Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/H3nyx_Zezw2CC-IRwlEeQvPFETg.roa
File: H3nyx_Zezw2CC-IRwlEeQvPFETg.roa (raw, json)
Hash identifier: Q8+wiIEhNfHE5emjdgB5bNldI5Bw66krk9U7LhrvD/E=
Subject key identifier: 1F:79:F2:C7:F6:5E:CF:0D:82:0B:E2:11:C2:51:1E:42:F3:C5:11:38
Certificate issuer: /CN=411dea53467b6c7143eb23d284569a8183b2e82f
Certificate serial: 041890
Authority key identifier: 41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/H3nyx_Zezw2CC-IRwlEeQvPFETg.roa
Signing time: Thu 26 May 2022 17:13:13 +0000
ROA not before: Thu 26 May 2022 17:13:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 5541
IP address blocks: 84.239.0.0/22 maxlen: 22
84.239.10.0/24 maxlen: 24
84.239.7.0/24 maxlen: 24
84.239.6.0/24 maxlen: 24
84.239.5.0/24 maxlen: 24
84.239.13.0/24 maxlen: 24
84.239.12.0/24 maxlen: 24
84.239.48.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 268432 (0x41890)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411dea53467b6c7143eb23d284569a8183b2e82f
Validity
Not Before: May 26 17:13:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1f79f2c7f65ecf0d820be211c2511e42f3c51138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6a:bb:c0:b6:67:80:69:52:fa:71:75:5b:b4:
0a:10:56:dd:3c:87:44:3d:15:dd:06:76:d6:53:a5:
1b:cd:46:56:c8:aa:bd:ce:46:5b:9a:f9:6a:ea:9a:
90:63:a0:f7:e1:2e:5b:55:1e:f1:3d:5a:f8:57:29:
8b:a4:2c:ab:53:88:43:28:43:30:bc:20:19:6c:29:
a6:6a:22:9d:74:c8:47:57:10:7a:da:cf:bc:37:61:
01:25:00:72:fc:e5:ea:8b:ea:9a:38:a9:81:2a:5c:
cd:85:b7:07:1f:24:6d:f4:4e:96:7a:61:63:7e:7f:
52:8a:f7:50:9a:ad:9f:00:3e:32:c7:c7:9f:82:0b:
a3:00:48:b4:1c:29:fe:e9:1a:b5:9f:ee:09:45:ae:
8b:48:b3:ee:0e:08:ea:64:cb:f7:35:1e:58:c0:d8:
67:98:dc:bf:b3:20:c7:78:6c:f9:56:13:0f:25:8a:
c8:ee:a4:9c:aa:fd:21:1c:49:d1:3d:cc:13:81:9d:
80:fc:cd:3a:6f:58:5a:a3:f5:3e:26:3d:d0:e0:b3:
c6:af:34:34:05:b7:49:09:80:53:2a:a8:62:32:98:
c5:6c:5d:73:be:f1:c1:e1:86:9e:9e:23:0f:5c:94:
b8:51:1f:08:c7:86:31:bc:3f:34:d6:dd:0b:f9:0d:
d3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:79:F2:C7:F6:5E:CF:0D:82:0B:E2:11:C2:51:1E:42:F3:C5:11:38
X509v3 Authority Key Identifier:
keyid:41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/H3nyx_Zezw2CC-IRwlEeQvPFETg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.239.0.0/22
84.239.5.0-84.239.7.255
84.239.10.0/24
84.239.12.0/23
84.239.48.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:ea:d2:23:b4:c1:5b:eb:28:54:16:e4:af:c9:eb:d9:f2:cd:
1e:01:76:a3:54:2a:90:49:bb:62:58:df:d5:03:3f:cf:33:57:
d1:e4:be:88:a0:1f:ac:0f:0d:ae:80:8b:82:13:56:70:cb:f9:
47:48:9f:a0:4f:8f:cf:9a:e7:78:4e:99:bc:e2:14:62:d3:f4:
dc:04:98:ea:12:93:03:c5:78:d8:c7:84:e1:90:55:2d:42:59:
35:b0:8d:8f:66:f2:90:53:2d:a7:0a:c2:b8:9a:c1:24:8d:66:
b0:b3:28:24:9a:3c:71:8c:0a:4c:13:64:43:6a:9f:f7:2a:1d:
bf:1b:a7:51:21:f7:60:e9:3c:88:5c:13:02:d1:7a:38:96:98:
1b:ab:ad:dd:db:33:b8:e8:b8:3a:e0:d9:22:46:b2:28:64:47:
e6:d5:34:47:96:4b:78:b0:b1:70:6a:1d:93:b7:61:85:44:a1:
f3:87:ea:a5:24:65:8f:e6:3e:2a:c6:dc:43:fd:7e:a7:05:bd:
9b:0a:06:55:03:22:ed:e6:8b:b1:52:c4:33:2a:f6:ff:43:b9:
57:33:0f:70:9c:bb:48:eb:f5:75:88:ca:79:94:41:68:88:dc:
57:e4:a6:f0:c0:55:04:28:cf:b7:a1:aa:b2:05:ad:7a:d1:83:
d2:05:3d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:02 2024 by rpki-client on console-fra.rpki-client.org