Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/monY5nnD8tcRk_lVRMYNo2zWFq4.roa
File: monY5nnD8tcRk_lVRMYNo2zWFq4.roa (raw, json)
Hash identifier: 1KoiI/a8Bcr3uqAovc3jlcqZpHD7Kp5eVD/wkV049Vk=
Subject key identifier: 9A:89:D8:E6:79:C3:F2:D7:11:93:F9:55:44:C6:0D:A3:6C:D6:16:AE
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 0184BE0922ECF991AFAEAA1D92D15D93E2BF
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/monY5nnD8tcRk_lVRMYNo2zWFq4.roa
Signing time: Mon 28 Nov 2022 11:39:40 +0000
ROA not before: Mon 28 Nov 2022 11:39:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201207
IP address blocks: 216.173.76.0/24 maxlen: 24
216.173.82.0/24 maxlen: 24
104.239.10.0/23 maxlen: 23
45.43.167.0/24 maxlen: 24
216.173.96.0/22 maxlen: 22
216.173.102.0/24 maxlen: 24
216.173.106.0/24 maxlen: 24
216.173.107.0/24 maxlen: 24
216.173.110.0/24 maxlen: 24
104.239.104.0/24 maxlen: 24
104.239.105.0/24 maxlen: 24
104.239.107.0/24 maxlen: 24
104.239.111.0/24 maxlen: 24
104.239.106.0/24 maxlen: 24
104.239.124.0/23 maxlen: 23
104.239.126.0/24 maxlen: 24
216.173.120.0/24 maxlen: 24
104.239.76.0/23 maxlen: 23
104.239.75.0/24 maxlen: 24
104.239.78.0/24 maxlen: 24
104.239.80.0/23 maxlen: 23
104.233.12.0/22 maxlen: 22
104.233.24.0/23 maxlen: 23
104.233.26.0/24 maxlen: 24
104.238.10.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:be:09:22:ec:f9:91:af:ae:aa:1d:92:d1:5d:93:e2:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Nov 28 11:39:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9a89d8e679c3f2d71193f95544c60da36cd616ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:03:b5:24:2d:61:75:e7:7b:47:0b:7f:2b:05:
08:63:81:42:a2:74:0b:90:3f:02:7f:e5:f6:ce:35:
d3:a3:c9:49:82:b5:66:07:fd:d6:22:1d:37:38:27:
42:0d:cd:c0:a5:dc:44:c7:6a:b5:2c:0b:6d:da:24:
f8:40:9d:75:ff:55:38:3f:70:8e:08:e3:60:60:f3:
19:b8:1f:54:a7:46:4f:67:b6:22:06:8a:1e:b0:39:
9a:34:8a:7f:16:25:31:5d:a4:65:02:d7:59:95:37:
a2:39:12:08:ae:4c:68:6e:48:f9:3e:00:be:28:e5:
88:78:6b:75:ea:67:06:d3:16:c2:b4:0a:42:9c:8c:
3c:6c:f5:67:57:d0:e4:ee:10:36:7b:21:d9:aa:ce:
23:7b:6b:15:98:3b:d8:d1:2a:9c:79:ac:d4:fe:7d:
12:2c:10:27:3b:ba:0b:f7:5e:6f:f4:d9:83:c9:d7:
10:dc:56:a8:20:53:d2:c1:cb:d7:b0:8e:00:c3:39:
9e:a9:14:0e:d1:e3:20:3f:ec:ed:48:17:4d:3c:54:
06:c8:05:84:48:d0:63:97:e6:9b:5d:7a:0b:af:89:
18:d8:72:42:b6:6b:81:6e:12:fa:bb:83:e7:68:6d:
07:34:4a:15:ec:ad:f9:2a:25:e5:de:23:f7:1e:31:
54:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:89:D8:E6:79:C3:F2:D7:11:93:F9:55:44:C6:0D:A3:6C:D6:16:AE
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/monY5nnD8tcRk_lVRMYNo2zWFq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.167.0/24
104.233.12.0/22
104.233.24.0-104.233.26.255
104.238.10.0/24
104.239.10.0/23
104.239.75.0-104.239.78.255
104.239.80.0/23
104.239.104.0/22
104.239.111.0/24
104.239.124.0-104.239.126.255
216.173.76.0/24
216.173.82.0/24
216.173.96.0/22
216.173.102.0/24
216.173.106.0/23
216.173.110.0/24
216.173.120.0/24
Signature Algorithm: sha256WithRSAEncryption
48:f0:e5:da:5d:23:52:35:7b:27:a1:06:c6:1a:d4:35:18:ab:
ef:8b:0c:bc:17:76:6d:47:71:a0:07:24:aa:94:e8:e9:e7:dc:
d4:ca:d4:a4:1b:f0:11:48:9a:1c:55:9c:e6:ba:27:13:79:4a:
e1:11:7c:b4:9a:22:73:df:51:5d:52:36:26:9d:ff:a5:fb:47:
00:35:21:20:04:ea:f0:9d:2a:4b:e7:18:4c:09:59:f3:73:5d:
97:7b:b2:c8:e9:f6:91:e4:f2:f6:44:9b:74:81:e3:49:69:d3:
45:fe:cc:dc:11:8b:49:53:60:89:f6:52:90:d7:3b:1a:22:e8:
a0:90:e3:97:66:67:69:e6:d3:a3:09:26:c3:28:2a:1b:e9:e1:
f6:a1:8b:de:64:d8:27:44:7d:de:3a:af:75:52:6f:a4:6f:c4:
de:61:32:89:f5:88:bc:e8:8f:06:2e:ad:e3:d7:eb:2d:03:d0:
21:32:59:cd:c5:c6:3f:24:ec:2e:2d:8d:fd:8d:2d:75:f5:b3:
cc:10:b0:55:74:14:d0:e0:f5:a5:5f:b0:3d:ac:ec:40:12:a9:
70:da:53:05:a7:d6:e4:ae:58:e8:31:cc:b0:b5:b8:23:47:6c:
e3:d4:ad:d3:4b:20:66:65:81:cf:d3:5b:b0:f5:d4:52:08:c3:
80:d8:61:fa
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgISAYS+CSLs+ZGvrqodktFdk+K/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNTgxZTY3M2Q4MGY3NDc0OTM2YjIxMzM3ZWFmY2MxYmRj
Mzg1ZTkwHhcNMjIxMTI4MTEzOTQwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YTg5ZDhlNjc5YzNmMmQ3MTE5M2Y5NTU0NGM2MGRhMzZjZDYxNmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAO1JC1hded7Rwt/KwUIY4FConQL
kD8Cf+X2zjXTo8lJgrVmB/3WIh03OCdCDc3ApdxEx2q1LAtt2iT4QJ11/1U4P3CO
CONgYPMZuB9Up0ZPZ7YiBooesDmaNIp/FiUxXaRlAtdZlTeiORIIrkxobkj5PgC+
KOWIeGt16mcG0xbCtApCnIw8bPVnV9Dk7hA2eyHZqs4je2sVmDvY0SqceazU/n0S
LBAnO7oL915v9NmDydcQ3FaoIFPSwcvXsI4AwzmeqRQO0eMgP+ztSBdNPFQGyAWE
SNBjl+abXXoLr4kY2HJCtmuBbhL6u4PnaG0HNEoV7K35KiXl3iP3HjFUSQIDAQAB
o4IChTCCAoEwHQYDVR0OBBYEFJqJ2OZ5w/LXEZP5VUTGDaNs1hauMB8GA1UdIwQY
MBaAFGBYHmc9gPdHSTayEzfq/MG9w4XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYt
ZmIwNzk1NWYzYWFhLzEvbW9uWTVubkQ4dGNSa19sVlJNWU5vMnpXRnE0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYtZmIwNzk1NWYzYWFh
LzEvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGaBggrBgEFBQcBBwEB/wSBijCBhzCBhAQCAAEwfgMEAC0r
pwMEAmjpDDAMAwQDaOkYAwQAaOkaAwQAaO4KAwQBaO8KMAwDBABo70sDBABo704D
BAFo71ADBAJo72gDBABo728wDAMEAmjvfAMEAGjvfgMEANitTAMEANitUgMEAtit
YAMEANitZgMEAditagMEANitbgMEANiteDANBgkqhkiG9w0BAQsFAAOCAQEASPDl
2l0jUjV7J6EGxhrUNRir74sMvBd2bUdxoAckqpTo6efc1MrUpBvwEUiaHFWc5ron
E3lK4RF8tJoic99RXVI2Jp3/pftHADUhIATq8J0qS+cYTAlZ83Ndl3uyyOn2keTy
9kSbdIHjSWnTRf7M3BGLSVNgifZSkNc7GiLooJDjl2ZnaebTowkmwygqG+nh9qGL
3mTYJ0R93jqvdVJvpG/E3mEyifWIvOiPBi6t49frLQPQITJZzcXGPyTsLi2N/Y0t
dfWzzBCwVXQU0OD1pV+wPazsQBKpcNpTBafW5K5Y6DHMsLW4I0ds49St00sgZmWB
z9NbsPXUUgjDgNhh+g==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:38 2023 by rpki-client on console-ams.rpki-client.org