Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/U2pdxb0b9HMyIB2gsD5jrFU0k_U.roa
File: U2pdxb0b9HMyIB2gsD5jrFU0k_U.roa (raw, json)
Hash identifier: xBfucWag0qhAdvZDtfL2IZkGeZE0eBvN74sknOHAF84=
Subject key identifier: 53:6A:5D:C5:BD:1B:F4:73:32:20:1D:A0:B0:3E:63:AC:55:34:93:F5
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 0183FA15BDE6E2FA4F2FFDB80266795CFADD
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/U2pdxb0b9HMyIB2gsD5jrFU0k_U.roa
Signing time: Fri 21 Oct 2022 10:27:52 +0000
ROA not before: Fri 21 Oct 2022 10:27:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 104.249.30.0/23 maxlen: 23
104.239.10.0/23 maxlen: 23
104.239.13.0/24 maxlen: 24
104.239.30.0/23 maxlen: 23
104.249.55.0/24 maxlen: 24
104.239.28.0/24 maxlen: 24
104.249.60.0/23 maxlen: 23
216.173.120.0/24 maxlen: 24
104.238.4.0/24 maxlen: 24
104.238.8.0/24 maxlen: 24
104.238.10.0/24 maxlen: 24
104.238.9.0/24 maxlen: 24
104.238.5.0/24 maxlen: 24
104.238.7.0/24 maxlen: 24
104.238.14.0/24 maxlen: 24
104.238.19.0/24 maxlen: 24
104.238.20.0/24 maxlen: 24
216.173.76.0/24 maxlen: 24
216.173.82.0/24 maxlen: 24
216.173.103.0/24 maxlen: 24
216.173.102.0/24 maxlen: 24
216.173.105.0/24 maxlen: 24
216.173.104.0/24 maxlen: 24
216.173.106.0/24 maxlen: 24
216.173.108.0/24 maxlen: 24
216.173.107.0/24 maxlen: 24
216.173.110.0/24 maxlen: 24
216.173.109.0/24 maxlen: 24
104.239.94.0/24 maxlen: 24
104.239.98.0/24 maxlen: 24
104.239.92.0/23 maxlen: 23
104.239.96.0/23 maxlen: 23
104.239.101.0/24 maxlen: 24
104.239.104.0/24 maxlen: 24
104.239.105.0/24 maxlen: 24
104.239.107.0/24 maxlen: 24
104.239.106.0/24 maxlen: 24
104.239.108.0/24 maxlen: 24
104.239.111.0/24 maxlen: 24
104.239.124.0/23 maxlen: 23
104.239.126.0/24 maxlen: 24
104.239.44.0/24 maxlen: 24
104.239.73.0/24 maxlen: 24
104.239.75.0/24 maxlen: 24
104.239.78.0/24 maxlen: 24
104.239.76.0/23 maxlen: 23
104.239.82.0/24 maxlen: 24
104.239.80.0/23 maxlen: 23
104.239.84.0/23 maxlen: 23
104.239.86.0/24 maxlen: 24
104.239.88.0/24 maxlen: 24
104.239.90.0/23 maxlen: 23
104.233.20.0/24 maxlen: 24
104.233.24.0/23 maxlen: 23
104.233.26.0/24 maxlen: 24
138.128.157.0/24 maxlen: 24
138.128.159.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:fa:15:bd:e6:e2:fa:4f:2f:fd:b8:02:66:79:5c:fa:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Oct 21 10:27:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=536a5dc5bd1bf47332201da0b03e63ac553493f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:94:8f:9d:35:6e:c1:73:64:db:8e:b8:3e:6a:
d7:82:6a:f2:a9:54:da:0c:00:d9:31:f5:fb:d9:77:
36:72:ef:3e:7d:2e:6d:ed:40:ea:16:33:76:bd:7d:
3d:97:bf:6c:70:ce:2e:56:53:ea:3a:51:f9:13:2b:
2f:2a:78:ce:bc:f9:78:f9:d9:01:64:4a:1b:87:a9:
bb:75:ad:67:34:31:8e:da:40:59:cc:ab:3d:87:38:
52:2c:b6:77:be:a0:c2:33:14:b7:b6:a0:5b:90:49:
f4:2c:d1:23:19:a7:a2:54:20:9f:71:47:4d:91:1e:
0b:6a:85:b3:95:90:30:ce:5f:d7:66:35:bc:21:d7:
ac:46:c4:ad:fb:48:b6:fb:9e:84:e0:57:61:c8:12:
3f:56:1d:cc:90:b4:a0:f9:e7:11:d0:81:27:d0:de:
6b:ef:4b:79:1f:8b:99:87:b8:ef:1f:26:07:47:4c:
0c:2a:07:70:b0:f7:ce:45:44:99:54:12:f4:15:7a:
78:af:7f:5d:d3:e2:c1:1c:7d:04:d0:20:6a:1d:40:
bd:b6:51:59:9c:bc:bb:e4:be:ac:54:b3:1e:df:cc:
eb:14:dc:63:80:ec:17:8e:88:38:ad:05:11:74:75:
0f:da:1b:e6:09:68:4f:96:36:89:7a:bc:33:98:df:
8a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:6A:5D:C5:BD:1B:F4:73:32:20:1D:A0:B0:3E:63:AC:55:34:93:F5
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/U2pdxb0b9HMyIB2gsD5jrFU0k_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.233.20.0/24
104.233.24.0-104.233.26.255
104.238.4.0/23
104.238.7.0-104.238.10.255
104.238.14.0/24
104.238.19.0-104.238.20.255
104.239.10.0/23
104.239.13.0/24
104.239.28.0/24
104.239.30.0/23
104.239.44.0/24
104.239.73.0/24
104.239.75.0-104.239.78.255
104.239.80.0-104.239.82.255
104.239.84.0-104.239.86.255
104.239.88.0/24
104.239.90.0-104.239.94.255
104.239.96.0-104.239.98.255
104.239.101.0/24
104.239.104.0-104.239.108.255
104.239.111.0/24
104.239.124.0-104.239.126.255
104.249.30.0/23
104.249.55.0/24
104.249.60.0/23
138.128.157.0/24
138.128.159.0/24
216.173.76.0/24
216.173.82.0/24
216.173.102.0-216.173.110.255
216.173.120.0/24
Signature Algorithm: sha256WithRSAEncryption
27:0b:96:23:30:95:ec:96:a1:6b:2c:45:de:2c:76:52:1c:a5:
d9:ad:9a:01:19:58:9d:b7:08:7a:04:15:06:de:70:14:de:6c:
08:60:0f:54:23:f4:2d:de:5e:df:ec:ce:08:35:ca:ad:7c:19:
75:ef:65:2e:56:4c:47:04:28:06:d9:02:b6:f1:44:25:8a:7b:
e5:69:d8:ab:4c:00:e8:1a:8d:07:57:09:c5:4c:04:9c:95:16:
c3:db:93:0c:ec:c5:91:d4:ce:2c:28:f7:b5:3b:44:69:c2:06:
18:ba:bb:7b:fb:b9:46:63:54:50:b4:15:f8:21:fa:a6:15:7e:
ce:9f:02:64:aa:29:ad:43:88:b2:92:55:b6:e1:f2:b1:88:7f:
33:82:2a:28:74:2d:ff:38:6e:1c:94:c3:5d:b3:59:cd:61:71:
f2:ba:4e:31:cc:95:02:00:91:46:a7:3b:b2:09:d5:ab:d5:ee:
58:ad:f6:36:b4:0c:e8:b6:c2:47:ec:a3:91:0f:83:dd:1f:7c:
52:29:c9:a1:d7:64:fd:87:f4:ab:6a:3a:a1:29:db:51:67:59:
28:81:c0:4e:46:08:c9:c3:ab:5a:2d:3c:7b:74:9c:c6:d7:0d:
80:f1:df:6e:83:d6:a5:cc:7d:46:85:b9:53:c2:e9:52:89:4d:
41:cd:8e:82
-----BEGIN CERTIFICATE-----
MIIGEzCCBPugAwIBAgISAYP6Fb3m4vpPL/24AmZ5XPrdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNTgxZTY3M2Q4MGY3NDc0OTM2YjIxMzM3ZWFmY2MxYmRj
Mzg1ZTkwHhcNMjIxMDIxMTAyNzUyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MzZhNWRjNWJkMWJmNDczMzIyMDFkYTBiMDNlNjNhYzU1MzQ5M2Y1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspSPnTVuwXNk2464PmrXgmryqVTa
DADZMfX72Xc2cu8+fS5t7UDqFjN2vX09l79scM4uVlPqOlH5EysvKnjOvPl4+dkB
ZEobh6m7da1nNDGO2kBZzKs9hzhSLLZ3vqDCMxS3tqBbkEn0LNEjGaeiVCCfcUdN
kR4LaoWzlZAwzl/XZjW8IdesRsSt+0i2+56E4FdhyBI/Vh3MkLSg+ecR0IEn0N5r
70t5H4uZh7jvHyYHR0wMKgdwsPfORUSZVBL0FXp4r39d0+LBHH0E0CBqHUC9tlFZ
nLy75L6sVLMe38zrFNxjgOwXjog4rQURdHUP2hvmCWhPljaJerwzmN+K4wIDAQAB
o4IDHzCCAxswHQYDVR0OBBYEFFNqXcW9G/RzMiAdoLA+Y6xVNJP1MB8GA1UdIwQY
MBaAFGBYHmc9gPdHSTayEzfq/MG9w4XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYt
ZmIwNzk1NWYzYWFhLzEvVTJwZHhiMGI5SE15SUIyZ3NENWpyRlUwa19VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYtZmIwNzk1NWYzYWFh
LzEvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBMwYIKwYBBQUHAQcBAf8EggEiMIIBHjCCARoEAgABMIIB
EgMEAGjpFDAMAwQDaOkYAwQAaOkaAwQBaO4EMAwDBABo7gcDBABo7goDBABo7g4w
DAMEAGjuEwMEAGjuFAMEAWjvCgMEAGjvDQMEAGjvHAMEAWjvHgMEAGjvLAMEAGjv
STAMAwQAaO9LAwQAaO9OMAwDBARo71ADBABo71IwDAMEAmjvVAMEAGjvVgMEAGjv
WDAMAwQBaO9aAwQAaO9eMAwDBAVo72ADBABo72IDBABo72UwDAMEA2jvaAMEAGjv
bAMEAGjvbzAMAwQCaO98AwQAaO9+AwQBaPkeAwQAaPk3AwQBaPk8AwQAioCdAwQA
ioCfAwQA2K1MAwQA2K1SMAwDBAHYrWYDBADYrW4DBADYrXgwDQYJKoZIhvcNAQEL
BQADggEBACcLliMwleyWoWssRd4sdlIcpdmtmgEZWJ23CHoEFQbecBTebAhgD1Qj
9C3eXt/szgg1yq18GXXvZS5WTEcEKAbZArbxRCWKe+Vp2KtMAOgajQdXCcVMBJyV
FsPbkwzsxZHUziwo97U7RGnCBhi6u3v7uUZjVFC0Ffgh+qYVfs6fAmSqKa1DiLKS
Vbbh8rGIfzOCKih0Lf84bhyUw12zWc1hcfK6TjHMlQIAkUanO7IJ1avV7lit9ja0
DOi2wkfso5EPg90ffFIpyaHXZP2H9KtqOqEp21FnWSiBwE5GCMnDq1otPHt0nMbX
DYDx326D1qXMfUaFuVPC6VKJTUHNjoI=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:38 2023 by rpki-client on console-ams.rpki-client.org