Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/1udR1eHLWZv_as-CpfGzFocd6Mo.roa
File: 1udR1eHLWZv_as-CpfGzFocd6Mo.roa (raw, json)
Hash identifier: tnA7ztuIjINGxd8qisK1Rrx5e02aiq0r1tE+979BKYM=
Subject key identifier: D6:E7:51:D5:E1:CB:59:9B:FF:6A:CF:82:A5:F1:B3:16:87:1D:E8:CA
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 37AE9C93
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/1udR1eHLWZv_as-CpfGzFocd6Mo.roa
Signing time: Sat 01 Jan 2022 08:55:52 +0000
ROA not before: Sat 01 Jan 2022 08:55:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204650
IP address blocks: 62.220.118.0/24 maxlen: 24
62.220.118.0/23 maxlen: 23
62.220.119.0/24 maxlen: 24
81.12.43.0/24 maxlen: 24
87.107.100.0/22 maxlen: 22
81.12.77.0/24 maxlen: 24
81.12.96.0/22 maxlen: 22
81.12.96.0/21 maxlen: 21
81.12.100.0/24 maxlen: 24
81.12.102.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 934190227 (0x37ae9c93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jan 1 08:55:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d6e751d5e1cb599bff6acf82a5f1b316871de8ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:82:ba:fd:35:5a:35:c7:b5:ad:f9:2f:cd:16:
85:6f:24:02:64:d6:df:ec:7a:a2:c9:df:67:2d:e7:
a7:c5:b0:e7:ba:8f:3e:49:af:6f:9b:7b:3f:89:19:
15:f9:6d:69:6c:3a:3f:d8:d4:f2:8c:6e:e9:2e:12:
ea:20:dd:bf:41:a2:bd:74:92:61:67:22:dc:55:87:
4a:85:f8:fc:58:86:27:e5:e3:4b:cb:ab:6d:40:4d:
4c:17:be:db:4e:2b:6b:17:27:5a:17:a7:3f:49:1b:
5a:67:27:c8:09:59:2a:87:97:ee:67:2b:5e:18:99:
09:dd:df:2f:55:c1:11:8e:a4:14:4a:9d:46:77:39:
af:ee:3b:99:3d:6a:07:5d:02:d6:22:18:11:3a:c3:
da:eb:30:ba:81:45:ba:d3:76:9f:f0:f5:e5:61:be:
41:30:43:51:d5:fb:77:ea:16:f2:7f:8e:59:ea:ed:
ae:15:63:fc:74:43:e0:08:11:12:47:cf:b9:5d:8b:
27:04:a7:99:77:d2:eb:71:52:66:5d:01:69:f2:02:
a2:c1:d2:cf:e8:9a:0d:db:07:47:13:b8:fc:c5:ae:
14:2d:3c:83:01:24:e8:27:75:03:e1:26:62:3d:a7:
e6:df:41:80:1d:f9:ba:10:d2:26:70:cb:91:5f:53:
e7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:E7:51:D5:E1:CB:59:9B:FF:6A:CF:82:A5:F1:B3:16:87:1D:E8:CA
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/1udR1eHLWZv_as-CpfGzFocd6Mo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.220.118.0/23
81.12.43.0/24
81.12.77.0/24
81.12.96.0/21
87.107.100.0/22
Signature Algorithm: sha256WithRSAEncryption
b7:85:51:61:d5:dd:24:a2:90:6a:4d:d6:f1:18:f4:31:48:46:
44:cc:59:60:1a:34:47:97:51:6b:db:2b:e8:0d:a1:16:80:b5:
ba:d6:34:71:f4:e1:9e:4d:01:78:31:ee:7f:56:d2:90:70:ee:
f3:16:c8:95:1a:cc:81:5d:c6:47:23:10:24:5a:73:f9:f8:eb:
c3:5d:48:8d:be:47:d9:55:5a:a2:a6:8e:a3:2d:27:e8:3d:47:
c9:9b:b4:7f:88:13:66:99:63:fa:2f:69:dc:7e:df:19:db:61:
06:8a:59:3e:d0:99:d1:f3:09:01:f3:88:e2:6d:6f:be:41:33:
96:d6:58:b8:b8:e3:d9:3b:c9:0d:76:fe:63:d8:7c:4b:6c:e3:
f5:66:2e:d5:34:c2:1b:1b:79:af:fd:01:b5:8b:f4:6c:a7:ad:
c1:23:14:f9:db:53:e9:f1:6a:d2:c9:67:a1:1c:56:08:ae:07:
5b:a3:ab:43:2a:1b:ee:b6:83:74:cd:03:96:7f:ac:5b:9b:5d:
cc:96:4c:90:66:63:45:4b:94:57:27:14:6e:30:62:a2:74:bb:
7b:a7:98:8e:7e:ff:99:40:c0:02:9b:34:49:f2:00:9c:d0:c7:
35:2f:e0:a6:1d:d9:d4:3b:d5:c8:8e:37:c1:6d:7d:9f:3a:02:
c8:af:34:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:13 2023 by rpki-client on console.sobornost.net