Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/cUmkpaPN8POTkPnLLdggpxDdKN8.roa
File: cUmkpaPN8POTkPnLLdggpxDdKN8.roa (raw, json)
Hash identifier: PKWGLhkZ47s9gaGaRlai3NGoFyJcidsyI68Ts0KN/qQ=
Subject key identifier: 71:49:A4:A5:A3:CD:F0:F3:93:90:F9:CB:2D:D8:20:A7:10:DD:28:DF
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 01841DC5C7DE1D1875A085402E60CC4F3C19
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/cUmkpaPN8POTkPnLLdggpxDdKN8.roa
Signing time: Fri 28 Oct 2022 08:46:51 +0000
ROA not before: Fri 28 Oct 2022 08:46:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3356
IP address blocks: 104.239.10.0/23 maxlen: 23
104.239.13.0/24 maxlen: 24
104.239.30.0/23 maxlen: 23
104.249.55.0/24 maxlen: 24
104.239.28.0/24 maxlen: 24
104.249.60.0/23 maxlen: 23
216.173.120.0/24 maxlen: 24
104.238.4.0/24 maxlen: 24
104.238.7.0/24 maxlen: 24
104.238.8.0/24 maxlen: 24
104.238.9.0/24 maxlen: 24
104.238.10.0/24 maxlen: 24
104.238.5.0/24 maxlen: 24
104.238.14.0/24 maxlen: 24
104.238.19.0/24 maxlen: 24
104.238.20.0/24 maxlen: 24
216.173.76.0/24 maxlen: 24
216.173.82.0/24 maxlen: 24
216.173.103.0/24 maxlen: 24
216.173.104.0/24 maxlen: 24
216.173.102.0/24 maxlen: 24
216.173.105.0/24 maxlen: 24
216.173.107.0/24 maxlen: 24
216.173.108.0/24 maxlen: 24
216.173.106.0/24 maxlen: 24
216.173.110.0/24 maxlen: 24
216.173.109.0/24 maxlen: 24
104.239.94.0/24 maxlen: 24
104.239.98.0/24 maxlen: 24
104.239.92.0/23 maxlen: 23
104.239.96.0/23 maxlen: 23
104.239.104.0/24 maxlen: 24
104.239.105.0/24 maxlen: 24
104.239.101.0/24 maxlen: 24
104.239.106.0/24 maxlen: 24
104.239.107.0/24 maxlen: 24
104.239.108.0/24 maxlen: 24
104.239.111.0/24 maxlen: 24
104.239.124.0/23 maxlen: 23
104.239.126.0/24 maxlen: 24
104.239.44.0/24 maxlen: 24
104.239.78.0/24 maxlen: 24
104.239.75.0/24 maxlen: 24
104.239.73.0/24 maxlen: 24
104.239.76.0/23 maxlen: 23
104.239.82.0/24 maxlen: 24
104.239.84.0/23 maxlen: 23
104.239.80.0/23 maxlen: 23
104.239.86.0/24 maxlen: 24
104.239.88.0/24 maxlen: 24
104.239.90.0/23 maxlen: 23
104.233.24.0/23 maxlen: 23
104.233.20.0/24 maxlen: 24
104.233.26.0/24 maxlen: 24
138.128.157.0/24 maxlen: 24
138.128.159.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1d:c5:c7:de:1d:18:75:a0:85:40:2e:60:cc:4f:3c:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Oct 28 08:46:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7149a4a5a3cdf0f39390f9cb2dd820a710dd28df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d3:44:60:49:6e:ab:ee:3e:d5:4a:fc:ac:fd:
10:31:62:f4:aa:14:76:e2:7c:5f:df:c2:bb:3a:e1:
46:ed:4a:3a:69:3f:58:ee:95:88:bf:02:7e:cd:a9:
88:ea:7b:84:5b:47:1e:a7:80:a8:96:15:96:ab:7b:
7b:e0:cb:7a:c4:c8:e3:59:3f:11:1a:29:c4:82:1b:
06:3c:3d:ab:f5:bf:9a:ed:62:57:3f:9c:a3:3e:68:
02:2d:8e:8f:49:71:9b:8e:b9:92:8b:89:b3:f8:5e:
8d:58:9e:e1:2c:82:35:33:47:5d:80:36:58:bc:39:
d2:54:20:b9:5c:43:25:e7:ee:09:3c:8f:4e:93:ff:
34:3f:4f:5e:47:cc:cb:63:b6:e9:50:f0:22:b3:c4:
f4:17:27:3b:75:38:05:7f:0a:0f:06:3b:43:fa:f9:
a1:8b:c2:3b:8f:82:7a:91:4e:0e:d6:fd:78:d1:31:
7c:27:b1:f7:d2:c5:05:4a:e6:af:6b:31:6d:1a:d3:
ec:c9:bf:8e:5b:fb:eb:05:06:a6:cb:97:5f:8b:0d:
6b:9b:ea:81:62:26:58:58:3a:8f:41:07:55:bc:b7:
c6:f7:1e:64:55:e9:ae:b0:43:bd:81:01:c3:ca:ef:
a9:1c:93:8f:d4:b9:f0:dd:e3:31:22:d7:c9:3c:0e:
bb:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:49:A4:A5:A3:CD:F0:F3:93:90:F9:CB:2D:D8:20:A7:10:DD:28:DF
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/cUmkpaPN8POTkPnLLdggpxDdKN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.233.20.0/24
104.233.24.0-104.233.26.255
104.238.4.0/23
104.238.7.0-104.238.10.255
104.238.14.0/24
104.238.19.0-104.238.20.255
104.239.10.0/23
104.239.13.0/24
104.239.28.0/24
104.239.30.0/23
104.239.44.0/24
104.239.73.0/24
104.239.75.0-104.239.78.255
104.239.80.0-104.239.82.255
104.239.84.0-104.239.86.255
104.239.88.0/24
104.239.90.0-104.239.94.255
104.239.96.0-104.239.98.255
104.239.101.0/24
104.239.104.0-104.239.108.255
104.239.111.0/24
104.239.124.0-104.239.126.255
104.249.55.0/24
104.249.60.0/23
138.128.157.0/24
138.128.159.0/24
216.173.76.0/24
216.173.82.0/24
216.173.102.0-216.173.110.255
216.173.120.0/24
Signature Algorithm: sha256WithRSAEncryption
12:4d:39:c7:34:02:42:34:82:51:9e:95:56:5d:c8:dc:c1:1f:
6c:ad:80:29:f4:50:4e:e5:c3:a0:68:e1:90:4a:83:11:6f:65:
8a:c8:6c:bb:f9:7a:4c:97:8e:b5:28:68:c4:83:3e:6b:78:a3:
2f:06:36:04:38:a0:e7:cc:50:c2:58:f4:22:cc:78:ff:af:b1:
2d:19:56:32:3b:bc:1b:62:ae:5a:26:27:65:92:b1:d3:a4:f6:
76:72:f6:56:32:5f:c5:24:33:a5:6a:cf:0e:7f:9c:19:fa:bf:
71:cd:4b:6e:e6:53:fc:a2:a2:8b:e6:52:29:8d:2d:e7:02:2c:
a7:00:e4:01:a5:18:4d:ec:c9:08:20:7f:69:2f:a0:85:b2:16:
96:45:1b:0e:33:22:22:4a:8d:e1:70:cc:35:62:5d:42:bd:d0:
8b:73:ca:11:3a:4e:64:be:f9:1f:5f:9e:c3:af:aa:4d:7e:cd:
f6:c5:4a:7d:72:8e:ab:b0:2e:73:02:04:5f:a7:ea:ff:74:f5:
cb:92:5d:0d:d4:2b:d5:a0:91:1a:81:03:0b:fd:28:44:8f:4c:
ae:7d:74:3a:fa:0e:44:0b:76:57:16:ba:7f:af:8d:09:8b:a5:
6d:41:f2:ea:95:fc:25:87:53:35:27:91:7f:a4:b4:d9:94:19:
e8:5f:ad:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:38 2023 by rpki-client on console-ams.rpki-client.org