Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/evCd-o67OjxY6Gyueoq5hyBmi1M.roa
File: evCd-o67OjxY6Gyueoq5hyBmi1M.roa (raw, json)
Hash identifier: RI/d5vlqMgA3QL97/Mhw0yEB7KwvUR3VKaOpgVwhsn0=
Subject key identifier: 7A:F0:9D:FA:8E:BB:3A:3C:58:E8:6C:AE:7A:8A:B9:87:20:66:8B:53
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 0183316A8D7FDF13E066D5A0F75856D3726F
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/evCd-o67OjxY6Gyueoq5hyBmi1M.roa
Signing time: Mon 12 Sep 2022 11:16:50 +0000
ROA not before: Mon 12 Sep 2022 11:16:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 104.249.29.0/24 maxlen: 24
104.249.30.0/23 maxlen: 23
104.249.36.0/24 maxlen: 24
104.239.10.0/23 maxlen: 23
104.239.13.0/24 maxlen: 24
104.249.55.0/24 maxlen: 24
104.239.28.0/24 maxlen: 24
104.239.30.0/23 maxlen: 23
104.249.60.0/23 maxlen: 23
104.167.0.0/24 maxlen: 24
104.167.10.0/24 maxlen: 24
216.173.120.0/24 maxlen: 24
64.137.52.0/23 maxlen: 23
104.238.4.0/24 maxlen: 24
104.238.5.0/24 maxlen: 24
104.238.8.0/24 maxlen: 24
104.238.7.0/24 maxlen: 24
104.238.10.0/24 maxlen: 24
104.238.9.0/24 maxlen: 24
104.238.14.0/24 maxlen: 24
104.238.20.0/24 maxlen: 24
104.238.19.0/24 maxlen: 24
216.173.76.0/24 maxlen: 24
216.173.82.0/24 maxlen: 24
216.173.102.0/24 maxlen: 24
216.173.104.0/24 maxlen: 24
216.173.103.0/24 maxlen: 24
216.173.105.0/24 maxlen: 24
216.173.109.0/24 maxlen: 24
216.173.108.0/24 maxlen: 24
216.173.111.0/24 maxlen: 24
216.173.110.0/24 maxlen: 24
216.173.106.0/24 maxlen: 24
216.173.107.0/24 maxlen: 24
104.239.92.0/23 maxlen: 23
104.239.96.0/23 maxlen: 23
104.239.98.0/24 maxlen: 24
104.239.94.0/24 maxlen: 24
104.239.101.0/24 maxlen: 24
104.239.105.0/24 maxlen: 24
104.239.104.0/24 maxlen: 24
104.239.111.0/24 maxlen: 24
104.239.106.0/24 maxlen: 24
104.239.108.0/24 maxlen: 24
104.239.107.0/24 maxlen: 24
104.239.124.0/23 maxlen: 23
104.239.126.0/24 maxlen: 24
104.239.44.0/24 maxlen: 24
104.239.76.0/23 maxlen: 23
104.239.73.0/24 maxlen: 24
104.239.75.0/24 maxlen: 24
104.239.78.0/24 maxlen: 24
104.239.84.0/23 maxlen: 23
104.239.80.0/23 maxlen: 23
104.239.82.0/24 maxlen: 24
104.239.90.0/23 maxlen: 23
104.239.86.0/24 maxlen: 24
104.239.88.0/24 maxlen: 24
104.233.20.0/24 maxlen: 24
104.233.24.0/23 maxlen: 23
104.233.26.0/24 maxlen: 24
138.128.148.0/24 maxlen: 24
138.128.151.0/24 maxlen: 24
138.128.157.0/24 maxlen: 24
138.128.159.0/24 maxlen: 24
138.128.153.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:31:6a:8d:7f:df:13:e0:66:d5:a0:f7:58:56:d3:72:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Sep 12 11:16:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7af09dfa8ebb3a3c58e86cae7a8ab98720668b53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:22:da:1b:a2:0a:70:23:7c:26:e1:af:03:6b:
e9:a6:5a:90:ea:de:78:c0:11:88:62:9c:25:9f:0b:
32:76:8d:45:26:30:be:13:b0:e8:09:1c:a0:1b:23:
e9:c6:fc:f9:e8:a1:a5:87:bb:65:6b:bf:05:a7:4e:
ef:b6:8c:ad:8f:1d:a4:82:74:2c:0e:bf:a8:3f:fa:
44:df:30:6e:7d:2b:e7:33:a7:06:ce:a4:80:0c:21:
db:23:bb:ca:eb:ef:1f:22:50:c7:ef:8c:27:b2:2a:
ae:e0:84:81:51:72:4f:e1:70:bd:b9:eb:da:3b:25:
71:2f:b2:fc:2c:ee:f4:a3:49:dd:40:64:32:ae:37:
34:a8:ee:af:a6:07:c9:f1:3d:e5:ef:b7:1a:56:08:
65:57:c4:7f:e7:d7:d9:3a:16:f0:03:78:19:a2:64:
ff:aa:ab:39:44:64:f4:ba:18:bd:07:15:1f:dc:80:
c9:0e:02:42:3e:21:7b:0d:f9:26:92:e2:04:91:48:
29:49:53:82:33:88:9a:32:ac:8f:8b:01:75:d8:8f:
1a:b1:25:8c:b7:7b:58:1d:52:b0:03:24:84:d1:34:
6a:2f:3c:21:69:42:d3:b8:39:38:04:ca:1c:4c:a0:
7f:c4:f8:e9:b8:c4:bb:bb:8f:d1:f6:0f:76:b1:ca:
ed:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:F0:9D:FA:8E:BB:3A:3C:58:E8:6C:AE:7A:8A:B9:87:20:66:8B:53
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/evCd-o67OjxY6Gyueoq5hyBmi1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.137.52.0/23
104.167.0.0/24
104.167.10.0/24
104.233.20.0/24
104.233.24.0-104.233.26.255
104.238.4.0/23
104.238.7.0-104.238.10.255
104.238.14.0/24
104.238.19.0-104.238.20.255
104.239.10.0/23
104.239.13.0/24
104.239.28.0/24
104.239.30.0/23
104.239.44.0/24
104.239.73.0/24
104.239.75.0-104.239.78.255
104.239.80.0-104.239.82.255
104.239.84.0-104.239.86.255
104.239.88.0/24
104.239.90.0-104.239.94.255
104.239.96.0-104.239.98.255
104.239.101.0/24
104.239.104.0-104.239.108.255
104.239.111.0/24
104.239.124.0-104.239.126.255
104.249.29.0-104.249.31.255
104.249.36.0/24
104.249.55.0/24
104.249.60.0/23
138.128.148.0/24
138.128.151.0/24
138.128.153.0/24
138.128.157.0/24
138.128.159.0/24
216.173.76.0/24
216.173.82.0/24
216.173.102.0-216.173.111.255
216.173.120.0/24
Signature Algorithm: sha256WithRSAEncryption
96:36:fa:4a:0c:73:01:2b:e5:a0:0c:6e:6b:5d:52:8e:5e:ff:
61:8c:a7:d1:d1:a3:42:02:86:87:45:07:b6:b2:82:a8:8f:c8:
33:47:39:41:52:22:6c:dd:d6:85:13:15:7b:58:6b:0d:52:a4:
a0:00:d4:87:ae:c0:aa:ab:27:72:f5:80:48:1d:3c:ee:81:fa:
62:25:5b:94:81:3a:56:2f:89:26:b7:99:80:ae:12:ff:46:51:
c4:bd:a1:90:5d:32:db:a4:a8:09:7e:aa:e3:e5:22:27:15:ad:
87:0c:d9:fb:de:81:5d:76:a3:fe:46:b4:11:b4:aa:4b:2a:8f:
63:56:3d:0c:7d:64:da:62:2e:87:08:e8:35:92:44:9b:28:ca:
00:c6:b9:9e:d7:f5:a0:84:cb:4d:6a:0e:c2:a5:5c:d6:6e:6b:
3e:a4:90:22:08:c8:36:e6:86:03:40:6f:14:6b:51:88:6c:b0:
21:b4:34:40:e1:e3:6c:32:41:a4:be:b1:7b:0b:b0:9a:bb:e7:
45:a7:5b:d1:c2:f2:93:c3:9d:b0:a2:f6:0b:76:68:6a:b5:26:
a9:f7:df:86:50:60:26:ab:b5:e5:ce:d8:7c:b4:b6:27:c9:da:
b3:bb:77:c4:9f:7b:7f:a5:c8:15:ad:8f:29:c8:b4:bd:a8:01:
e1:63:04:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:45 2024 by rpki-client on console-ams.rpki-client.org