Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/cuOFTxCMP9wu9j388SecP4SE9to.roa
File: cuOFTxCMP9wu9j388SecP4SE9to.roa (raw, json)
Hash identifier: E5OI5ixoqGZU0JhPRXfapn73skNxdmKBu1tL//w3fKU=
Subject key identifier: 72:E3:85:4F:10:8C:3F:DC:2E:F6:3D:FC:F1:27:9C:3F:84:84:F6:DA
Certificate issuer: /CN=411dea53467b6c7143eb23d284569a8183b2e82f
Certificate serial: 01856D2F375066D14221D357B02DD9592D76
Authority key identifier: 41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/cuOFTxCMP9wu9j388SecP4SE9to.roa
Signing time: Sun 01 Jan 2023 11:54:48 +0000
ROA not before: Sun 01 Jan 2023 11:54:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5541
IP address blocks: 84.239.0.0/22 maxlen: 22
84.239.10.0/24 maxlen: 24
84.239.7.0/24 maxlen: 24
84.239.6.0/24 maxlen: 24
84.239.5.0/24 maxlen: 24
84.239.13.0/24 maxlen: 24
84.239.12.0/24 maxlen: 24
84.239.48.0/24 maxlen: 24
84.239.47.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:2f:37:50:66:d1:42:21:d3:57:b0:2d:d9:59:2d:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411dea53467b6c7143eb23d284569a8183b2e82f
Validity
Not Before: Jan 1 11:54:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=72e3854f108c3fdc2ef63dfcf1279c3f8484f6da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bf:a8:90:70:9e:7d:23:6f:d0:95:49:29:c2:
3a:5d:4d:3a:9d:c7:ab:04:ec:8d:4d:cf:23:dc:04:
f1:58:89:c8:71:c7:00:56:38:42:ad:bd:13:d4:e4:
25:6d:17:f3:de:22:71:25:d2:2c:c5:2b:a4:8a:f1:
f5:44:2d:cc:9b:77:42:5e:a7:b5:4d:d9:06:20:90:
d8:50:83:3f:5b:58:0c:75:5a:57:c1:d8:59:16:9d:
43:d4:04:f0:0b:f3:0b:b3:33:0e:bb:a5:c8:70:70:
4d:88:af:48:c4:43:dc:8a:eb:d7:98:be:e6:ce:a0:
05:43:ee:27:61:49:6c:77:3b:a0:15:94:c8:c8:fa:
d3:fc:63:e5:92:f8:64:23:81:5b:69:fb:62:dc:ab:
44:60:41:82:89:3a:0b:e6:1b:4d:11:6d:c6:b9:1c:
3f:98:3f:20:8f:b5:64:02:6f:76:41:97:3e:b2:93:
7a:40:73:3f:93:2a:37:6e:db:3f:2f:96:53:ff:38:
ee:d7:e0:88:a5:ff:1f:e1:a3:8d:70:42:a3:2d:ad:
20:3b:69:aa:02:17:0b:53:44:a7:c9:03:85:fe:cb:
88:8b:6b:ad:52:e0:35:38:07:c1:2b:58:d6:71:86:
64:2b:1e:14:32:31:a1:2a:b3:d3:11:36:e8:6d:db:
28:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:E3:85:4F:10:8C:3F:DC:2E:F6:3D:FC:F1:27:9C:3F:84:84:F6:DA
X509v3 Authority Key Identifier:
keyid:41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/cuOFTxCMP9wu9j388SecP4SE9to.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.239.0.0/22
84.239.5.0-84.239.7.255
84.239.10.0/24
84.239.12.0/23
84.239.47.0-84.239.48.255
Signature Algorithm: sha256WithRSAEncryption
17:58:db:99:ab:d5:ef:3e:fb:b3:07:0f:7b:99:b0:27:c7:46:
92:6d:32:8c:cb:49:25:94:d1:3c:67:77:f6:b6:f0:c3:6e:fd:
9d:3e:75:dc:92:fd:ff:9e:3d:09:31:da:55:76:ce:0a:5d:97:
56:b3:e8:61:9e:7e:01:45:a8:cf:d1:0f:30:59:23:7b:06:51:
e5:54:48:e3:de:61:56:2b:66:ec:8f:a7:16:6d:29:a3:c2:00:
02:36:54:91:51:51:6c:9c:fd:2b:ce:8f:3f:3d:30:e4:7c:48:
7a:ca:cf:b3:88:50:39:b2:d3:bb:91:9c:05:4b:d4:80:91:b9:
ee:6d:4e:da:fd:79:ed:66:84:a1:e0:1d:46:16:dd:ff:b4:46:
69:a4:f3:38:54:d2:66:63:ba:28:b1:77:f2:83:b6:fc:18:24:
06:aa:7a:ff:99:17:82:15:01:e9:53:26:3c:81:9e:f5:33:66:
81:72:ac:66:99:79:48:10:a8:91:28:08:9d:24:8a:db:24:81:
82:46:b2:59:70:15:f9:c8:ae:60:9f:a6:46:ee:43:78:7f:c4:
dc:b0:88:56:d6:e6:3f:ec:7a:f6:72:a3:d8:20:9a:6c:bd:0c:
ff:9c:a3:d5:a2:40:aa:bb:58:6e:e0:1a:fd:a8:08:1c:01:77:
63:05:cd:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:31:37 2025 by rpki-client