Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/agiPGtMb8QpqMmx6ABdLWMUxW7Y.roa
File: agiPGtMb8QpqMmx6ABdLWMUxW7Y.roa (raw, json)
Hash identifier: 9VtKik6Fb1kcZwZlMLkqGK/BQkIM3nh3A2pVbgdcx6Y=
Subject key identifier: 6A:08:8F:1A:D3:1B:F1:0A:6A:32:6C:7A:00:17:4B:58:C5:31:5B:B6
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 01841DC5C875ECEFC62FDE8F2531D9CAB582
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/agiPGtMb8QpqMmx6ABdLWMUxW7Y.roa
Signing time: Fri 28 Oct 2022 08:46:51 +0000
ROA not before: Fri 28 Oct 2022 08:46:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 104.239.10.0/23 maxlen: 23
104.239.13.0/24 maxlen: 24
104.239.30.0/23 maxlen: 23
104.249.55.0/24 maxlen: 24
104.239.28.0/24 maxlen: 24
104.249.60.0/23 maxlen: 23
216.173.120.0/24 maxlen: 24
104.238.4.0/24 maxlen: 24
104.238.8.0/24 maxlen: 24
104.238.10.0/24 maxlen: 24
104.238.9.0/24 maxlen: 24
104.238.5.0/24 maxlen: 24
104.238.7.0/24 maxlen: 24
104.238.14.0/24 maxlen: 24
104.238.19.0/24 maxlen: 24
104.238.20.0/24 maxlen: 24
216.173.76.0/24 maxlen: 24
216.173.82.0/24 maxlen: 24
216.173.103.0/24 maxlen: 24
216.173.102.0/24 maxlen: 24
216.173.105.0/24 maxlen: 24
216.173.104.0/24 maxlen: 24
216.173.106.0/24 maxlen: 24
216.173.108.0/24 maxlen: 24
216.173.107.0/24 maxlen: 24
216.173.110.0/24 maxlen: 24
216.173.109.0/24 maxlen: 24
104.239.94.0/24 maxlen: 24
104.239.98.0/24 maxlen: 24
104.239.92.0/23 maxlen: 23
104.239.96.0/23 maxlen: 23
104.239.101.0/24 maxlen: 24
104.239.104.0/24 maxlen: 24
104.239.105.0/24 maxlen: 24
104.239.107.0/24 maxlen: 24
104.239.106.0/24 maxlen: 24
104.239.108.0/24 maxlen: 24
104.239.111.0/24 maxlen: 24
104.239.124.0/23 maxlen: 23
104.239.126.0/24 maxlen: 24
104.239.44.0/24 maxlen: 24
104.239.73.0/24 maxlen: 24
104.239.75.0/24 maxlen: 24
104.239.78.0/24 maxlen: 24
104.239.76.0/23 maxlen: 23
104.239.82.0/24 maxlen: 24
104.239.80.0/23 maxlen: 23
104.239.84.0/23 maxlen: 23
104.239.86.0/24 maxlen: 24
104.239.88.0/24 maxlen: 24
104.239.90.0/23 maxlen: 23
104.233.20.0/24 maxlen: 24
104.233.24.0/23 maxlen: 23
104.233.26.0/24 maxlen: 24
138.128.157.0/24 maxlen: 24
138.128.159.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1d:c5:c8:75:ec:ef:c6:2f:de:8f:25:31:d9:ca:b5:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Oct 28 08:46:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6a088f1ad31bf10a6a326c7a00174b58c5315bb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:49:b2:08:98:e7:43:96:8b:74:28:c3:31:8d:
f8:9a:11:cf:39:58:4e:78:30:44:8d:47:c4:45:c3:
ba:a3:94:01:c5:e4:18:05:04:24:f7:9a:af:21:b0:
c8:45:e0:93:00:3f:aa:45:cc:c1:fb:61:a1:ff:76:
10:5f:41:58:e3:24:41:8b:1a:8f:53:09:ff:6f:9b:
66:b4:88:45:c4:9e:32:0e:5a:5e:75:61:41:46:88:
3f:6f:c0:35:3f:12:bc:cb:90:f7:ea:d3:a7:80:c9:
8d:eb:01:28:17:b6:b0:1d:86:2a:29:2a:fc:f5:8d:
ff:c7:6c:1e:b5:09:b3:d1:e1:e6:77:dd:a4:d8:46:
43:40:04:72:f4:e3:45:fc:de:e4:60:2b:ac:8d:09:
bb:74:cb:ae:35:24:ad:c6:21:89:9c:af:ad:11:23:
df:68:9f:60:a1:0e:51:14:4b:cc:74:f5:bc:03:60:
d9:5a:34:77:a2:b0:96:01:e5:35:b2:e1:b9:0b:00:
a5:97:51:8f:d3:95:fd:28:d2:51:6d:59:59:f1:f4:
d6:d2:87:64:da:3c:21:52:95:6d:4d:d6:e8:87:cc:
8b:18:59:9c:e5:fd:9c:87:2b:2f:ae:2e:df:66:1f:
3d:d8:ea:e7:70:ec:2b:da:80:d7:04:30:87:d7:ff:
97:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:08:8F:1A:D3:1B:F1:0A:6A:32:6C:7A:00:17:4B:58:C5:31:5B:B6
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/agiPGtMb8QpqMmx6ABdLWMUxW7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.233.20.0/24
104.233.24.0-104.233.26.255
104.238.4.0/23
104.238.7.0-104.238.10.255
104.238.14.0/24
104.238.19.0-104.238.20.255
104.239.10.0/23
104.239.13.0/24
104.239.28.0/24
104.239.30.0/23
104.239.44.0/24
104.239.73.0/24
104.239.75.0-104.239.78.255
104.239.80.0-104.239.82.255
104.239.84.0-104.239.86.255
104.239.88.0/24
104.239.90.0-104.239.94.255
104.239.96.0-104.239.98.255
104.239.101.0/24
104.239.104.0-104.239.108.255
104.239.111.0/24
104.239.124.0-104.239.126.255
104.249.55.0/24
104.249.60.0/23
138.128.157.0/24
138.128.159.0/24
216.173.76.0/24
216.173.82.0/24
216.173.102.0-216.173.110.255
216.173.120.0/24
Signature Algorithm: sha256WithRSAEncryption
08:12:a1:04:1e:c8:f8:9f:a7:af:84:5e:ca:89:73:d3:8b:be:
11:2c:50:5f:36:7d:d1:cf:39:d7:21:b5:09:91:df:6a:51:71:
4c:b4:4e:f9:cd:a1:7f:dc:5b:bb:fa:d5:3c:23:36:73:3c:e2:
f2:db:9b:80:a1:f9:e7:69:58:cf:36:31:20:ca:3e:65:f9:f7:
18:7c:f2:8d:53:91:fb:66:57:77:4d:3b:40:e4:e0:ee:6f:7e:
fe:c9:91:c0:00:10:b1:8c:66:88:36:86:7d:3b:a2:3b:00:03:
72:40:61:79:c2:04:71:ee:61:08:00:26:12:40:aa:97:28:5d:
45:2f:ec:4f:11:62:9b:8a:4e:43:04:5f:d7:a2:fb:31:a2:7c:
af:5e:7f:7e:ee:d3:ea:f7:77:e0:63:e8:2e:95:de:0e:c8:4c:
86:fb:92:e9:66:ac:c5:a6:e5:3e:05:89:ba:4a:22:0e:52:b3:
b3:c7:52:eb:c8:05:4f:1f:8e:ce:84:83:14:bb:0c:73:a2:08:
e9:a8:bc:e7:0a:8e:97:e9:ca:06:e3:82:9c:a1:bd:60:34:fd:
b0:6f:d4:2b:6c:1e:5d:fe:66:f7:df:bc:d4:b3:b0:59:af:72:
a5:bc:31:64:b3:8a:30:15:54:37:99:a4:25:ce:5c:d5:40:7b:
50:ed:5c:a1
-----BEGIN CERTIFICATE-----
MIIGDTCCBPWgAwIBAgISAYQdxch17O/GL96PJTHZyrWCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNTgxZTY3M2Q4MGY3NDc0OTM2YjIxMzM3ZWFmY2MxYmRj
Mzg1ZTkwHhcNMjIxMDI4MDg0NjUxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YTA4OGYxYWQzMWJmMTBhNmEzMjZjN2EwMDE3NGI1OGM1MzE1YmI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkmyCJjnQ5aLdCjDMY34mhHPOVhO
eDBEjUfERcO6o5QBxeQYBQQk95qvIbDIReCTAD+qRczB+2Gh/3YQX0FY4yRBixqP
Uwn/b5tmtIhFxJ4yDlpedWFBRog/b8A1PxK8y5D36tOngMmN6wEoF7awHYYqKSr8
9Y3/x2wetQmz0eHmd92k2EZDQARy9ONF/N7kYCusjQm7dMuuNSStxiGJnK+tESPf
aJ9goQ5RFEvMdPW8A2DZWjR3orCWAeU1suG5CwCll1GP05X9KNJRbVlZ8fTW0odk
2jwhUpVtTdboh8yLGFmc5f2chysvri7fZh892OrncOwr2oDXBDCH1/+XEwIDAQAB
o4IDGTCCAxUwHQYDVR0OBBYEFGoIjxrTG/EKajJsegAXS1jFMVu2MB8GA1UdIwQY
MBaAFGBYHmc9gPdHSTayEzfq/MG9w4XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYt
ZmIwNzk1NWYzYWFhLzEvYWdpUEd0TWI4UXBxTW14NkFCZExXTVV4VzdZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYtZmIwNzk1NWYzYWFh
LzEvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBLQYIKwYBBQUHAQcBAf8EggEcMIIBGDCCARQEAgABMIIB
DAMEAGjpFDAMAwQDaOkYAwQAaOkaAwQBaO4EMAwDBABo7gcDBABo7goDBABo7g4w
DAMEAGjuEwMEAGjuFAMEAWjvCgMEAGjvDQMEAGjvHAMEAWjvHgMEAGjvLAMEAGjv
STAMAwQAaO9LAwQAaO9OMAwDBARo71ADBABo71IwDAMEAmjvVAMEAGjvVgMEAGjv
WDAMAwQBaO9aAwQAaO9eMAwDBAVo72ADBABo72IDBABo72UwDAMEA2jvaAMEAGjv
bAMEAGjvbzAMAwQCaO98AwQAaO9+AwQAaPk3AwQBaPk8AwQAioCdAwQAioCfAwQA
2K1MAwQA2K1SMAwDBAHYrWYDBADYrW4DBADYrXgwDQYJKoZIhvcNAQELBQADggEB
AAgSoQQeyPifp6+EXsqJc9OLvhEsUF82fdHPOdchtQmR32pRcUy0TvnNoX/cW7v6
1TwjNnM84vLbm4Ch+edpWM82MSDKPmX59xh88o1TkftmV3dNO0Dk4O5vfv7JkcAA
ELGMZog2hn07ojsAA3JAYXnCBHHuYQgAJhJAqpcoXUUv7E8RYpuKTkMEX9ei+zGi
fK9ef37u0+r3d+Bj6C6V3g7ITIb7kulmrMWm5T4FibpKIg5Ss7PHUuvIBU8fjs6E
gxS7DHOiCOmovOcKjpfpygbjgpyhvWA0/bBv1CtsHl3+ZvffvNSzsFmvcqW8MWSz
ijAVVDeZpCXOXNVAe1DtXKE=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:56 2023 by rpki-client on console-fra.rpki-client.org