Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/jcqJYYCBVEDaRXdhmkhQgoGcaE4.roa
File: jcqJYYCBVEDaRXdhmkhQgoGcaE4.roa (raw, json)
Hash identifier: v/10CU78q5D7nSnZruNPpgCWRMhyFM9aTnSKIHk7u7A=
Subject key identifier: 8D:CA:89:61:80:81:54:40:DA:45:77:61:9A:48:50:82:81:9C:68:4E
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 0184429C9A272731B8BB2E741905778CFA2B
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/jcqJYYCBVEDaRXdhmkhQgoGcaE4.roa
Signing time: Fri 04 Nov 2022 12:27:50 +0000
ROA not before: Fri 04 Nov 2022 12:27:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3356
IP address blocks: 104.239.10.0/23 maxlen: 23
104.239.13.0/24 maxlen: 24
104.239.30.0/23 maxlen: 23
104.249.55.0/24 maxlen: 24
104.239.28.0/24 maxlen: 24
104.249.60.0/23 maxlen: 23
216.173.120.0/24 maxlen: 24
104.238.4.0/24 maxlen: 24
104.238.7.0/24 maxlen: 24
104.238.8.0/24 maxlen: 24
104.238.9.0/24 maxlen: 24
104.238.10.0/24 maxlen: 24
104.238.5.0/24 maxlen: 24
216.173.76.0/24 maxlen: 24
216.173.82.0/24 maxlen: 24
216.173.103.0/24 maxlen: 24
216.173.104.0/24 maxlen: 24
216.173.102.0/24 maxlen: 24
216.173.105.0/24 maxlen: 24
216.173.107.0/24 maxlen: 24
216.173.108.0/24 maxlen: 24
216.173.106.0/24 maxlen: 24
216.173.110.0/24 maxlen: 24
216.173.109.0/24 maxlen: 24
104.239.94.0/24 maxlen: 24
104.239.98.0/24 maxlen: 24
104.239.104.0/24 maxlen: 24
104.239.105.0/24 maxlen: 24
104.239.101.0/24 maxlen: 24
104.239.106.0/24 maxlen: 24
104.239.107.0/24 maxlen: 24
104.239.108.0/24 maxlen: 24
104.239.111.0/24 maxlen: 24
104.239.124.0/23 maxlen: 23
104.239.126.0/24 maxlen: 24
104.239.44.0/24 maxlen: 24
104.239.78.0/24 maxlen: 24
104.239.75.0/24 maxlen: 24
104.239.73.0/24 maxlen: 24
104.239.76.0/23 maxlen: 23
104.239.82.0/24 maxlen: 24
104.239.80.0/23 maxlen: 23
104.239.86.0/24 maxlen: 24
104.239.88.0/24 maxlen: 24
104.239.90.0/23 maxlen: 23
104.233.24.0/23 maxlen: 23
104.233.20.0/24 maxlen: 24
104.233.26.0/24 maxlen: 24
138.128.157.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:42:9c:9a:27:27:31:b8:bb:2e:74:19:05:77:8c:fa:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Nov 4 12:27:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8dca896180815440da4577619a485082819c684e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6d:e4:1c:52:74:f9:e6:47:5c:e6:93:ef:db:
17:33:2d:e2:47:a2:30:c6:18:2a:86:ad:b4:04:17:
2c:6b:ad:88:a8:7c:73:dd:e8:1e:9d:4f:e8:d5:45:
b8:22:7f:4e:e6:5b:28:b6:32:94:6c:cb:b2:00:2d:
b5:a1:a8:4b:b6:0d:7e:fc:ba:1e:fc:c6:49:12:25:
78:92:4d:77:69:d7:d2:5f:55:8a:3f:d2:9a:c1:12:
ec:5e:c0:00:41:55:d6:ee:0b:d2:2d:71:22:47:a1:
be:b6:d3:3d:bc:2a:af:91:07:bb:70:6d:a3:7c:82:
02:0e:50:54:e3:59:69:b4:88:54:0c:e2:c7:6f:6b:
9c:71:51:bf:00:81:af:e3:03:f9:42:68:fe:eb:6e:
6b:43:8b:cd:e7:e8:71:06:f7:43:1d:41:45:97:79:
65:68:60:7d:27:0c:f1:26:84:fa:63:f1:e6:02:1f:
41:a5:5e:59:f3:5f:06:29:bf:ad:31:20:b4:e0:ff:
85:cb:eb:78:d8:4c:40:38:dc:b4:ee:89:3f:93:1d:
4d:e6:ce:23:47:f4:22:92:9d:d3:cf:96:e2:f4:cf:
1e:b2:3f:b5:ea:52:99:43:78:79:72:b3:a3:b0:08:
7b:3e:05:3f:f9:d0:01:a4:ef:3f:f0:76:43:28:d6:
bf:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:CA:89:61:80:81:54:40:DA:45:77:61:9A:48:50:82:81:9C:68:4E
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/jcqJYYCBVEDaRXdhmkhQgoGcaE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.233.20.0/24
104.233.24.0-104.233.26.255
104.238.4.0/23
104.238.7.0-104.238.10.255
104.239.10.0/23
104.239.13.0/24
104.239.28.0/24
104.239.30.0/23
104.239.44.0/24
104.239.73.0/24
104.239.75.0-104.239.78.255
104.239.80.0-104.239.82.255
104.239.86.0/24
104.239.88.0/24
104.239.90.0/23
104.239.94.0/24
104.239.98.0/24
104.239.101.0/24
104.239.104.0-104.239.108.255
104.239.111.0/24
104.239.124.0-104.239.126.255
104.249.55.0/24
104.249.60.0/23
138.128.157.0/24
216.173.76.0/24
216.173.82.0/24
216.173.102.0-216.173.110.255
216.173.120.0/24
Signature Algorithm: sha256WithRSAEncryption
80:d6:ad:69:7d:13:a5:d0:0a:9c:df:57:70:d8:27:dc:cc:17:
c2:0a:d7:8d:41:a2:f1:4f:24:78:0f:2a:38:98:b9:2b:bb:fd:
a1:f8:e9:8b:d2:57:6f:ab:42:5f:79:6f:e9:e1:b8:7b:4d:49:
8c:2a:2a:53:47:0c:91:f5:2a:46:45:67:31:8d:df:74:e8:d6:
b0:b6:df:e3:55:84:58:65:24:0a:0b:4d:4a:e2:fe:84:e7:b7:
2e:a7:e1:56:94:33:a4:88:ad:05:d6:ad:4d:01:ba:41:52:53:
99:ac:fa:39:a4:3c:c3:df:e3:cb:9a:dd:38:e5:4b:9f:f2:fa:
70:20:86:47:ce:35:8b:ad:7c:0f:41:38:af:f7:d2:cd:d9:b3:
a9:81:df:33:e5:4c:c0:6e:35:ec:76:fc:91:6b:6c:29:f8:d1:
2f:17:b4:02:41:04:22:a2:44:1b:a5:47:46:0e:a9:58:eb:ee:
77:fa:40:84:60:65:56:ea:a8:b5:9c:87:e6:d5:34:2f:48:6b:
6f:d6:c9:08:14:3a:9c:8c:0b:ab:6d:13:bc:b8:8c:8b:a4:64:
3c:c8:72:e2:9d:20:19:09:cf:32:96:0a:f8:d8:0f:47:6f:81:
5c:ff:0a:94:b4:7e:4c:ed:fa:f4:a9:d5:23:e9:62:26:c7:58:
97:10:a9:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:57 2023 by rpki-client on console-fra.rpki-client.org