Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/3_6lC_4gVA5d3InZz5zT7SckSNA.roa
File: 3_6lC_4gVA5d3InZz5zT7SckSNA.roa (raw, json)
Hash identifier: wUowKoIfrNo787D9jg9F64CVgSq+ahrods6vSzY3l/4=
Subject key identifier: DF:FE:A5:0B:FE:20:54:0E:5D:DC:89:D9:CF:9C:D3:ED:27:24:48:D0
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 0184D2409FAFFA4DB5D05367336012F27ED2
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/3_6lC_4gVA5d3InZz5zT7SckSNA.roa
Signing time: Fri 02 Dec 2022 09:52:41 +0000
ROA not before: Fri 02 Dec 2022 09:52:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3356
IP address blocks: 216.173.76.0/24 maxlen: 24
216.173.82.0/24 maxlen: 24
104.239.10.0/23 maxlen: 23
216.173.103.0/24 maxlen: 24
216.173.104.0/24 maxlen: 24
216.173.102.0/24 maxlen: 24
216.173.105.0/24 maxlen: 24
104.239.30.0/23 maxlen: 23
104.239.28.0/24 maxlen: 24
216.173.107.0/24 maxlen: 24
216.173.108.0/24 maxlen: 24
216.173.106.0/24 maxlen: 24
216.173.110.0/24 maxlen: 24
216.173.109.0/24 maxlen: 24
104.239.94.0/24 maxlen: 24
104.239.98.0/24 maxlen: 24
104.239.104.0/24 maxlen: 24
104.239.105.0/24 maxlen: 24
104.239.101.0/24 maxlen: 24
104.239.106.0/24 maxlen: 24
104.239.107.0/24 maxlen: 24
104.239.108.0/24 maxlen: 24
104.239.111.0/24 maxlen: 24
104.239.124.0/23 maxlen: 23
104.239.126.0/24 maxlen: 24
104.239.44.0/24 maxlen: 24
216.173.120.0/24 maxlen: 24
104.239.78.0/24 maxlen: 24
104.239.75.0/24 maxlen: 24
104.239.73.0/24 maxlen: 24
104.239.76.0/23 maxlen: 23
104.239.82.0/24 maxlen: 24
104.239.80.0/23 maxlen: 23
104.239.86.0/24 maxlen: 24
104.239.88.0/24 maxlen: 24
104.239.90.0/23 maxlen: 23
104.233.24.0/23 maxlen: 23
104.233.26.0/24 maxlen: 24
104.238.4.0/24 maxlen: 24
104.238.7.0/24 maxlen: 24
104.238.8.0/24 maxlen: 24
104.238.9.0/24 maxlen: 24
104.238.10.0/24 maxlen: 24
104.238.5.0/24 maxlen: 24
138.128.157.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d2:40:9f:af:fa:4d:b5:d0:53:67:33:60:12:f2:7e:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Dec 2 09:52:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dffea50bfe20540e5ddc89d9cf9cd3ed272448d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:31:36:df:e4:7f:61:93:f7:ac:dd:58:95:fb:
5b:f4:23:be:60:b5:c6:35:1b:6d:9d:9f:4d:42:02:
26:06:01:53:67:4e:72:75:71:f1:51:5d:b7:5f:5f:
8e:88:3f:de:9c:77:0a:8c:77:c0:4f:92:66:60:2c:
cd:00:31:df:d0:83:e4:78:0f:46:4e:99:ad:2f:d0:
92:65:fb:2d:d8:25:79:2c:55:63:c8:30:65:d3:8c:
1c:2a:ae:69:3f:12:7d:1d:ab:8c:53:b0:92:0a:f1:
fc:2e:b9:ed:c6:34:fe:96:54:45:fd:5e:35:68:73:
e5:7b:40:11:e9:eb:69:9a:4f:25:82:39:a2:07:0b:
3a:27:17:0e:d3:74:f4:e8:7a:e0:4a:ea:a5:86:a2:
bb:f8:67:35:ed:8c:14:94:ae:c5:a8:e1:42:0b:36:
5a:b4:a4:1a:e3:0a:ff:b6:97:cd:13:aa:15:6b:0f:
53:39:8b:78:41:5a:f3:5a:a0:f1:36:81:ed:c7:5a:
32:2c:f7:69:97:e0:b6:95:c3:cb:ce:e9:e5:26:a9:
85:5d:61:13:7b:38:b9:40:4a:73:e4:bc:63:a4:b1:
b7:d6:2c:df:80:67:cc:c5:59:02:c5:be:0a:e8:94:
8b:b6:50:ff:b4:65:06:9f:1a:87:3c:c8:3a:84:0c:
39:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:FE:A5:0B:FE:20:54:0E:5D:DC:89:D9:CF:9C:D3:ED:27:24:48:D0
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/3_6lC_4gVA5d3InZz5zT7SckSNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.233.24.0-104.233.26.255
104.238.4.0/23
104.238.7.0-104.238.10.255
104.239.10.0/23
104.239.28.0/24
104.239.30.0/23
104.239.44.0/24
104.239.73.0/24
104.239.75.0-104.239.78.255
104.239.80.0-104.239.82.255
104.239.86.0/24
104.239.88.0/24
104.239.90.0/23
104.239.94.0/24
104.239.98.0/24
104.239.101.0/24
104.239.104.0-104.239.108.255
104.239.111.0/24
104.239.124.0-104.239.126.255
138.128.157.0/24
216.173.76.0/24
216.173.82.0/24
216.173.102.0-216.173.110.255
216.173.120.0/24
Signature Algorithm: sha256WithRSAEncryption
02:06:d7:8c:de:2a:43:93:68:2e:53:ea:53:74:6b:e6:31:63:
da:5d:47:86:e1:e0:a5:b9:c1:0c:bd:3d:1d:18:e7:e3:5a:e5:
74:e8:fd:45:42:ad:ab:28:b7:ab:e8:b7:db:f7:c2:07:c1:53:
23:df:73:43:9c:d3:5c:d2:26:31:0b:34:bb:0d:ae:07:bb:07:
ce:a3:23:4a:9b:79:ac:b5:e2:55:2a:2a:9f:3d:77:23:3a:f0:
20:52:2b:03:3a:f9:96:a7:0f:09:b1:7b:83:4f:d4:c1:63:25:
18:10:14:4d:97:ab:3d:e8:1f:10:a2:fa:85:84:1a:fe:91:88:
32:5d:23:e1:d1:87:ad:ed:0c:13:9b:c8:3e:62:7f:00:01:a2:
e3:a0:05:75:fb:1a:6a:4a:7e:6b:c3:52:87:26:18:e0:dc:ba:
1f:5b:80:9d:b8:ed:40:a3:90:8a:4e:68:03:54:fd:61:64:6d:
98:c0:5a:43:9d:aa:38:8c:fa:e2:e0:27:a4:d0:ba:3a:ff:42:
fe:29:d8:f4:3c:f7:ef:8d:37:a5:9d:54:9b:ab:a1:b9:f1:de:
8c:d9:94:8a:b4:89:44:97:ec:ef:6f:e1:8e:86:6e:a6:a6:4b:
04:8f:21:41:9a:9a:f4:5b:50:04:38:7d:28:35:a9:93:a0:50:
25:f9:89:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:56 2023 by rpki-client on console-fra.rpki-client.org