Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/QERGv8IB6VhbNu1R07NDyeBpxL0.roa
File: QERGv8IB6VhbNu1R07NDyeBpxL0.roa (raw, json)
Hash identifier: nJ8jDzMWGj9Y9MstysKrAh+qmOZsxtSQQBnlAypszes=
Subject key identifier: 40:44:46:BF:C2:01:E9:58:5B:36:ED:51:D3:B3:43:C9:E0:69:C4:BD
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 01842F0122D68AB941A4A5D4B2A6718AB442
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/QERGv8IB6VhbNu1R07NDyeBpxL0.roa
Signing time: Mon 31 Oct 2022 17:05:14 +0000
ROA not before: Mon 31 Oct 2022 17:05:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 104.239.10.0/23 maxlen: 23
104.239.13.0/24 maxlen: 24
104.239.30.0/23 maxlen: 23
104.249.55.0/24 maxlen: 24
104.239.28.0/24 maxlen: 24
104.249.60.0/23 maxlen: 23
216.173.120.0/24 maxlen: 24
104.238.4.0/24 maxlen: 24
104.238.8.0/24 maxlen: 24
104.238.10.0/24 maxlen: 24
104.238.9.0/24 maxlen: 24
104.238.5.0/24 maxlen: 24
104.238.7.0/24 maxlen: 24
216.173.76.0/24 maxlen: 24
216.173.82.0/24 maxlen: 24
216.173.103.0/24 maxlen: 24
216.173.102.0/24 maxlen: 24
216.173.105.0/24 maxlen: 24
216.173.104.0/24 maxlen: 24
216.173.106.0/24 maxlen: 24
216.173.108.0/24 maxlen: 24
216.173.107.0/24 maxlen: 24
216.173.110.0/24 maxlen: 24
216.173.109.0/24 maxlen: 24
104.239.94.0/24 maxlen: 24
104.239.98.0/24 maxlen: 24
104.239.101.0/24 maxlen: 24
104.239.104.0/24 maxlen: 24
104.239.105.0/24 maxlen: 24
104.239.107.0/24 maxlen: 24
104.239.106.0/24 maxlen: 24
104.239.108.0/24 maxlen: 24
104.239.111.0/24 maxlen: 24
104.239.124.0/23 maxlen: 23
104.239.126.0/24 maxlen: 24
104.239.44.0/24 maxlen: 24
104.239.73.0/24 maxlen: 24
104.239.75.0/24 maxlen: 24
104.239.78.0/24 maxlen: 24
104.239.76.0/23 maxlen: 23
104.239.82.0/24 maxlen: 24
104.239.80.0/23 maxlen: 23
104.239.86.0/24 maxlen: 24
104.239.88.0/24 maxlen: 24
104.239.90.0/23 maxlen: 23
104.233.20.0/24 maxlen: 24
104.233.24.0/23 maxlen: 23
104.233.26.0/24 maxlen: 24
138.128.157.0/24 maxlen: 24
138.128.159.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:2f:01:22:d6:8a:b9:41:a4:a5:d4:b2:a6:71:8a:b4:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Oct 31 17:05:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=404446bfc201e9585b36ed51d3b343c9e069c4bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:87:d0:e6:81:12:db:6c:fe:88:b7:3a:9a:44:
76:2d:c8:b0:4e:e7:56:53:79:a9:f6:d5:b5:5d:54:
df:35:56:21:68:3b:c9:e5:3a:f4:73:7e:d9:ae:8b:
eb:3c:58:86:a3:0c:30:16:50:31:e7:a6:77:d6:8a:
17:9e:cb:76:57:7e:e8:eb:59:83:d5:e7:12:a7:59:
c7:09:3a:5e:ce:f5:61:df:75:13:7d:00:b9:51:4b:
78:9b:b6:10:cf:da:78:5f:91:1c:0a:97:4b:b0:79:
11:d4:fb:d5:6d:e4:c6:bc:dc:6d:c3:34:46:eb:a5:
20:25:8c:e1:5f:c6:99:b9:5c:3d:dd:b5:5c:f4:83:
23:18:9c:4e:9b:c9:b8:ca:c3:e7:d7:5e:06:0a:6e:
5c:82:cf:f9:b8:32:a4:34:39:c0:40:8b:21:df:f3:
3f:03:fd:19:f5:75:23:4b:ac:ab:45:46:8c:fb:8a:
19:91:42:be:53:ab:9c:27:d3:f7:b1:d8:48:06:7a:
86:1d:cb:af:46:73:e8:ef:d5:60:bc:dd:b3:88:dc:
10:cf:50:07:1f:9c:f7:d4:e0:bb:15:28:25:9f:ee:
35:52:b7:01:81:cb:53:20:d0:3f:52:dd:59:5e:63:
d8:fa:ed:76:46:45:16:4f:ed:b4:ca:bc:8e:9c:1e:
3e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:44:46:BF:C2:01:E9:58:5B:36:ED:51:D3:B3:43:C9:E0:69:C4:BD
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/QERGv8IB6VhbNu1R07NDyeBpxL0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.233.20.0/24
104.233.24.0-104.233.26.255
104.238.4.0/23
104.238.7.0-104.238.10.255
104.239.10.0/23
104.239.13.0/24
104.239.28.0/24
104.239.30.0/23
104.239.44.0/24
104.239.73.0/24
104.239.75.0-104.239.78.255
104.239.80.0-104.239.82.255
104.239.86.0/24
104.239.88.0/24
104.239.90.0/23
104.239.94.0/24
104.239.98.0/24
104.239.101.0/24
104.239.104.0-104.239.108.255
104.239.111.0/24
104.239.124.0-104.239.126.255
104.249.55.0/24
104.249.60.0/23
138.128.157.0/24
138.128.159.0/24
216.173.76.0/24
216.173.82.0/24
216.173.102.0-216.173.110.255
216.173.120.0/24
Signature Algorithm: sha256WithRSAEncryption
01:76:8b:c1:24:a0:f9:dc:d4:e9:ed:da:89:db:35:4e:7a:d3:
af:f0:6e:a2:99:23:42:ce:06:a7:bf:7b:64:dd:ea:e6:0a:27:
4a:bc:ae:79:40:66:c0:c2:53:fa:49:2d:ed:ae:9f:cd:2f:3d:
22:be:de:43:ea:af:9a:3d:06:53:8c:0f:d8:d7:61:3e:76:b9:
ab:64:8c:71:69:5e:eb:41:ea:00:ae:bb:b6:d9:19:d7:5c:01:
57:4b:cd:22:8a:11:e2:8a:a7:a3:db:5b:16:cf:49:00:27:a1:
f8:16:95:91:e5:64:1c:56:c6:85:09:c9:d1:d9:a8:fd:e4:b3:
61:91:8a:4a:63:98:ca:bd:aa:e2:02:fe:ab:cc:fd:a0:d8:24:
a3:b2:26:11:56:89:d9:3a:c5:10:46:5e:fd:38:2c:6c:c8:37:
50:1c:5a:0d:70:6c:3f:2e:7c:95:20:ed:f3:00:0a:3e:3d:ec:
37:3b:fe:89:43:61:ae:14:d1:d9:fd:94:14:40:b2:a3:45:8b:
b1:35:30:df:1e:a6:20:c4:47:fa:fc:ff:d4:77:7a:dc:d5:c3:
70:37:42:63:7a:b0:0c:25:79:0f:52:ec:7e:e4:24:5f:27:03:
51:25:e1:9e:d7:11:1c:14:3c:d0:2b:c9:cb:c8:68:3f:7d:8e:
4a:62:f1:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:56 2023 by rpki-client on console-fra.rpki-client.org