Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/_PS2N2qYzhon9lHHJLLSjKHSnf4.roa
File: _PS2N2qYzhon9lHHJLLSjKHSnf4.roa (raw, json)
Hash identifier: DtlVj2XOSkljPQqATn6kv0oDd21beEzOabkv/tnFSrY=
Subject key identifier: FC:F4:B6:37:6A:98:CE:1A:27:F6:51:C7:24:B2:D2:8C:A1:D2:9D:FE
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 0182058C3BE876EDFA1BA4C6624457E7DF90
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/_PS2N2qYzhon9lHHJLLSjKHSnf4.roa
Signing time: Sat 16 Jul 2022 05:47:32 +0000
ROA not before: Sat 16 Jul 2022 05:47:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42337
IP address blocks: 87.107.44.0/22 maxlen: 22
87.107.44.0/24 maxlen: 24
87.107.48.0/23 maxlen: 23
87.107.45.0/24 maxlen: 24
87.107.46.0/24 maxlen: 24
87.107.47.0/24 maxlen: 24
87.107.72.0/21 maxlen: 21
87.107.84.0/24 maxlen: 24
87.107.80.0/22 maxlen: 22
87.107.80.0/21 maxlen: 21
87.107.86.0/23 maxlen: 23
87.107.16.0/21 maxlen: 21
87.107.20.0/22 maxlen: 22
87.107.18.0/24 maxlen: 24
87.107.28.0/22 maxlen: 22
87.107.30.0/24 maxlen: 24
87.107.32.0/23 maxlen: 23
87.107.36.0/22 maxlen: 22
87.107.37.0/24 maxlen: 24
87.107.36.0/24 maxlen: 24
87.107.92.0/24 maxlen: 24
87.107.94.0/23 maxlen: 23
87.107.92.0/22 maxlen: 22
87.107.100.0/22 maxlen: 22
87.107.104.0/21 maxlen: 21
87.107.104.0/22 maxlen: 22
87.107.136.0/21 maxlen: 21
87.107.136.0/22 maxlen: 22
87.107.138.0/24 maxlen: 24
87.107.139.0/24 maxlen: 24
87.107.136.0/24 maxlen: 24
87.107.137.0/24 maxlen: 24
87.107.142.0/23 maxlen: 23
87.107.140.0/23 maxlen: 23
87.107.140.0/24 maxlen: 24
81.12.0.0/21 maxlen: 21
81.12.4.0/24 maxlen: 24
81.12.7.0/24 maxlen: 24
81.12.5.0/24 maxlen: 24
81.12.37.0/24 maxlen: 24
81.12.32.0/21 maxlen: 21
81.12.44.0/24 maxlen: 24
81.12.39.0/24 maxlen: 24
81.12.40.0/24 maxlen: 24
81.12.40.0/21 maxlen: 21
81.12.46.0/24 maxlen: 24
81.12.47.0/24 maxlen: 24
81.12.45.0/24 maxlen: 24
81.12.112.0/22 maxlen: 22
81.12.108.0/24 maxlen: 24
81.12.111.0/24 maxlen: 24
81.12.106.0/24 maxlen: 24
81.12.107.0/24 maxlen: 24
81.12.115.0/24 maxlen: 24
81.12.118.0/24 maxlen: 24
81.12.120.0/21 maxlen: 21
81.12.123.0/24 maxlen: 24
81.12.124.0/24 maxlen: 24
81.12.121.0/24 maxlen: 24
81.12.126.0/23 maxlen: 23
81.12.54.0/24 maxlen: 24
81.12.55.0/24 maxlen: 24
81.12.54.0/23 maxlen: 23
81.12.56.0/23 maxlen: 23
81.12.63.0/24 maxlen: 24
81.12.62.0/24 maxlen: 24
81.12.60.0/22 maxlen: 22
81.12.64.0/18 maxlen: 18
81.12.72.0/24 maxlen: 24
81.12.76.0/22 maxlen: 22
81.12.74.0/23 maxlen: 23
81.12.77.0/24 maxlen: 24
81.12.78.0/24 maxlen: 24
81.12.73.0/24 maxlen: 24
81.12.74.0/24 maxlen: 24
81.12.76.0/24 maxlen: 24
81.12.80.0/22 maxlen: 22
81.12.84.0/23 maxlen: 23
81.12.90.0/23 maxlen: 23
81.12.86.0/24 maxlen: 24
81.12.87.0/24 maxlen: 24
81.12.88.0/24 maxlen: 24
81.12.89.0/24 maxlen: 24
81.12.94.0/24 maxlen: 24
81.12.95.0/24 maxlen: 24
62.220.113.0/24 maxlen: 24
62.220.112.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:05:8c:3b:e8:76:ed:fa:1b:a4:c6:62:44:57:e7:df:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jul 16 05:47:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fcf4b6376a98ce1a27f651c724b2d28ca1d29dfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7b:fa:55:9f:da:8e:ed:eb:83:b6:eb:f4:53:
fe:ea:43:b4:da:2e:18:1d:fd:58:e3:c1:d7:89:2a:
cb:c7:87:c0:36:3d:ff:a9:bd:5e:98:2f:da:0d:f3:
ce:0f:0e:e7:55:e3:e3:f7:6f:9d:5e:bb:7f:a4:40:
2a:b8:52:5e:3b:b3:90:a2:3f:6e:47:fa:f0:9f:f9:
b0:a5:3c:a1:11:7b:c5:18:dc:79:04:47:33:e8:72:
8f:c2:eb:b2:c8:0c:b4:bd:0b:37:01:b0:e1:b8:25:
27:9f:23:99:3b:d4:3f:40:14:c6:c1:ec:2b:63:ea:
5b:d9:e4:6a:2f:d3:24:fb:66:78:1b:ba:99:1b:b4:
36:f2:f2:03:98:45:e0:27:93:6b:13:45:28:a7:9c:
47:b0:48:0c:e9:3f:5d:db:c7:33:fe:d9:1f:e2:7b:
52:1c:85:48:c1:47:09:35:0d:6c:f9:92:bd:5d:07:
79:71:e0:a4:b5:46:a7:69:d4:b5:65:03:21:2e:14:
ed:9f:4c:74:7d:0d:8c:d5:61:97:90:96:fb:f6:e6:
04:c1:2a:d9:42:c1:6b:be:48:72:f0:9c:0e:00:43:
16:cb:e5:76:79:8f:37:67:6c:d8:49:c3:ec:eb:09:
e7:41:f1:d3:c4:45:70:d3:49:fe:f8:27:d4:80:77:
f1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:F4:B6:37:6A:98:CE:1A:27:F6:51:C7:24:B2:D2:8C:A1:D2:9D:FE
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/_PS2N2qYzhon9lHHJLLSjKHSnf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.220.112.0/21
81.12.0.0/21
81.12.32.0/20
81.12.54.0-81.12.57.255
81.12.60.0-81.12.127.255
87.107.16.0/21
87.107.28.0-87.107.33.255
87.107.36.0/22
87.107.44.0-87.107.49.255
87.107.72.0-87.107.87.255
87.107.92.0/22
87.107.100.0-87.107.111.255
87.107.136.0/21
Signature Algorithm: sha256WithRSAEncryption
32:ce:dc:f4:3b:2c:f0:88:f8:a2:f1:44:9c:ca:5f:fa:c1:d0:
eb:aa:57:5e:c1:5d:38:d1:b2:f1:8d:0a:17:ae:f3:d0:b9:48:
5a:16:3f:1c:1e:6d:70:36:b1:1b:2a:d0:86:85:ec:af:bd:0b:
56:75:24:51:98:44:ae:b7:4e:9f:fa:e6:15:52:30:ff:cd:91:
d7:d6:c1:81:39:7a:cb:d9:84:2a:08:71:43:7c:14:e0:27:87:
42:a7:4e:35:b6:0b:51:5d:84:7c:0b:ce:35:7a:51:6b:8f:3a:
f7:04:7f:a5:d6:5e:d0:1c:1b:7b:d4:58:29:12:a8:a9:8e:ec:
29:eb:98:b2:62:37:a4:0c:3f:80:85:fd:f9:63:86:19:35:25:
1b:96:0d:17:ab:71:d0:73:d9:48:3e:82:9f:42:21:99:3d:ce:
45:db:84:d8:e2:96:2c:ed:a7:3c:0d:7e:81:eb:b2:e6:80:1d:
7a:40:70:6f:af:28:16:92:82:9a:05:ab:b3:ad:fd:bd:be:fe:
29:61:cc:5e:3e:93:39:6a:ab:4e:cd:99:8e:46:09:2e:05:2a:
8a:69:fd:4b:b4:c2:6e:02:e7:d9:d0:d7:80:8b:dc:03:31:6b:
e0:79:a7:d9:c5:b8:ce:d1:c6:dc:46:93:09:47:10:c9:ab:a3:
17:48:fa:48
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgISAYIFjDvodu36G6TGYkRX59+QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwNzc1ZDk0NzFiODVkOTYzZmVmNmQyODM1OTBlMmQ5NDJk
ZDVjMjEwHhcNMjIwNzE2MDU0NzMyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmY2Y0YjYzNzZhOThjZTFhMjdmNjUxYzcyNGIyZDI4Y2ExZDI5ZGZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHv6VZ/aju3rg7br9FP+6kO02i4Y
Hf1Y48HXiSrLx4fANj3/qb1emC/aDfPODw7nVePj92+dXrt/pEAquFJeO7OQoj9u
R/rwn/mwpTyhEXvFGNx5BEcz6HKPwuuyyAy0vQs3AbDhuCUnnyOZO9Q/QBTGwewr
Y+pb2eRqL9Mk+2Z4G7qZG7Q28vIDmEXgJ5NrE0Uop5xHsEgM6T9d28cz/tkf4ntS
HIVIwUcJNQ1s+ZK9XQd5ceCktUanadS1ZQMhLhTtn0x0fQ2M1WGXkJb79uYEwSrZ
QsFrvkhy8JwOAEMWy+V2eY83Z2zYScPs6wnnQfHTxEVw00n++CfUgHfxXwIDAQAB
o4IChTCCAoEwHQYDVR0OBBYEFPz0tjdqmM4aJ/ZRxySy0oyh0p3+MB8GA1UdIwQY
MBaAFAB3XZRxuF2WP+9tKDWQ4tlC3VwhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQt
NzZiMzNlNGNlODIxLzEvX1BTMk4ycVl6aG9uOWxISEpMTFNqS0hTbmY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQtNzZiMzNlNGNlODIx
LzEvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGaBggrBgEFBQcBBwEB/wSBijCBhzCBhAQCAAEwfgMEAz7c
cAMEA1EMAAMEBFEMIDAMAwQBUQw2AwQBUQw4MAwDBAJRDDwDBAdRDAADBANXaxAw
DAMEAldrHAMEAVdrIAMEAldrJDAMAwQCV2ssAwQBV2swMAwDBANXa0gDBANXa1AD
BAJXa1wwDAMEAldrZAMEBFdrYAMEA1driDANBgkqhkiG9w0BAQsFAAOCAQEAMs7c
9Dss8Ij4ovFEnMpf+sHQ66pXXsFdONGy8Y0KF67z0LlIWhY/HB5tcDaxGyrQhoXs
r70LVnUkUZhErrdOn/rmFVIw/82R19bBgTl6y9mEKghxQ3wU4CeHQqdONbYLUV2E
fAvONXpRa4869wR/pdZe0Bwbe9RYKRKoqY7sKeuYsmI3pAw/gIX9+WOGGTUlG5YN
F6tx0HPZSD6Cn0IhmT3ORduE2OKWLO2nPA1+geuy5oAdekBwb68oFpKCmgWrs639
vb7+KWHMXj6TOWqrTs2ZjkYJLgUqimn9S7TCbgLn2dDXgIvcAzFr4Hmn2cW4ztHG
3EaTCUcQyaujF0j6SA==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:39 2023 by rpki-client on console-fra.rpki-client.org