Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/os0wWT_x321Fq4RYPk5cuc4q7SA.roa
File: os0wWT_x321Fq4RYPk5cuc4q7SA.roa (raw, json)
Hash identifier: zUWBOJpK5GUPLl9qmzSadJyMHRHJTFDclpQDvYAqtZE=
Subject key identifier: A2:CD:30:59:3F:F1:DF:6D:45:AB:84:58:3E:4E:5C:B9:CE:2A:ED:20
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 0183C6714B4FBD198EA448E8BC68782EC4AB
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/os0wWT_x321Fq4RYPk5cuc4q7SA.roa
Signing time: Tue 11 Oct 2022 09:47:37 +0000
ROA not before: Tue 11 Oct 2022 09:47:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42337
IP address blocks: 87.107.44.0/22 maxlen: 22
87.107.44.0/24 maxlen: 24
87.107.48.0/23 maxlen: 23
87.107.45.0/24 maxlen: 24
87.107.46.0/24 maxlen: 24
87.107.47.0/24 maxlen: 24
87.107.72.0/21 maxlen: 24
87.107.84.0/24 maxlen: 24
87.107.80.0/22 maxlen: 22
87.107.80.0/21 maxlen: 21
87.107.86.0/23 maxlen: 23
87.107.16.0/21 maxlen: 21
87.107.20.0/22 maxlen: 22
87.107.18.0/24 maxlen: 24
87.107.28.0/22 maxlen: 22
87.107.30.0/24 maxlen: 24
87.107.32.0/23 maxlen: 23
87.107.36.0/22 maxlen: 22
87.107.37.0/24 maxlen: 24
87.107.36.0/24 maxlen: 24
87.107.92.0/24 maxlen: 24
87.107.94.0/23 maxlen: 23
87.107.92.0/22 maxlen: 22
87.107.100.0/22 maxlen: 22
87.107.104.0/21 maxlen: 21
87.107.104.0/22 maxlen: 22
87.107.136.0/21 maxlen: 21
87.107.136.0/22 maxlen: 22
87.107.138.0/24 maxlen: 24
87.107.139.0/24 maxlen: 24
87.107.136.0/24 maxlen: 24
87.107.137.0/24 maxlen: 24
87.107.142.0/23 maxlen: 23
87.107.140.0/23 maxlen: 23
87.107.140.0/24 maxlen: 24
81.12.0.0/21 maxlen: 21
81.12.4.0/24 maxlen: 24
81.12.7.0/24 maxlen: 24
81.12.5.0/24 maxlen: 24
81.12.37.0/24 maxlen: 24
81.12.32.0/21 maxlen: 21
81.12.44.0/24 maxlen: 24
81.12.39.0/24 maxlen: 24
81.12.40.0/24 maxlen: 24
81.12.40.0/21 maxlen: 21
81.12.46.0/24 maxlen: 24
81.12.47.0/24 maxlen: 24
81.12.45.0/24 maxlen: 24
81.12.112.0/22 maxlen: 22
81.12.108.0/24 maxlen: 24
81.12.111.0/24 maxlen: 24
81.12.106.0/24 maxlen: 24
81.12.107.0/24 maxlen: 24
81.12.115.0/24 maxlen: 24
81.12.118.0/24 maxlen: 24
81.12.120.0/21 maxlen: 21
81.12.123.0/24 maxlen: 24
81.12.124.0/24 maxlen: 24
81.12.121.0/24 maxlen: 24
81.12.126.0/23 maxlen: 23
81.12.54.0/24 maxlen: 24
81.12.55.0/24 maxlen: 24
81.12.54.0/23 maxlen: 23
81.12.56.0/23 maxlen: 23
81.12.63.0/24 maxlen: 24
81.12.62.0/24 maxlen: 24
81.12.60.0/22 maxlen: 22
81.12.64.0/18 maxlen: 18
81.12.72.0/24 maxlen: 24
81.12.76.0/22 maxlen: 22
81.12.74.0/23 maxlen: 23
81.12.77.0/24 maxlen: 24
81.12.78.0/24 maxlen: 24
81.12.73.0/24 maxlen: 24
81.12.74.0/24 maxlen: 24
81.12.76.0/24 maxlen: 24
81.12.80.0/22 maxlen: 22
81.12.84.0/23 maxlen: 23
81.12.90.0/23 maxlen: 23
81.12.86.0/24 maxlen: 24
81.12.87.0/24 maxlen: 24
81.12.88.0/24 maxlen: 24
81.12.89.0/24 maxlen: 24
81.12.96.0/21 maxlen: 24
81.12.94.0/24 maxlen: 24
81.12.95.0/24 maxlen: 24
62.220.113.0/24 maxlen: 24
62.220.118.0/23 maxlen: 24
62.220.112.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c6:71:4b:4f:bd:19:8e:a4:48:e8:bc:68:78:2e:c4:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Oct 11 09:47:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a2cd30593ff1df6d45ab84583e4e5cb9ce2aed20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7f:04:e0:41:5c:79:05:b5:be:3c:bb:b1:2a:
e1:14:df:a3:8e:08:98:ab:ed:50:1f:50:c4:7c:00:
13:bc:7b:56:c3:54:51:75:88:c8:a7:c5:a6:60:f6:
8f:75:8d:cd:cf:b8:8a:14:27:38:d7:28:ee:7d:a2:
e0:82:87:af:70:03:a1:a8:91:31:1b:ed:01:77:69:
72:af:ca:90:0b:fe:bd:8b:e6:6c:da:1e:4f:e7:59:
33:15:36:05:29:4d:88:6f:87:22:c6:f6:ac:bc:2f:
c8:31:e8:ef:9d:1b:f7:0d:f0:90:b4:da:8a:85:ba:
58:d5:ad:10:f0:75:09:54:13:af:d7:10:d8:d4:ef:
bb:da:4d:9b:de:15:86:89:97:df:5b:f3:6d:c8:86:
ff:a6:52:15:bf:b6:72:9b:6a:ff:7b:f5:32:8a:38:
d8:a6:fd:71:a6:f7:c3:de:78:c5:93:12:6d:99:53:
b2:39:16:bf:ff:e4:50:c8:44:38:be:f0:17:e2:b0:
d1:ce:d5:77:18:b8:c0:be:1c:e7:d2:2a:bf:88:77:
f0:df:32:33:cd:6a:60:b2:ce:91:1a:8b:65:9c:0a:
70:99:68:77:a6:53:57:05:e3:a1:ac:e5:8c:56:05:
d7:15:13:c3:58:89:1c:30:8d:cf:78:5e:f9:66:53:
6c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:CD:30:59:3F:F1:DF:6D:45:AB:84:58:3E:4E:5C:B9:CE:2A:ED:20
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/os0wWT_x321Fq4RYPk5cuc4q7SA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.220.112.0/21
81.12.0.0/21
81.12.32.0/20
81.12.54.0-81.12.57.255
81.12.60.0-81.12.127.255
87.107.16.0/21
87.107.28.0-87.107.33.255
87.107.36.0/22
87.107.44.0-87.107.49.255
87.107.72.0-87.107.87.255
87.107.92.0/22
87.107.100.0-87.107.111.255
87.107.136.0/21
Signature Algorithm: sha256WithRSAEncryption
28:cc:02:3a:39:2d:a9:1f:5c:3c:36:7b:25:81:93:cc:e7:0f:
b8:46:02:61:23:03:fe:bd:dc:c4:d6:39:9d:4f:5e:71:b4:27:
7b:5a:d8:49:a0:a5:5e:95:da:6e:c2:bf:76:e6:d4:98:78:e1:
c4:db:24:3c:18:e5:f8:57:0a:27:a7:be:8f:a6:aa:90:4e:a4:
f0:02:1d:0e:37:ac:67:a9:15:ff:40:1f:23:85:55:96:e1:8b:
01:f9:e8:95:d0:dd:0a:74:1c:a6:a9:cc:c9:02:8a:c5:14:25:
9a:85:45:47:d8:67:2b:65:29:2f:fa:9c:24:08:93:8a:d9:ca:
b6:fe:75:b1:08:e6:1a:c7:81:e3:ec:07:c5:f2:7e:97:c4:17:
ea:a7:02:8c:7d:2f:88:be:b9:1d:a6:e1:64:2a:21:43:c8:70:
d3:79:fe:d3:1c:71:1d:4e:27:cb:77:95:d6:a5:2a:de:37:8e:
f0:ec:66:e6:a1:13:d3:cb:0d:0a:e9:7c:a7:0d:75:4e:37:c2:
af:88:a9:47:7e:ca:11:ef:c7:4c:32:8a:92:ea:bc:10:9a:00:
24:77:11:82:b3:af:1a:80:5f:6e:ae:f5:38:d6:ac:8b:80:d6:
c6:fb:90:9b:28:21:0b:39:41:f6:09:7f:e1:57:c2:a8:6c:7a:
00:b2:0a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:39 2023 by rpki-client on console-fra.rpki-client.org