 maxlen: 24
81.12.89.0/24 maxlen: 24
81.12.96.0/21 maxlen: 24
81.12.94.0/24 maxlen: 24
81.12.95.0/24 maxlen: 24
62.220.113.0/24 maxlen: 24
62.220.118.0/23 maxlen: 24
62.220.112.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:b7:0b:b6:14:fe:46:8e:a8:76:ca:fa:74:01:c8:63:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Oct 8 10:02:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=54eaf4dfe38c14606659d08cdc1d8b2801ee6b60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2c:50:f3:9b:fb:24:0d:b0:7f:21:26:25:05:
96:e5:29:7c:c7:37:bb:31:a0:73:06:38:87:ba:c0:
02:f4:a2:90:81:10:58:eb:d4:db:da:55:95:61:e9:
7a:ae:f3:e9:d0:c1:c7:60:6f:9b:b1:fa:7a:f0:b7:
37:0b:b9:1c:1a:7a:7b:ff:7b:6c:4d:b8:41:82:bb:
23:f5:c5:70:df:28:65:ff:cd:cf:10:99:c3:2c:a8:
e4:b2:17:65:1b:5c:af:bd:4b:d7:20:02:c1:8e:a5:
dc:29:b7:62:49:29:90:4f:36:ee:62:ad:cb:0c:08:
c5:36:e5:db:92:2a:70:59:8f:cc:ab:1f:b0:e8:97:
7c:d1:3d:ab:52:82:ab:9b:d9:a3:e8:c5:92:80:62:
a4:40:06:d3:4c:c2:81:45:dc:c9:5d:63:49:2b:e5:
fb:62:42:73:fe:68:98:ad:5c:90:4e:83:fb:c6:e3:
97:a0:73:2e:69:18:9f:12:45:ea:60:46:85:4c:17:
09:16:e3:d2:27:53:da:0e:5f:16:48:ea:06:69:6f:
12:c5:03:e7:94:cc:56:14:c5:2c:8b:f6:19:83:5e:
3d:df:2b:d3:0b:81:d0:ba:1c:8b:b5:f7:69:57:6c:
a2:5e:3e:68:98:3c:be:78:34:91:8e:5c:78:88:ba:
2c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:EA:F4:DF:E3:8C:14:60:66:59:D0:8C:DC:1D:8B:28:01:EE:6B:60
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/VOr03-OMFGBmWdCM3B2LKAHua2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.220.112.0/21
81.12.0.0/21
81.12.32.0/20
81.12.54.0-81.12.57.255
81.12.60.0-81.12.127.255
87.107.16.0/21
87.107.28.0-87.107.33.255
87.107.36.0/22
87.107.44.0-87.107.49.255
87.107.72.0-87.107.87.255
87.107.92.0/22
87.107.100.0-87.107.111.255
87.107.136.0/21
Signature Algorithm: sha256WithRSAEncryption
2d:e3:92:d6:76:a2:be:f3:58:5a:8d:45:d5:4c:eb:3e:6a:35:
0a:d3:2f:67:ce:31:43:8b:d7:11:0c:74:0c:73:ad:3b:ac:83:
3f:a3:44:cd:c2:43:7c:9b:89:9d:0d:7b:ef:dc:bf:e6:c4:a6:
fb:10:36:03:47:05:63:03:a6:7c:47:f3:30:d4:60:ba:81:67:
7f:fa:82:2c:e0:5d:92:eb:88:d7:a1:b2:f2:cc:1a:e9:d9:0d:
5e:4f:2d:6e:b4:5c:6c:82:d4:e9:27:f0:54:d3:bc:86:05:e5:
2f:d7:e0:a0:ae:ad:1d:ba:28:2c:76:64:c8:e5:b5:6d:02:7d:
a3:2f:de:d5:46:c1:ab:f4:78:4c:02:2b:94:d5:13:f6:13:c9:
7c:fd:5b:00:53:f2:9a:00:25:8b:1a:d2:b6:e0:61:40:0c:0b:
da:6a:a9:a4:e0:3c:05:ff:e3:0c:ab:07:2f:75:3c:c3:71:cb:
72:db:85:ec:da:ae:90:7f:10:39:ca:ab:11:09:9e:db:6b:86:
66:4d:9d:06:2c:e9:f8:d1:20:58:44:25:ea:a6:57:34:cb:12:
bb:a6:85:7a:ee:bb:9a:e1:30:f9:19:3f:b7:88:39:72:6b:c7:
2e:76:9a:2c:9e:e9:50:b8:f9:f0:3c:07:79:c5:fd:c2:e7:53:
2e:ef:40:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:33 2023 by rpki-client on console-ams.rpki-client.org