Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/brlKHMbBTffrEJTcjvoQCdm5Ubs.roa
File: brlKHMbBTffrEJTcjvoQCdm5Ubs.roa (raw, json)
Hash identifier: 1SVz/bIu2WIs+DPgzND9J8NsKi7FoE9/Ugu0tKBFivY=
Subject key identifier: 6E:B9:4A:1C:C6:C1:4D:F7:EB:10:94:DC:8E:FA:10:09:D9:B9:51:BB
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 01847C3738C6EED180545BAAFC85680EB1D4
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/brlKHMbBTffrEJTcjvoQCdm5Ubs.roa
Signing time: Tue 15 Nov 2022 16:55:04 +0000
ROA not before: Tue 15 Nov 2022 16:55:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 216.173.76.0/24 maxlen: 24
216.173.82.0/24 maxlen: 24
104.239.10.0/23 maxlen: 23
216.173.103.0/24 maxlen: 24
216.173.102.0/24 maxlen: 24
216.173.105.0/24 maxlen: 24
216.173.104.0/24 maxlen: 24
104.239.30.0/23 maxlen: 23
104.249.55.0/24 maxlen: 24
104.239.28.0/24 maxlen: 24
216.173.106.0/24 maxlen: 24
216.173.108.0/24 maxlen: 24
216.173.107.0/24 maxlen: 24
216.173.110.0/24 maxlen: 24
216.173.109.0/24 maxlen: 24
104.249.60.0/23 maxlen: 23
104.239.94.0/24 maxlen: 24
104.239.98.0/24 maxlen: 24
104.239.101.0/24 maxlen: 24
104.239.104.0/24 maxlen: 24
104.239.105.0/24 maxlen: 24
104.239.107.0/24 maxlen: 24
104.239.106.0/24 maxlen: 24
104.239.108.0/24 maxlen: 24
104.239.111.0/24 maxlen: 24
104.239.124.0/23 maxlen: 23
104.239.126.0/24 maxlen: 24
104.239.44.0/24 maxlen: 24
216.173.120.0/24 maxlen: 24
104.239.73.0/24 maxlen: 24
104.239.75.0/24 maxlen: 24
104.239.78.0/24 maxlen: 24
104.239.76.0/23 maxlen: 23
104.239.82.0/24 maxlen: 24
104.239.80.0/23 maxlen: 23
104.239.86.0/24 maxlen: 24
104.239.88.0/24 maxlen: 24
104.239.90.0/23 maxlen: 23
104.233.20.0/24 maxlen: 24
104.233.24.0/23 maxlen: 23
104.233.26.0/24 maxlen: 24
104.238.4.0/24 maxlen: 24
104.238.8.0/24 maxlen: 24
104.238.10.0/24 maxlen: 24
104.238.9.0/24 maxlen: 24
104.238.5.0/24 maxlen: 24
104.238.7.0/24 maxlen: 24
138.128.157.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:7c:37:38:c6:ee:d1:80:54:5b:aa:fc:85:68:0e:b1:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Nov 15 16:55:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6eb94a1cc6c14df7eb1094dc8efa1009d9b951bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:cb:79:9b:a6:e6:f1:1a:fe:88:e7:fb:15:5e:
4f:44:9e:6c:59:f2:3a:a4:ad:09:50:50:bb:d2:24:
cb:70:fb:06:7d:c0:f5:59:05:0a:72:54:f0:b1:68:
13:ae:a7:6a:45:a8:d0:a8:b4:67:8c:1e:4e:43:d9:
f8:29:bf:7b:19:fc:f4:96:81:7b:89:e3:63:e9:83:
9f:31:2d:43:68:53:c9:fa:00:5b:ea:0c:7d:d7:cd:
6c:fe:e3:fe:08:7b:07:95:51:21:e5:bf:1d:97:c6:
01:4f:6f:66:a4:88:6f:e6:ca:44:d4:03:48:6a:07:
21:b3:7b:38:c7:6c:e9:58:c5:15:d0:16:99:02:73:
85:1b:bc:04:b4:7f:7a:a2:3c:cd:85:2e:fe:1c:0e:
7d:d7:64:3f:b6:da:0f:92:e7:62:42:f4:ee:86:28:
16:c4:37:3f:1b:d4:c4:d5:e7:77:80:1d:8f:77:78:
6a:a9:9b:08:e1:9d:b8:29:53:ac:f2:df:7a:7b:98:
8a:0b:e6:42:a4:44:7b:88:79:31:b4:50:06:90:b5:
fa:e7:fd:f9:71:11:5a:24:9e:21:6b:f5:08:99:a1:
06:e2:c1:32:51:6c:b7:00:41:ce:6f:b2:10:e2:11:
78:ec:90:ed:de:ef:31:47:d3:38:2c:47:74:9c:c3:
92:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:B9:4A:1C:C6:C1:4D:F7:EB:10:94:DC:8E:FA:10:09:D9:B9:51:BB
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/brlKHMbBTffrEJTcjvoQCdm5Ubs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.233.20.0/24
104.233.24.0-104.233.26.255
104.238.4.0/23
104.238.7.0-104.238.10.255
104.239.10.0/23
104.239.28.0/24
104.239.30.0/23
104.239.44.0/24
104.239.73.0/24
104.239.75.0-104.239.78.255
104.239.80.0-104.239.82.255
104.239.86.0/24
104.239.88.0/24
104.239.90.0/23
104.239.94.0/24
104.239.98.0/24
104.239.101.0/24
104.239.104.0-104.239.108.255
104.239.111.0/24
104.239.124.0-104.239.126.255
104.249.55.0/24
104.249.60.0/23
138.128.157.0/24
216.173.76.0/24
216.173.82.0/24
216.173.102.0-216.173.110.255
216.173.120.0/24
Signature Algorithm: sha256WithRSAEncryption
65:06:0c:5d:91:82:fa:ff:e1:80:43:fe:1f:0d:16:63:d8:b5:
52:78:03:a2:15:98:6a:db:03:34:0e:c5:f2:52:bd:70:1d:43:
09:8b:18:5d:2c:36:65:fa:17:96:d0:5c:17:89:41:66:ac:05:
71:c0:e7:1b:5c:52:ab:1e:4b:66:a9:b2:3f:a0:36:90:51:3e:
37:94:5f:ff:8a:b5:38:05:f8:8a:07:5c:cd:57:44:c8:1a:46:
56:4d:27:3f:48:4b:2d:b4:59:e5:bb:e1:e4:44:57:19:6c:7c:
12:bd:2b:e0:fa:7c:3d:e3:3e:84:a6:08:67:d7:28:2c:77:3e:
4d:6f:be:42:9f:eb:a5:7a:a9:d9:ef:0a:fc:c1:e6:ee:f7:88:
1a:4b:2a:9a:df:1f:4e:6a:41:36:9b:94:c8:7e:25:c7:1b:23:
23:91:1a:e3:1e:29:0e:22:a1:50:ea:8a:69:02:ce:da:84:2f:
3e:72:b1:ef:50:dd:61:f4:cb:cc:f4:19:8d:44:c5:3e:0e:05:
16:54:a5:26:c4:7e:1d:81:e6:3a:ae:e1:fb:5e:8e:b8:65:b0:
92:97:b1:66:71:04:36:b7:fb:4f:90:b6:77:54:ca:20:6b:b9:
ed:4e:cf:55:c8:01:16:ab:27:dd:82:40:22:62:67:8e:69:ca:
e2:d3:75:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:56 2023 by rpki-client on console-fra.rpki-client.org