Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/bTpumsQLvYZDgadZ6430kzLkK8g.roa
File: bTpumsQLvYZDgadZ6430kzLkK8g.roa (raw, json)
Hash identifier: jDz7Iip6dk3knegqjmOv5PffqTrJLsSutPskMtvn1Po=
Subject key identifier: 6D:3A:6E:9A:C4:0B:BD:86:43:81:A7:59:EB:8D:F4:93:32:E4:2B:C8
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 01842F01238AD08B2EFF93690E22460B6AEF
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/bTpumsQLvYZDgadZ6430kzLkK8g.roa
Signing time: Mon 31 Oct 2022 17:05:14 +0000
ROA not before: Mon 31 Oct 2022 17:05:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212238
IP address blocks: 104.143.254.0/23 maxlen: 23
64.137.80.0/22 maxlen: 22
64.137.96.0/22 maxlen: 22
64.137.94.0/23 maxlen: 23
64.137.92.0/23 maxlen: 23
64.137.100.0/23 maxlen: 23
216.173.78.0/23 maxlen: 23
104.249.29.0/24 maxlen: 24
104.249.36.0/24 maxlen: 24
216.173.88.0/23 maxlen: 23
216.173.111.0/24 maxlen: 24
104.249.55.0/24 maxlen: 24
104.239.96.0/23 maxlen: 23
104.239.92.0/23 maxlen: 23
104.239.84.0/23 maxlen: 23
64.137.14.0/23 maxlen: 23
64.137.18.0/23 maxlen: 23
104.143.232.0/21 maxlen: 21
64.137.42.0/23 maxlen: 23
104.143.240.0/22 maxlen: 22
64.137.48.0/23 maxlen: 23
104.143.235.0/24 maxlen: 24
64.137.58.0/23 maxlen: 23
104.143.248.0/21 maxlen: 21
64.137.60.0/22 maxlen: 22
104.238.4.0/23 maxlen: 23
104.238.0.0/22 maxlen: 22
104.233.0.0/21 maxlen: 21
104.238.14.0/24 maxlen: 24
138.128.151.0/24 maxlen: 24
104.238.20.0/24 maxlen: 24
104.238.19.0/24 maxlen: 24
64.137.10.0/23 maxlen: 23
138.128.153.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:2f:01:23:8a:d0:8b:2e:ff:93:69:0e:22:46:0b:6a:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Oct 31 17:05:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6d3a6e9ac40bbd864381a759eb8df49332e42bc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:65:20:3a:eb:c5:3b:0c:77:7a:f5:ad:61:26:
66:cc:30:9d:9a:e2:32:bd:cc:05:b1:0e:f4:59:0b:
a4:a8:41:98:a9:17:00:85:6f:fc:2b:55:de:46:1d:
a9:63:5b:ca:d7:21:7e:2d:54:fa:c1:66:88:1b:19:
f3:76:73:f4:b0:38:75:f1:9b:f7:5a:be:7e:10:56:
18:a6:2a:b9:65:b3:71:8d:8d:4f:98:d7:13:3f:a4:
b4:95:fa:f2:24:6c:48:62:fe:73:d1:99:30:d6:d9:
aa:31:80:a2:79:eb:4e:36:24:53:23:73:44:7f:a2:
fd:5c:f5:bc:23:b8:ad:64:1c:12:91:65:2f:29:e5:
cd:13:e9:92:46:c6:d2:03:b1:46:73:1f:d9:e8:83:
14:e9:45:d6:35:95:ab:bf:9d:c5:6b:0c:5d:e7:c9:
bc:a8:74:cb:fb:91:d5:9a:c6:66:b1:5e:3f:dd:0e:
4b:38:a6:f1:58:53:e3:4e:0c:21:1b:5c:a7:bf:1a:
f9:06:eb:91:7e:7c:38:12:cc:63:0e:36:e2:e8:40:
b3:56:29:29:6f:b9:70:87:c6:02:6c:5c:54:90:fb:
cd:ff:af:08:cf:f9:0f:c6:c2:13:1d:18:af:6e:4b:
a7:1b:fe:d0:77:a3:f8:7c:e5:fc:c5:9b:e1:5f:67:
b9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:3A:6E:9A:C4:0B:BD:86:43:81:A7:59:EB:8D:F4:93:32:E4:2B:C8
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/bTpumsQLvYZDgadZ6430kzLkK8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.137.10.0/23
64.137.14.0/23
64.137.18.0/23
64.137.42.0/23
64.137.48.0/23
64.137.58.0-64.137.63.255
64.137.80.0/22
64.137.92.0-64.137.101.255
104.143.232.0-104.143.243.255
104.143.248.0/21
104.233.0.0/21
104.238.0.0-104.238.5.255
104.238.14.0/24
104.238.19.0-104.238.20.255
104.239.84.0/23
104.239.92.0/23
104.239.96.0/23
104.249.29.0/24
104.249.36.0/24
104.249.55.0/24
138.128.151.0/24
138.128.153.0/24
216.173.78.0/23
216.173.88.0/23
216.173.111.0/24
Signature Algorithm: sha256WithRSAEncryption
64:77:21:42:cf:70:f7:51:a1:b2:16:c9:80:55:e4:31:01:eb:
fd:92:01:f4:76:65:8d:4d:6e:d4:e2:11:a3:08:10:c0:03:d0:
50:27:b4:d7:25:2e:f9:88:2f:c0:ac:ed:57:98:d0:b2:6f:1b:
0c:e7:82:d2:56:c6:28:d3:f2:75:cb:f4:02:cb:4d:64:0d:59:
28:e7:83:c8:5d:f6:0a:08:ac:5d:3b:aa:8d:71:c1:a1:b7:5e:
d4:7e:24:f0:55:f2:31:2c:91:4a:4f:ab:10:f0:c9:e2:da:d0:
32:d1:9f:62:24:a4:86:b5:a7:ca:48:43:79:ee:b8:22:e7:5c:
65:d2:46:53:01:26:2c:f8:82:9d:3a:a6:eb:b2:73:6f:09:0f:
8c:72:e1:32:9a:f2:82:3c:77:0f:75:b4:52:d0:a8:8a:6d:75:
bf:fb:0f:df:c8:52:44:72:fd:90:af:74:b1:ad:64:00:e1:db:
60:cd:01:5b:be:72:a7:e4:7a:7a:f5:a4:b6:03:09:f1:2a:8e:
6f:6c:e2:81:e9:a8:e8:6f:16:cc:de:1f:fa:8a:a0:e0:fd:ed:
72:7a:de:7c:96:94:1a:18:95:da:07:37:c1:4e:6f:0b:f3:53:
4f:3b:4b:62:7b:d9:38:80:3a:50:d3:93:4f:72:0d:e8:70:8e:
48:ca:91:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:56 2023 by rpki-client on console-fra.rpki-client.org