Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/qPB9X8stcKUJ1FMkENUEBJH4ZGM.roa
File: qPB9X8stcKUJ1FMkENUEBJH4ZGM.roa (raw, json)
Hash identifier: GSe+X0O71edmhjkuIiv2biDItpvN6EiZ1x+EUVDzo9I=
Subject key identifier: A8:F0:7D:5F:CB:2D:70:A5:09:D4:53:24:10:D5:04:04:91:F8:64:63
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 38379989
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/qPB9X8stcKUJ1FMkENUEBJH4ZGM.roa
Signing time: Tue 22 Feb 2022 15:02:15 +0000
ROA not before: Tue 22 Feb 2022 15:02:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200370
IP address blocks: 87.107.1.0/24 maxlen: 24
87.107.0.0/24 maxlen: 24
87.107.2.0/24 maxlen: 24
87.107.3.0/24 maxlen: 24
87.107.4.0/24 maxlen: 24
87.107.0.0/23 maxlen: 23
87.107.2.0/23 maxlen: 23
87.107.4.0/23 maxlen: 23
87.107.4.0/22 maxlen: 22
87.107.0.0/21 maxlen: 21
87.107.0.0/22 maxlen: 22
87.107.5.0/24 maxlen: 24
87.107.6.0/24 maxlen: 24
87.107.6.0/23 maxlen: 23
87.107.7.0/24 maxlen: 24
87.107.131.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 943167881 (0x38379989)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Feb 22 15:02:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a8f07d5fcb2d70a509d4532410d5040491f86463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b1:46:e2:5c:51:db:89:33:ac:3a:02:bf:ea:
0c:48:5f:07:07:d7:24:13:7c:25:50:68:27:26:b1:
eb:a2:a4:70:f8:43:38:8a:e3:8a:ee:64:8e:05:bf:
ed:2d:89:ed:e6:84:c3:95:45:e3:c0:99:60:78:bd:
4e:dc:27:38:da:9c:7e:27:81:32:97:8f:85:0c:22:
83:ec:84:71:17:ad:a9:0f:1d:d6:2d:a2:a0:94:7a:
1a:43:4f:ec:68:4a:17:75:18:2a:49:87:66:6c:2e:
f6:d1:8e:91:94:ff:36:77:15:f0:63:b0:da:84:31:
c5:d0:a3:60:7b:85:26:18:aa:22:47:3e:fc:b8:11:
31:da:7f:23:03:0c:56:2b:18:ef:bb:18:c8:76:8c:
d7:83:0b:0b:4e:a4:d5:f0:e9:bc:96:65:f1:47:84:
b9:f6:4e:25:a2:7a:06:59:4d:41:8f:05:08:2b:35:
3b:b8:47:01:e2:fb:11:ad:91:87:5f:ad:d7:2b:61:
16:1a:e3:ca:a8:3e:9b:9f:f5:11:b6:49:d5:32:60:
67:06:32:f2:09:1c:34:ca:b6:91:0b:ca:1e:0e:f7:
e2:ac:4c:55:ee:dd:fe:80:2a:79:67:e6:d0:75:c6:
7b:4b:71:f0:a6:5d:90:19:10:fe:f8:84:43:8c:85:
6d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:F0:7D:5F:CB:2D:70:A5:09:D4:53:24:10:D5:04:04:91:F8:64:63
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/qPB9X8stcKUJ1FMkENUEBJH4ZGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.107.0.0/21
87.107.131.0/24
Signature Algorithm: sha256WithRSAEncryption
00:30:1b:8a:e8:4a:a2:a8:ec:90:f6:d2:88:a0:47:ad:2e:29:
a2:6a:32:a1:42:bd:8c:79:5a:f4:1f:74:ec:77:ce:0b:01:e2:
28:20:5f:0a:f9:52:3c:49:a7:11:e5:a3:b7:68:4e:92:fb:c2:
e5:ad:de:22:96:a5:85:33:ab:74:95:92:d3:16:40:c1:bb:d7:
07:54:8d:a0:a8:83:f5:8c:4b:d6:d6:b8:4c:6c:00:93:3a:20:
7f:f8:b4:a8:58:30:ee:f4:97:20:2d:4f:81:37:e1:82:2a:86:
7c:a6:53:0b:d5:54:93:a5:11:b8:d6:fa:7c:b6:d4:62:2f:34:
ea:b1:07:b3:46:15:18:e2:65:d1:b1:a4:96:7e:30:c0:90:af:
fa:7b:6c:41:b6:70:1c:c2:f6:c4:ed:c8:85:2d:c8:9a:f8:aa:
8c:8b:48:e7:48:13:06:2b:5a:ab:78:e4:6c:8c:81:aa:50:8f:
a2:73:74:55:48:ec:34:33:0b:c8:48:e9:f9:9d:06:f5:e0:b6:
67:e3:17:59:0e:96:ed:1b:88:d3:12:2c:8f:15:9c:8d:ae:4c:
10:71:4a:59:0e:f4:aa:f0:c8:c4:16:ca:73:f0:f1:ab:dc:f6:
12:a5:81:cc:4f:93:91:71:2e:c0:15:25:46:92:1c:00:c1:2a:
7c:ec:a0:48
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEODeZiTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
MDc3NWQ5NDcxYjg1ZDk2M2ZlZjZkMjgzNTkwZTJkOTQyZGQ1YzIxMB4XDTIyMDIy
MjE1MDIxNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYThmMDdkNWZjYjJk
NzBhNTA5ZDQ1MzI0MTBkNTA0MDQ5MWY4NjQ2MzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOOxRuJcUduJM6w6Ar/qDEhfBwfXJBN8JVBoJyax66KkcPhD
OIrjiu5kjgW/7S2J7eaEw5VF48CZYHi9TtwnONqcfieBMpePhQwig+yEcRetqQ8d
1i2ioJR6GkNP7GhKF3UYKkmHZmwu9tGOkZT/NncV8GOw2oQxxdCjYHuFJhiqIkc+
/LgRMdp/IwMMVisY77sYyHaM14MLC06k1fDpvJZl8UeEufZOJaJ6BllNQY8FCCs1
O7hHAeL7Ea2Rh1+t1ythFhrjyqg+m5/1EbZJ1TJgZwYy8gkcNMq2kQvKHg734qxM
Ve7d/oAqeWfm0HXGe0tx8KZdkBkQ/viEQ4yFbdcCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBSo8H1fyy1wpQnUUyQQ1QQEkfhkYzAfBgNVHSMEGDAWgBQAd12Ucbhdlj/v
bSg1kOLZQt1cITAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0FIZGRsSEc0WFpZXzcyMG9OWkRpMlVMZFhDRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjYvNjM3NjBjLWUyMWItNGJhZi1hOWE0LTc2YjMzZTRjZTgyMS8x
L3FQQjlYOHN0Y0tVSjFGTWtFTlVFQkpINFpHTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjYv
NjM3NjBjLWUyMWItNGJhZi1hOWE0LTc2YjMzZTRjZTgyMS8xL0FIZGRsSEc0WFpZ
XzcyMG9OWkRpMlVMZFhDRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEA1drAAMEAFdrgzANBgkqhkiG9w0B
AQsFAAOCAQEAADAbiuhKoqjskPbSiKBHrS4pomoyoUK9jHla9B907HfOCwHiKCBf
CvlSPEmnEeWjt2hOkvvC5a3eIpalhTOrdJWS0xZAwbvXB1SNoKiD9YxL1ta4TGwA
kzogf/i0qFgw7vSXIC1PgTfhgiqGfKZTC9VUk6URuNb6fLbUYi806rEHs0YVGOJl
0bGkln4wwJCv+ntsQbZwHML2xO3IhS3ImviqjItI50gTBitaq3jkbIyBqlCPonN0
VUjsNDMLyEjp+Z0G9eC2Z+MXWQ6W7RuI0xIsjxWcja5MEHFKWQ70qvDIxBbKc/Dx
q9z2EqWBzE+TkXEuwBUlRpIcAMEqfOygSA==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:39 2023 by rpki-client on console-fra.rpki-client.org