Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/4T_dABbmBx6dR_m3qoHdjHT6ejM.roa
File: 4T_dABbmBx6dR_m3qoHdjHT6ejM.roa (raw, json)
Hash identifier: 3r9kkqfiUTz/CY/8xhEg3yaIz/QxTpaNJwNru/Dk4YQ=
Subject key identifier: E1:3F:DD:00:16:E6:07:1E:9D:47:F9:B7:AA:81:DD:8C:74:FA:7A:33
Certificate issuer: /CN=411dea53467b6c7143eb23d284569a8183b2e82f
Certificate serial: 0188E79C416765E390119CEC97A01745D925
Authority key identifier: 41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/4T_dABbmBx6dR_m3qoHdjHT6ejM.roa
Signing time: Fri 23 Jun 2023 09:35:57 +0000
ROA not before: Fri 23 Jun 2023 09:35:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 84.239.18.0/24 maxlen: 24
84.239.30.0/24 maxlen: 24
84.239.29.0/24 maxlen: 24
84.239.43.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e7:9c:41:67:65:e3:90:11:9c:ec:97:a0:17:45:d9:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411dea53467b6c7143eb23d284569a8183b2e82f
Validity
Not Before: Jun 23 09:35:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e13fdd0016e6071e9d47f9b7aa81dd8c74fa7a33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:4d:33:d3:b7:58:72:cb:1e:49:2c:ed:97:0d:
92:72:e3:8f:89:d9:60:70:89:ea:89:f0:65:a7:32:
6d:68:6d:d6:11:fe:e3:ae:32:99:cd:08:94:5a:82:
84:12:b4:6c:28:b2:73:38:c4:3e:a4:9c:68:b9:f7:
57:85:e0:8f:f0:9a:0b:12:46:2b:d4:52:d0:05:4b:
fa:41:83:06:01:a4:08:44:34:25:43:ad:14:14:23:
8a:81:37:e0:93:28:81:04:40:cd:f9:31:97:cf:f1:
0c:11:5f:f6:ff:9b:b0:7a:1b:56:83:f2:b6:6a:98:
5c:73:58:32:d2:73:ed:83:8c:d7:67:5f:76:15:dc:
dd:96:22:b1:af:66:6e:f8:31:48:4e:96:d2:b2:fc:
04:cc:bb:d7:38:cb:fb:3a:93:4c:fc:56:17:67:10:
55:88:37:99:4e:77:99:6f:9a:af:14:97:b2:18:f5:
bc:13:f2:36:94:78:e9:d3:a3:79:9a:26:08:26:e6:
a9:60:ac:1c:22:2a:00:91:7e:08:2a:11:60:14:dc:
57:14:1b:4b:21:d5:f9:24:db:99:23:25:3c:65:dc:
80:d7:f2:3f:f2:8c:5f:a0:a0:aa:0a:3c:77:ef:33:
c4:30:22:85:40:c7:1d:37:79:3a:bc:3e:0f:11:14:
09:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:3F:DD:00:16:E6:07:1E:9D:47:F9:B7:AA:81:DD:8C:74:FA:7A:33
X509v3 Authority Key Identifier:
keyid:41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/4T_dABbmBx6dR_m3qoHdjHT6ejM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.239.18.0/24
84.239.29.0-84.239.30.255
84.239.43.0/24
Signature Algorithm: sha256WithRSAEncryption
49:c2:4a:e3:d7:c9:d9:05:44:02:92:85:4a:d1:eb:ac:8d:15:
8c:a1:97:ba:66:da:8a:81:fb:c0:77:2d:1d:8d:a9:da:e4:d0:
61:ac:e2:6d:69:48:a0:1b:15:83:4f:27:77:1e:d0:74:93:c4:
2a:12:34:12:e4:2b:f6:88:84:c3:78:be:9e:44:3b:61:fb:aa:
b1:72:58:82:38:b9:4a:ec:5e:38:0e:ff:c7:15:e0:e5:b6:1f:
0c:df:f5:2c:1b:4b:eb:cd:20:68:7d:ab:37:34:c5:56:dc:9f:
26:5b:07:62:c4:01:2d:4a:ac:fd:34:d7:de:e1:46:a0:89:57:
21:3b:1d:4a:5d:ea:4c:28:7d:54:87:8e:6e:06:fc:0b:f8:c0:
b8:ec:cf:3a:5c:60:3e:dc:a2:a8:82:9d:59:9b:87:ea:38:23:
d3:1a:e1:9d:a9:c1:2f:0f:ac:6d:b1:92:c3:ef:95:be:f5:cd:
78:4c:d5:5b:b9:c0:50:2a:20:90:42:71:5a:62:e2:6b:9d:bd:
a1:53:86:b2:46:cb:b4:aa:53:33:95:d7:ca:90:60:e5:74:97:
21:7b:98:8b:5f:59:71:df:88:f1:ef:7b:7a:34:d1:74:37:d3:
72:31:33:83:84:99:23:67:d5:94:1c:48:cf:eb:46:71:8f:4f:
40:c5:6e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:37:56 2025 by rpki-client