Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/uPg57Cm0bO5CyY6uADBObIgVFOc.roa
File: uPg57Cm0bO5CyY6uADBObIgVFOc.roa (raw, json)
Hash identifier: gMAxFpxfZTqGaqswLOkzB9BtNAuClPPY5P4yNpGWX9Y=
Subject key identifier: B8:F8:39:EC:29:B4:6C:EE:42:C9:8E:AE:00:30:4E:6C:88:15:14:E7
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 01864FC894DB1472C703D40D27942BC39212
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/uPg57Cm0bO5CyY6uADBObIgVFOc.roa
Signing time: Tue 14 Feb 2023 11:56:30 +0000
ROA not before: Tue 14 Feb 2023 11:56:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200370
IP address blocks: 87.107.0.0/21 maxlen: 24
87.107.8.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:4f:c8:94:db:14:72:c7:03:d4:0d:27:94:2b:c3:92:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Feb 14 11:56:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b8f839ec29b46cee42c98eae00304e6c881514e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:52:98:d4:79:c4:7f:81:2f:00:d7:5b:be:29:
88:16:a3:3e:6a:92:43:87:d9:3d:43:9d:ea:20:d1:
34:22:78:9a:33:69:56:2c:36:d5:27:fa:c8:d1:98:
81:50:20:e1:a1:64:92:ea:38:55:7d:ee:db:44:1e:
e2:67:a3:84:91:a4:c4:88:92:c3:58:ed:e1:a9:c5:
24:03:56:a1:78:94:3e:d0:77:d7:e1:74:29:1a:58:
b1:ec:ea:a1:e0:df:95:b5:b5:5b:3f:87:8f:75:0c:
63:37:04:ee:f6:64:77:df:d5:88:aa:cd:e5:c4:4f:
6e:50:91:0c:11:e1:cd:47:af:59:a1:14:48:d2:68:
0f:ed:fa:ef:cd:bd:20:c0:cb:71:69:17:16:c6:bd:
4a:c4:61:8a:1f:96:5a:2c:2a:53:5e:ba:40:af:b6:
9c:84:18:e0:28:c8:b8:ab:be:1d:4b:52:c5:23:16:
89:9a:13:eb:10:54:13:78:8e:12:63:eb:49:32:9d:
97:56:01:c2:85:8b:18:47:b6:c8:4b:cd:17:44:43:
13:3e:3c:6e:25:fd:48:5c:1a:e6:39:5b:ed:3b:f1:
95:b1:f4:cf:87:b5:b8:9d:a0:79:6d:45:61:b7:b1:
37:fa:b2:9c:76:8e:3b:99:4f:d4:cf:aa:17:c7:ba:
fe:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F8:39:EC:29:B4:6C:EE:42:C9:8E:AE:00:30:4E:6C:88:15:14:E7
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/uPg57Cm0bO5CyY6uADBObIgVFOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.107.0.0/20
Signature Algorithm: sha256WithRSAEncryption
79:37:91:f6:d5:8e:0d:f3:31:ac:76:9f:29:69:d8:42:ec:57:
83:57:3a:9c:e0:f0:86:60:ec:98:0a:11:94:39:86:e2:5c:c1:
f3:4a:95:72:f9:d2:d9:3b:d5:83:21:f8:55:6c:1e:ab:de:4f:
7b:8c:1b:12:7c:16:90:58:f8:5b:91:d7:a3:0e:35:dc:9a:34:
63:ec:e1:88:42:c6:9e:e9:ec:3b:56:60:a7:a7:8a:6a:8c:d5:
a3:c6:e6:61:cd:f0:53:9a:d1:c3:f6:da:c8:df:a4:b8:f3:31:
01:85:c5:9d:13:36:9a:2a:5b:00:02:d2:ce:64:eb:6a:5a:cc:
d9:dd:9a:41:ca:1b:d5:f6:ab:50:8f:05:f1:7f:10:e4:13:80:
5c:8d:77:1f:bf:36:14:5e:75:34:cc:83:80:fc:c2:78:2c:37:
2d:83:71:22:eb:2c:c9:e4:e1:78:e3:16:3b:fe:77:76:65:41:
b8:75:86:d1:09:dd:cd:66:b7:22:dc:6d:2e:27:e0:ba:42:c4:
06:4e:61:76:ba:56:e7:51:ec:08:cb:52:f4:bb:b4:33:f7:7d:
cb:c8:b5:62:73:df:3d:9d:23:00:ef:71:1a:55:f8:dc:0f:ca:
70:fa:93:1a:3d:16:f0:fc:5f:9c:1f:e5:da:b5:e3:22:12:56:
93:61:b6:0c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYZPyJTbFHLHA9QNJ5Qrw5ISMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwNzc1ZDk0NzFiODVkOTYzZmVmNmQyODM1OTBlMmQ5NDJk
ZDVjMjEwHhcNMjMwMjE0MTE1NjMwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOGY4MzllYzI5YjQ2Y2VlNDJjOThlYWUwMDMwNGU2Yzg4MTUxNGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFKY1HnEf4EvANdbvimIFqM+apJD
h9k9Q53qINE0IniaM2lWLDbVJ/rI0ZiBUCDhoWSS6jhVfe7bRB7iZ6OEkaTEiJLD
WO3hqcUkA1aheJQ+0HfX4XQpGlix7Oqh4N+VtbVbP4ePdQxjNwTu9mR339WIqs3l
xE9uUJEMEeHNR69ZoRRI0mgP7frvzb0gwMtxaRcWxr1KxGGKH5ZaLCpTXrpAr7ac
hBjgKMi4q74dS1LFIxaJmhPrEFQTeI4SY+tJMp2XVgHChYsYR7bIS80XREMTPjxu
Jf1IXBrmOVvtO/GVsfTPh7W4naB5bUVht7E3+rKcdo47mU/Uz6oXx7r+XwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLj4OewptGzuQsmOrgAwTmyIFRTnMB8GA1UdIwQY
MBaAFAB3XZRxuF2WP+9tKDWQ4tlC3VwhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQt
NzZiMzNlNGNlODIxLzEvdVBnNTdDbTBiTzVDeVk2dUFEQk9iSWdWRk9jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQtNzZiMzNlNGNlODIx
LzEvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEV2sAMA0G
CSqGSIb3DQEBCwUAA4IBAQB5N5H21Y4N8zGsdp8padhC7FeDVzqc4PCGYOyYChGU
OYbiXMHzSpVy+dLZO9WDIfhVbB6r3k97jBsSfBaQWPhbkdejDjXcmjRj7OGIQsae
6ew7VmCnp4pqjNWjxuZhzfBTmtHD9trI36S48zEBhcWdEzaaKlsAAtLOZOtqWszZ
3ZpByhvV9qtQjwXxfxDkE4BcjXcfvzYUXnU0zIOA/MJ4LDctg3Ei6yzJ5OF44xY7
/nd2ZUG4dYbRCd3NZrci3G0uJ+C6QsQGTmF2ulbnUewIy1L0u7Qz933LyLVic989
nSMA73EaVfjcD8pw+pMaPRbw/F+cH+XateMiElaTYbYM
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:31:43 2025 by rpki-client