Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/0LSjL4w3yRC4llqFzgBhpHMFC9c.roa
File: 0LSjL4w3yRC4llqFzgBhpHMFC9c.roa (raw, json)
Hash identifier: vb/asOk14bVG1dTCA6nrA7pphT6csWv1iCRgdwYM2tk=
Subject key identifier: D0:B4:A3:2F:8C:37:C9:10:B8:96:5A:85:CE:00:61:A4:73:05:0B:D7
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 01842D99E1E10E994D6DD5140CE4A98E1560
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/0LSjL4w3yRC4llqFzgBhpHMFC9c.roa
Signing time: Mon 31 Oct 2022 10:32:50 +0000
ROA not before: Mon 31 Oct 2022 10:32:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3356
IP address blocks: 104.239.10.0/23 maxlen: 23
104.239.13.0/24 maxlen: 24
104.239.30.0/23 maxlen: 23
104.249.55.0/24 maxlen: 24
104.239.28.0/24 maxlen: 24
104.249.60.0/23 maxlen: 23
216.173.120.0/24 maxlen: 24
104.238.4.0/24 maxlen: 24
104.238.7.0/24 maxlen: 24
104.238.8.0/24 maxlen: 24
104.238.9.0/24 maxlen: 24
104.238.10.0/24 maxlen: 24
104.238.5.0/24 maxlen: 24
104.238.20.0/24 maxlen: 24
216.173.76.0/24 maxlen: 24
216.173.82.0/24 maxlen: 24
216.173.103.0/24 maxlen: 24
216.173.104.0/24 maxlen: 24
216.173.102.0/24 maxlen: 24
216.173.105.0/24 maxlen: 24
216.173.107.0/24 maxlen: 24
216.173.108.0/24 maxlen: 24
216.173.106.0/24 maxlen: 24
216.173.110.0/24 maxlen: 24
216.173.109.0/24 maxlen: 24
104.239.94.0/24 maxlen: 24
104.239.98.0/24 maxlen: 24
104.239.104.0/24 maxlen: 24
104.239.105.0/24 maxlen: 24
104.239.101.0/24 maxlen: 24
104.239.106.0/24 maxlen: 24
104.239.107.0/24 maxlen: 24
104.239.108.0/24 maxlen: 24
104.239.111.0/24 maxlen: 24
104.239.124.0/23 maxlen: 23
104.239.126.0/24 maxlen: 24
104.239.44.0/24 maxlen: 24
104.239.78.0/24 maxlen: 24
104.239.75.0/24 maxlen: 24
104.239.73.0/24 maxlen: 24
104.239.76.0/23 maxlen: 23
104.239.82.0/24 maxlen: 24
104.239.80.0/23 maxlen: 23
104.239.86.0/24 maxlen: 24
104.239.88.0/24 maxlen: 24
104.239.90.0/23 maxlen: 23
104.233.24.0/23 maxlen: 23
104.233.20.0/24 maxlen: 24
104.233.26.0/24 maxlen: 24
138.128.157.0/24 maxlen: 24
138.128.159.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:2d:99:e1:e1:0e:99:4d:6d:d5:14:0c:e4:a9:8e:15:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Oct 31 10:32:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d0b4a32f8c37c910b8965a85ce0061a473050bd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:86:e7:4d:d9:c7:f5:25:4a:44:7b:27:2b:0d:
15:ff:6e:a9:c9:68:b0:75:93:72:2f:ef:d8:3c:2f:
e1:c3:0b:69:6b:53:f4:ef:e8:eb:f4:ba:aa:60:7d:
f2:2d:4a:02:48:83:86:e6:7e:c5:a8:1d:cf:f2:8f:
d9:c5:f1:58:61:ca:89:c8:c8:07:fb:3f:ae:31:0f:
8d:6d:79:7f:84:23:e6:a2:36:85:63:75:82:9f:e0:
b2:f6:bd:87:1d:78:3c:d0:aa:16:0b:b4:05:4f:ba:
c1:32:24:aa:91:40:d3:f4:27:a3:a3:d5:ae:88:a2:
27:86:ec:9a:e2:ad:aa:69:a7:ae:75:fc:dc:a5:0e:
c3:f4:66:10:d3:67:de:06:d3:66:35:e4:8e:e3:53:
a4:d9:92:7c:a2:db:ea:60:fb:3d:10:33:c1:f8:7a:
97:27:bc:b8:f1:4b:08:e3:1c:1b:ba:57:eb:d8:ee:
75:55:a0:72:fc:c3:0d:c9:85:54:6e:66:aa:f4:f1:
dc:5b:be:a5:21:ce:c5:58:55:01:0d:cb:54:cc:cf:
04:33:1e:3c:25:3d:43:4f:67:01:2c:df:44:81:25:
ac:d1:9b:7d:1b:7a:0c:ea:8c:f3:68:98:62:28:0f:
7c:97:10:58:83:14:c0:4d:70:87:1a:54:a4:2d:46:
b4:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:B4:A3:2F:8C:37:C9:10:B8:96:5A:85:CE:00:61:A4:73:05:0B:D7
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/0LSjL4w3yRC4llqFzgBhpHMFC9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.233.20.0/24
104.233.24.0-104.233.26.255
104.238.4.0/23
104.238.7.0-104.238.10.255
104.238.20.0/24
104.239.10.0/23
104.239.13.0/24
104.239.28.0/24
104.239.30.0/23
104.239.44.0/24
104.239.73.0/24
104.239.75.0-104.239.78.255
104.239.80.0-104.239.82.255
104.239.86.0/24
104.239.88.0/24
104.239.90.0/23
104.239.94.0/24
104.239.98.0/24
104.239.101.0/24
104.239.104.0-104.239.108.255
104.239.111.0/24
104.239.124.0-104.239.126.255
104.249.55.0/24
104.249.60.0/23
138.128.157.0/24
138.128.159.0/24
216.173.76.0/24
216.173.82.0/24
216.173.102.0-216.173.110.255
216.173.120.0/24
Signature Algorithm: sha256WithRSAEncryption
55:e5:6e:b2:8b:be:69:e3:e2:93:03:81:d3:63:8c:a1:bf:2f:
63:8b:88:c1:e6:2b:27:da:28:df:70:6e:d4:27:ea:67:1e:61:
ec:a9:32:63:9b:bb:8e:eb:a3:35:be:7b:ce:5b:5c:a4:65:bd:
f4:6f:3e:61:b8:eb:a1:86:91:5f:ac:58:56:c6:0e:dc:63:6e:
76:72:78:a8:89:5a:78:da:8b:72:62:21:ce:e7:1b:c2:b9:73:
50:8d:2d:5c:2d:3f:b6:85:e8:27:aa:23:33:3c:cd:1c:87:d2:
05:8b:c6:0b:a8:97:c9:1c:2f:0c:65:8c:8a:b1:a2:3b:c9:22:
18:0b:5c:a6:51:55:7d:6c:69:15:e6:5a:ec:8f:da:08:84:02:
fb:ca:b0:b6:a1:e5:e2:63:8b:63:3e:c7:35:ab:27:45:6a:63:
c5:0c:58:c0:76:0b:74:4e:ea:4d:47:b4:b6:d8:9d:9d:b0:2d:
85:62:be:63:15:0a:76:9e:88:81:bd:d0:09:80:2e:f8:aa:9b:
ad:a0:a0:2e:5b:34:53:4f:3b:2a:d4:14:9d:bd:e9:ba:dd:d4:
ec:51:22:93:d7:fa:b5:01:45:5e:76:72:84:07:23:fe:84:bd:
83:38:19:15:49:0e:c6:95:4f:31:df:e9:d1:27:b7:7c:19:8e:
8b:5d:2c:19
-----BEGIN CERTIFICATE-----
MIIF6TCCBNGgAwIBAgISAYQtmeHhDplNbdUUDOSpjhVgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNTgxZTY3M2Q4MGY3NDc0OTM2YjIxMzM3ZWFmY2MxYmRj
Mzg1ZTkwHhcNMjIxMDMxMTAzMjUwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMGI0YTMyZjhjMzdjOTEwYjg5NjVhODVjZTAwNjFhNDczMDUwYmQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4bnTdnH9SVKRHsnKw0V/26pyWiw
dZNyL+/YPC/hwwtpa1P07+jr9LqqYH3yLUoCSIOG5n7FqB3P8o/ZxfFYYcqJyMgH
+z+uMQ+NbXl/hCPmojaFY3WCn+Cy9r2HHXg80KoWC7QFT7rBMiSqkUDT9Cejo9Wu
iKInhuya4q2qaaeudfzcpQ7D9GYQ02feBtNmNeSO41Ok2ZJ8otvqYPs9EDPB+HqX
J7y48UsI4xwbulfr2O51VaBy/MMNyYVUbmaq9PHcW76lIc7FWFUBDctUzM8EMx48
JT1DT2cBLN9EgSWs0Zt9G3oM6ozzaJhiKA98lxBYgxTATXCHGlSkLUa00QIDAQAB
o4IC9TCCAvEwHQYDVR0OBBYEFNC0oy+MN8kQuJZahc4AYaRzBQvXMB8GA1UdIwQY
MBaAFGBYHmc9gPdHSTayEzfq/MG9w4XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYt
ZmIwNzk1NWYzYWFhLzEvMExTakw0dzN5UkM0bGxxRnpnQmhwSE1GQzljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYtZmIwNzk1NWYzYWFh
LzEvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBCQYIKwYBBQUHAQcBAf8EgfkwgfYwgfMEAgABMIHsAwQA
aOkUMAwDBANo6RgDBABo6RoDBAFo7gQwDAMEAGjuBwMEAGjuCgMEAGjuFAMEAWjv
CgMEAGjvDQMEAGjvHAMEAWjvHgMEAGjvLAMEAGjvSTAMAwQAaO9LAwQAaO9OMAwD
BARo71ADBABo71IDBABo71YDBABo71gDBAFo71oDBABo714DBABo72IDBABo72Uw
DAMEA2jvaAMEAGjvbAMEAGjvbzAMAwQCaO98AwQAaO9+AwQAaPk3AwQBaPk8AwQA
ioCdAwQAioCfAwQA2K1MAwQA2K1SMAwDBAHYrWYDBADYrW4DBADYrXgwDQYJKoZI
hvcNAQELBQADggEBAFXlbrKLvmnj4pMDgdNjjKG/L2OLiMHmKyfaKN9wbtQn6mce
YeypMmObu47rozW+e85bXKRlvfRvPmG466GGkV+sWFbGDtxjbnZyeKiJWnjai3Ji
Ic7nG8K5c1CNLVwtP7aF6CeqIzM8zRyH0gWLxguol8kcLwxljIqxojvJIhgLXKZR
VX1saRXmWuyP2giEAvvKsLah5eJji2M+xzWrJ0VqY8UMWMB2C3RO6k1HtLbYnZ2w
LYVivmMVCnaeiIG90AmALviqm62goC5bNFNPOyrUFJ296brd1OxRIpPX+rUBRV52
coQHI/6EvYM4GRVJDsaVTzHf6dEnt3wZjotdLBk=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:56 2023 by rpki-client on console-fra.rpki-client.org