Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/9xH5vlvWBdzlU4l6Z3IRk3rryFQ.roa
File: 9xH5vlvWBdzlU4l6Z3IRk3rryFQ.roa (raw, json)
Hash identifier: WtDYhlyJoRyvSYRHG9jUhP9NqTy00jd9S9jL2wVMDGM=
Subject key identifier: F7:11:F9:BE:5B:D6:05:DC:E5:53:89:7A:67:72:11:93:7A:EB:C8:54
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 0184802476BBF8C0F459C4ADD4CD366F35A7
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/9xH5vlvWBdzlU4l6Z3IRk3rryFQ.roa
Signing time: Wed 16 Nov 2022 11:13:04 +0000
ROA not before: Wed 16 Nov 2022 11:13:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212238
IP address blocks: 104.143.254.0/23 maxlen: 23
64.137.74.0/24 maxlen: 24
64.137.73.0/24 maxlen: 24
64.137.78.0/24 maxlen: 24
64.137.77.0/24 maxlen: 24
64.137.80.0/22 maxlen: 22
64.137.89.0/24 maxlen: 24
64.137.96.0/22 maxlen: 22
64.137.94.0/23 maxlen: 23
64.137.92.0/23 maxlen: 23
64.137.100.0/23 maxlen: 23
216.173.78.0/23 maxlen: 23
104.249.30.0/23 maxlen: 23
104.249.29.0/24 maxlen: 24
216.173.80.0/23 maxlen: 23
104.249.36.0/24 maxlen: 24
216.173.88.0/23 maxlen: 23
45.43.176.0/20 maxlen: 20
104.239.13.0/24 maxlen: 24
216.173.111.0/24 maxlen: 24
104.249.55.0/24 maxlen: 24
104.249.60.0/23 maxlen: 23
104.239.96.0/23 maxlen: 23
104.239.92.0/23 maxlen: 23
104.239.84.0/23 maxlen: 23
64.137.14.0/23 maxlen: 23
64.137.18.0/23 maxlen: 23
104.233.20.0/24 maxlen: 24
104.143.232.0/21 maxlen: 21
64.137.42.0/23 maxlen: 23
104.143.240.0/22 maxlen: 22
64.137.48.0/23 maxlen: 23
104.143.235.0/24 maxlen: 24
64.137.58.0/23 maxlen: 23
104.143.248.0/21 maxlen: 24
64.137.60.0/22 maxlen: 22
104.238.4.0/23 maxlen: 23
104.238.0.0/22 maxlen: 22
104.233.0.0/21 maxlen: 21
104.238.14.0/24 maxlen: 24
138.128.151.0/24 maxlen: 24
104.238.20.0/24 maxlen: 24
104.238.19.0/24 maxlen: 24
64.137.10.0/23 maxlen: 23
138.128.153.0/24 maxlen: 24
138.128.159.0/24 maxlen: 24
64.137.8.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:80:24:76:bb:f8:c0:f4:59:c4:ad:d4:cd:36:6f:35:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Nov 16 11:13:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f711f9be5bd605dce553897a677211937aebc854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:71:ce:dd:ac:ae:ed:89:e4:4c:0b:12:59:fd:
65:73:b8:40:69:0a:87:38:29:c6:97:48:94:d9:f6:
09:f0:38:33:14:90:43:8b:e6:25:74:4d:03:8e:69:
16:b9:f2:1f:30:d4:64:76:fd:79:93:a4:ee:70:9c:
5d:ee:5d:ba:2b:03:a8:e4:10:23:79:7e:49:0f:b6:
5c:b0:70:0c:47:52:4a:54:dd:a9:be:7e:e5:d8:a7:
8d:a5:0a:14:7e:54:3f:a2:d9:0f:0a:82:c3:e8:71:
75:dd:bf:38:49:4e:69:f4:55:44:62:f4:23:53:6c:
8d:bc:3f:bf:ac:9d:34:2d:3c:c5:fd:6a:f1:69:66:
de:f8:fc:a7:31:91:a6:48:3f:c9:32:86:59:0f:38:
dd:68:b9:31:20:26:ae:27:f5:be:de:76:74:87:fb:
bb:6f:d3:7e:39:c7:67:d7:c6:48:9a:42:be:2c:c7:
82:d5:14:5f:9b:cb:2e:af:f8:b2:f2:00:75:22:2e:
43:3e:95:08:6a:3d:e6:21:7b:8f:ad:20:70:63:a7:
cb:d4:d5:5a:08:52:0f:d5:df:bf:c2:c6:ee:a7:31:
13:89:57:8c:0b:1d:fa:f5:58:7a:5c:21:c7:c7:4c:
7b:71:54:81:0f:7c:8f:06:90:48:91:ec:39:e5:d0:
2b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:11:F9:BE:5B:D6:05:DC:E5:53:89:7A:67:72:11:93:7A:EB:C8:54
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/9xH5vlvWBdzlU4l6Z3IRk3rryFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.176.0/20
64.137.8.0/24
64.137.10.0/23
64.137.14.0/23
64.137.18.0/23
64.137.42.0/23
64.137.48.0/23
64.137.58.0-64.137.63.255
64.137.73.0-64.137.74.255
64.137.77.0-64.137.78.255
64.137.80.0/22
64.137.89.0/24
64.137.92.0-64.137.101.255
104.143.232.0-104.143.243.255
104.143.248.0/21
104.233.0.0/21
104.233.20.0/24
104.238.0.0-104.238.5.255
104.238.14.0/24
104.238.19.0-104.238.20.255
104.239.13.0/24
104.239.84.0/23
104.239.92.0/23
104.239.96.0/23
104.249.29.0-104.249.31.255
104.249.36.0/24
104.249.55.0/24
104.249.60.0/23
138.128.151.0/24
138.128.153.0/24
138.128.159.0/24
216.173.78.0-216.173.81.255
216.173.88.0/23
216.173.111.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:ad:3d:c8:9e:24:d6:68:0a:b2:a0:bf:d8:94:6d:63:fa:cb:
e3:10:2b:84:bc:ba:eb:9c:b2:8e:4d:73:90:98:90:60:8b:63:
95:15:4b:36:49:13:3d:f6:70:8d:dc:d8:98:ea:46:ad:d2:65:
10:f6:df:ff:25:95:48:95:5c:a9:82:61:33:85:77:dc:75:48:
d9:08:97:27:a8:1c:80:4f:50:6a:80:b9:68:76:1f:4f:5a:97:
cc:1e:16:6b:7b:cb:cd:fc:e2:39:e9:53:13:d5:a1:75:86:e1:
35:25:47:7b:6a:33:a5:d6:69:7d:f3:13:8b:40:c4:ed:f2:33:
14:91:9d:20:0f:7f:76:46:f7:c9:5a:03:47:b5:69:e4:ce:e6:
18:00:6b:65:54:e6:11:21:06:1e:61:91:a5:59:85:8a:eb:a6:
75:dd:16:17:fc:21:55:d1:50:70:78:0b:5b:7d:16:70:d2:72:
f2:ce:12:08:b6:ab:ef:87:c7:86:92:1e:9b:f8:e9:77:73:f8:
9d:09:7d:70:74:49:3e:0e:a8:61:76:34:9a:b5:14:01:ed:02:
83:2b:d4:42:68:eb:ba:2a:91:96:50:fe:7e:a6:b9:b0:83:f1:
bf:b1:cb:05:25:8e:70:ea:0f:59:22:67:75:f5:d0:6c:78:06:
b6:ed:03:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:56 2023 by rpki-client on console-fra.rpki-client.org