Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/wIpp9Cdz9KyDezC2UJ0HjNaHhpU.roa
File: wIpp9Cdz9KyDezC2UJ0HjNaHhpU.roa (raw, json)
Hash identifier: ZqGJ6saC5D8JW7cBkr6BWd5FGE3T2T7cvFu3St9v8zA=
Subject key identifier: C0:8A:69:F4:27:73:F4:AC:83:7B:30:B6:50:9D:07:8C:D6:87:86:95
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 01847C373857EBD75A877558414A215926CD
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/wIpp9Cdz9KyDezC2UJ0HjNaHhpU.roa
Signing time: Tue 15 Nov 2022 16:55:04 +0000
ROA not before: Tue 15 Nov 2022 16:55:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3356
IP address blocks: 216.173.76.0/24 maxlen: 24
216.173.82.0/24 maxlen: 24
104.239.10.0/23 maxlen: 23
216.173.103.0/24 maxlen: 24
216.173.104.0/24 maxlen: 24
216.173.102.0/24 maxlen: 24
216.173.105.0/24 maxlen: 24
104.239.30.0/23 maxlen: 23
104.249.55.0/24 maxlen: 24
104.239.28.0/24 maxlen: 24
216.173.107.0/24 maxlen: 24
216.173.108.0/24 maxlen: 24
216.173.106.0/24 maxlen: 24
216.173.110.0/24 maxlen: 24
216.173.109.0/24 maxlen: 24
104.249.60.0/23 maxlen: 23
104.239.94.0/24 maxlen: 24
104.239.98.0/24 maxlen: 24
104.239.104.0/24 maxlen: 24
104.239.105.0/24 maxlen: 24
104.239.101.0/24 maxlen: 24
104.239.106.0/24 maxlen: 24
104.239.107.0/24 maxlen: 24
104.239.108.0/24 maxlen: 24
104.239.111.0/24 maxlen: 24
104.239.124.0/23 maxlen: 23
104.239.126.0/24 maxlen: 24
104.239.44.0/24 maxlen: 24
216.173.120.0/24 maxlen: 24
104.239.78.0/24 maxlen: 24
104.239.75.0/24 maxlen: 24
104.239.73.0/24 maxlen: 24
104.239.76.0/23 maxlen: 23
104.239.82.0/24 maxlen: 24
104.239.80.0/23 maxlen: 23
104.239.86.0/24 maxlen: 24
104.239.88.0/24 maxlen: 24
104.239.90.0/23 maxlen: 23
104.233.24.0/23 maxlen: 23
104.233.20.0/24 maxlen: 24
104.233.26.0/24 maxlen: 24
104.238.4.0/24 maxlen: 24
104.238.7.0/24 maxlen: 24
104.238.8.0/24 maxlen: 24
104.238.9.0/24 maxlen: 24
104.238.10.0/24 maxlen: 24
104.238.5.0/24 maxlen: 24
138.128.157.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:7c:37:38:57:eb:d7:5a:87:75:58:41:4a:21:59:26:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Nov 15 16:55:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c08a69f42773f4ac837b30b6509d078cd6878695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b0:3b:60:71:95:79:c7:83:c3:ca:6e:16:3b:
bb:33:dd:78:81:17:02:0d:33:eb:b8:f2:dd:0d:87:
b7:ad:4a:d9:46:92:0a:18:ae:38:4f:95:49:24:b2:
f4:09:ce:fa:bf:76:da:c0:f2:c9:a2:8a:30:52:b8:
92:62:15:a0:5e:63:3d:ce:7c:4e:2c:f9:65:7c:82:
50:10:f9:f2:98:f1:16:55:fd:da:18:f6:cb:9a:bc:
9e:dc:d1:08:a1:48:18:8b:70:60:4b:8f:dd:41:9a:
50:0b:4d:5c:94:6b:a0:fd:c9:b6:ad:86:bd:5c:67:
69:b6:00:ec:9f:61:29:60:d0:2c:18:be:b8:2a:7f:
b6:e7:2c:76:a7:dd:17:2e:a6:c5:5e:78:eb:3c:84:
ae:91:6a:c1:e5:d4:4e:0d:83:86:d9:52:c6:c6:ef:
08:95:de:6c:1b:84:8e:51:21:7f:44:31:68:14:5b:
fe:d5:6b:5f:21:93:a6:c9:b9:cb:88:49:0b:07:da:
10:e9:41:d9:46:32:c9:7c:ac:5a:a2:cc:10:ab:f1:
0f:7f:9b:20:de:35:99:21:c4:61:a5:43:59:28:c9:
12:79:1d:49:19:9a:46:42:d7:91:c4:a8:ca:e1:07:
12:6c:74:c4:e3:03:8e:64:f9:97:86:eb:95:32:2a:
a1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:8A:69:F4:27:73:F4:AC:83:7B:30:B6:50:9D:07:8C:D6:87:86:95
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/wIpp9Cdz9KyDezC2UJ0HjNaHhpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.233.20.0/24
104.233.24.0-104.233.26.255
104.238.4.0/23
104.238.7.0-104.238.10.255
104.239.10.0/23
104.239.28.0/24
104.239.30.0/23
104.239.44.0/24
104.239.73.0/24
104.239.75.0-104.239.78.255
104.239.80.0-104.239.82.255
104.239.86.0/24
104.239.88.0/24
104.239.90.0/23
104.239.94.0/24
104.239.98.0/24
104.239.101.0/24
104.239.104.0-104.239.108.255
104.239.111.0/24
104.239.124.0-104.239.126.255
104.249.55.0/24
104.249.60.0/23
138.128.157.0/24
216.173.76.0/24
216.173.82.0/24
216.173.102.0-216.173.110.255
216.173.120.0/24
Signature Algorithm: sha256WithRSAEncryption
14:5b:fa:5a:9f:79:be:87:94:f6:16:45:80:9e:8f:20:ff:6d:
c0:61:76:87:ee:db:a1:85:41:e0:c5:7b:be:9b:ae:78:48:b5:
f3:a3:4c:b2:2a:44:b3:a6:d2:a7:a5:b2:e7:8a:a6:94:6a:dc:
37:b8:4a:8a:41:96:e7:61:d0:1f:8a:0f:49:25:40:90:e8:b3:
4a:e5:2a:b8:52:74:f2:ad:3e:3f:65:7a:2a:36:66:66:72:b1:
bd:ff:a4:e7:0a:5a:ea:b3:63:11:72:63:59:a3:85:eb:e4:78:
42:8f:e4:ed:80:4c:d6:94:ed:52:d1:82:c7:12:91:71:06:58:
c9:70:89:d6:f2:85:7a:27:a6:60:97:71:d7:12:43:0f:d3:83:
38:65:39:16:30:0a:2e:ee:81:7c:1f:44:4f:2f:b4:b1:1a:37:
d6:93:4b:e3:95:0d:3a:4d:a1:04:1f:22:25:e5:38:df:e4:18:
7a:8f:2c:c4:6d:d6:5d:25:1d:04:6d:cb:be:6a:8b:92:aa:a9:
c1:7b:77:f3:41:e9:40:e6:90:54:bb:31:99:38:70:f3:a6:9d:
9b:5d:32:34:84:7f:08:01:48:05:d9:b6:7e:d6:8a:13:c7:b9:
15:84:09:aa:1c:26:01:0d:11:19:6d:b8:a5:86:80:00:48:2f:
ef:7d:8e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:57 2023 by rpki-client on console-fra.rpki-client.org