Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/2G8m5coehkkAw8HTbFq1-vNmhXI.roa
File: 2G8m5coehkkAw8HTbFq1-vNmhXI.roa (raw, json)
Hash identifier: kMP1U1vMhVS1THc9m4YtaCm7JK5cziRfFKT8WKLm0yk=
Subject key identifier: D8:6F:26:E5:CA:1E:86:49:00:C3:C1:D3:6C:5A:B5:FA:F3:66:85:72
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 013478D5
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/2G8m5coehkkAw8HTbFq1-vNmhXI.roa
Signing time: Sat 01 Jan 2022 05:02:48 +0000
ROA not before: Sat 01 Jan 2022 05:02:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 104.249.30.0/23 maxlen: 23
104.249.29.0/24 maxlen: 24
104.239.10.0/23 maxlen: 23
104.249.36.0/24 maxlen: 24
104.239.13.0/24 maxlen: 24
104.239.30.0/23 maxlen: 23
104.249.55.0/24 maxlen: 24
104.239.28.0/24 maxlen: 24
104.249.60.0/23 maxlen: 23
216.173.120.0/24 maxlen: 24
104.238.4.0/24 maxlen: 24
104.238.8.0/24 maxlen: 24
104.238.10.0/24 maxlen: 24
104.238.9.0/24 maxlen: 24
104.238.5.0/24 maxlen: 24
104.238.7.0/24 maxlen: 24
104.238.14.0/24 maxlen: 24
104.238.19.0/24 maxlen: 24
104.238.20.0/24 maxlen: 24
216.173.76.0/24 maxlen: 24
216.173.82.0/24 maxlen: 24
216.173.103.0/24 maxlen: 24
216.173.102.0/24 maxlen: 24
216.173.105.0/24 maxlen: 24
216.173.104.0/24 maxlen: 24
216.173.111.0/24 maxlen: 24
216.173.106.0/24 maxlen: 24
216.173.108.0/24 maxlen: 24
216.173.107.0/24 maxlen: 24
216.173.110.0/24 maxlen: 24
216.173.109.0/24 maxlen: 24
104.239.94.0/24 maxlen: 24
104.239.98.0/24 maxlen: 24
104.239.92.0/23 maxlen: 23
104.239.96.0/23 maxlen: 23
104.239.101.0/24 maxlen: 24
104.239.104.0/24 maxlen: 24
104.239.105.0/24 maxlen: 24
104.239.107.0/24 maxlen: 24
104.239.106.0/24 maxlen: 24
104.239.108.0/24 maxlen: 24
104.239.111.0/24 maxlen: 24
104.239.124.0/23 maxlen: 23
104.239.126.0/24 maxlen: 24
104.239.44.0/24 maxlen: 24
104.239.68.0/23 maxlen: 23
104.239.70.0/23 maxlen: 23
104.239.73.0/24 maxlen: 24
104.239.75.0/24 maxlen: 24
104.239.78.0/24 maxlen: 24
104.239.76.0/23 maxlen: 23
104.239.82.0/24 maxlen: 24
104.239.80.0/23 maxlen: 23
104.239.84.0/23 maxlen: 23
104.239.86.0/24 maxlen: 24
104.239.88.0/24 maxlen: 24
104.239.90.0/23 maxlen: 23
104.233.20.0/24 maxlen: 24
104.233.24.0/23 maxlen: 23
104.233.26.0/24 maxlen: 24
138.128.151.0/24 maxlen: 24
138.128.157.0/24 maxlen: 24
138.128.159.0/24 maxlen: 24
138.128.153.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20216021 (0x13478d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Jan 1 05:02:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d86f26e5ca1e864900c3c1d36c5ab5faf3668572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:10:7f:a6:bb:ee:91:7f:7a:92:d5:3a:fa:95:
4f:20:da:25:53:6b:24:e8:22:90:0f:52:75:81:4c:
bd:85:a3:50:ae:6b:74:de:8e:b3:ed:19:f8:7d:69:
fa:ae:84:d4:c6:3d:6c:97:bd:9b:4f:82:cc:2f:04:
a5:c3:72:22:30:71:5f:88:10:ad:09:16:a0:8d:84:
85:92:ea:c7:dc:02:0a:c7:a6:3b:b9:01:9e:66:72:
ba:3c:5d:7d:c7:32:97:14:c7:64:17:1c:31:c5:53:
61:93:ee:d0:52:18:ee:fb:ce:bd:99:7d:5e:c3:6d:
f3:9a:0c:9f:4b:fd:e2:00:02:d2:69:00:76:65:9c:
83:fb:2e:f5:ad:e9:0b:fe:9d:6b:ac:8d:ae:33:fd:
0d:e6:b1:c0:71:c6:05:cd:4a:6a:13:88:69:6c:de:
b4:8f:37:13:10:3e:39:71:8e:75:32:d4:9a:19:9e:
9a:46:ea:e3:84:8a:b8:8e:db:89:a4:60:75:29:42:
91:82:ab:35:8a:65:ea:2a:3e:f1:73:62:39:0b:78:
3e:7d:82:0a:ea:b1:62:14:4b:26:c4:ac:04:16:77:
5e:ef:0c:c1:2b:b2:b6:11:88:f5:5b:87:47:65:cf:
46:f2:f4:ca:99:48:bd:37:e1:8d:e4:50:ff:2a:e4:
8c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:6F:26:E5:CA:1E:86:49:00:C3:C1:D3:6C:5A:B5:FA:F3:66:85:72
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/2G8m5coehkkAw8HTbFq1-vNmhXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.233.20.0/24
104.233.24.0-104.233.26.255
104.238.4.0/23
104.238.7.0-104.238.10.255
104.238.14.0/24
104.238.19.0-104.238.20.255
104.239.10.0/23
104.239.13.0/24
104.239.28.0/24
104.239.30.0/23
104.239.44.0/24
104.239.68.0/22
104.239.73.0/24
104.239.75.0-104.239.78.255
104.239.80.0-104.239.82.255
104.239.84.0-104.239.86.255
104.239.88.0/24
104.239.90.0-104.239.94.255
104.239.96.0-104.239.98.255
104.239.101.0/24
104.239.104.0-104.239.108.255
104.239.111.0/24
104.239.124.0-104.239.126.255
104.249.29.0-104.249.31.255
104.249.36.0/24
104.249.55.0/24
104.249.60.0/23
138.128.151.0/24
138.128.153.0/24
138.128.157.0/24
138.128.159.0/24
216.173.76.0/24
216.173.82.0/24
216.173.102.0-216.173.111.255
216.173.120.0/24
Signature Algorithm: sha256WithRSAEncryption
50:f4:19:ca:68:9e:d1:4c:e3:2d:ea:77:d3:1d:82:c9:89:85:
c5:1e:a0:cf:1a:e6:32:74:58:6c:a5:f5:dd:34:d5:22:de:df:
1b:93:27:cf:86:7e:a4:a3:f6:f7:f6:c7:32:f1:0d:77:c3:64:
a4:ac:57:36:4b:d5:43:bf:95:99:a1:da:53:a0:df:78:9a:e7:
61:48:5c:12:e9:bb:fe:b4:44:73:0c:65:f3:23:4d:ab:32:b5:
c7:b5:4c:d5:c7:eb:e9:04:30:d1:7b:48:db:25:f3:0d:1d:cf:
3f:05:04:fc:e2:79:e7:ec:9f:d6:42:42:38:a1:ef:e7:45:8a:
85:84:e9:5a:d1:36:65:65:bb:7d:b3:67:0a:c7:a6:50:fb:2c:
7a:85:df:cf:e2:01:37:66:d9:7e:3b:fb:56:66:3c:e4:9d:44:
82:75:fe:96:43:09:45:80:43:00:4d:e7:77:a6:94:02:e4:bc:
03:8b:e8:d9:1a:8b:e3:6f:0a:fe:89:03:0e:20:6c:8c:e5:83:
40:cc:0d:02:8d:08:60:80:80:d0:68:b5:6c:ff:3e:21:f5:eb:
05:44:a2:2c:ef:fa:ff:52:e9:36:da:eb:b5:44:7a:dc:33:61:
a3:60:a3:b0:d0:1b:c5:5a:f0:9e:7d:e1:05:f3:1b:9b:de:45:
bc:ab:0d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:56 2023 by rpki-client on console-fra.rpki-client.org