Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/m8hBBgVMR0a2QJmaukYQdmTDEEk.roa
File: m8hBBgVMR0a2QJmaukYQdmTDEEk.roa (raw, json)
Hash identifier: mLmn+rOPlfO4GHoiDbp2spSJ/zcpfPCG1bLbNK5dO4M=
Subject key identifier: 9B:C8:41:06:05:4C:47:46:B6:40:99:9A:BA:46:10:76:64:C3:10:49
Certificate issuer: /CN=411dea53467b6c7143eb23d284569a8183b2e82f
Certificate serial: 01869A33B7C8BF39801A3AD61AA0C83DEB51
Authority key identifier: 41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/m8hBBgVMR0a2QJmaukYQdmTDEEk.roa
Signing time: Tue 28 Feb 2023 22:45:25 +0000
ROA not before: Tue 28 Feb 2023 22:45:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21294
IP address blocks: 84.239.16.0/23 maxlen: 23
84.239.24.0/24 maxlen: 24
84.239.23.0/24 maxlen: 24
84.239.22.0/24 maxlen: 24
84.239.20.0/24 maxlen: 24
84.239.19.0/24 maxlen: 24
84.239.31.0/24 maxlen: 24
84.239.28.0/24 maxlen: 24
84.239.26.0/24 maxlen: 24
84.239.25.0/24 maxlen: 24
84.239.53.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9a:33:b7:c8:bf:39:80:1a:3a:d6:1a:a0:c8:3d:eb:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411dea53467b6c7143eb23d284569a8183b2e82f
Validity
Not Before: Feb 28 22:45:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9bc84106054c4746b640999aba46107664c31049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9e:30:c3:33:95:a2:a7:94:6e:a1:00:2a:87:
5b:64:97:a8:ec:38:7e:68:e2:0e:87:5c:db:dd:d7:
85:bb:b7:62:70:88:c3:54:be:d3:c1:3c:d9:bc:4e:
99:9e:fd:99:de:63:bf:72:29:db:7a:1c:3e:b6:82:
34:1b:b4:4d:51:0d:da:30:24:fd:7c:87:af:dc:e4:
d5:e9:37:09:5d:f2:a9:62:17:d4:33:bb:bd:d9:ac:
ce:f4:dd:4a:66:68:1a:e9:6e:9d:b3:f8:aa:7d:a2:
7e:11:35:4d:03:21:d1:89:85:00:c4:f2:b0:b4:e4:
43:a3:fe:2e:c9:0f:cd:9b:1d:e7:23:55:bc:70:d8:
1a:93:ee:16:f7:77:e7:9e:c8:9a:1b:b7:e4:d8:a6:
42:be:85:57:a3:bb:13:eb:0d:e0:6c:96:18:0e:62:
56:6b:51:17:eb:ee:f9:60:18:19:18:5f:83:88:f1:
4f:b1:67:1e:51:c0:e4:9f:af:52:9e:32:6a:f2:9a:
9c:2f:ef:69:a8:ac:06:b7:88:68:3d:35:53:72:f0:
48:42:2a:ce:51:01:0c:73:83:bf:a8:4c:93:57:8e:
02:09:57:73:98:eb:9c:36:59:8b:65:4b:7b:6d:5f:
21:cb:6a:e0:21:2a:d1:e9:51:b1:3a:72:60:2b:c5:
73:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:C8:41:06:05:4C:47:46:B6:40:99:9A:BA:46:10:76:64:C3:10:49
X509v3 Authority Key Identifier:
keyid:41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/m8hBBgVMR0a2QJmaukYQdmTDEEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.239.16.0/23
84.239.19.0-84.239.20.255
84.239.22.0-84.239.26.255
84.239.28.0/24
84.239.31.0/24
84.239.53.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:06:4c:f2:3f:ac:3b:50:64:ad:38:94:db:e8:39:f9:e7:17:
1c:be:98:d3:9e:29:bc:34:3f:aa:31:f4:bc:df:cd:61:cf:2c:
b9:86:04:5b:5e:8c:02:59:5e:8f:25:2c:c4:7d:28:fb:a0:dd:
ff:19:c9:43:b9:ca:33:47:36:5a:95:1a:90:8a:6b:ac:d6:5d:
14:3a:1b:9b:ac:03:66:ad:c9:3c:db:72:a3:f3:1f:ff:a0:bf:
15:b6:ad:16:d3:a8:0c:c9:16:d2:53:36:b3:41:65:e6:3b:87:
19:19:5a:dc:01:4a:28:b6:e7:ea:4c:57:6e:12:97:47:e1:c9:
22:34:0c:a9:9c:17:73:84:7e:5e:3f:a2:a7:3c:6c:2c:ce:03:
fa:08:d3:24:72:db:d1:3c:59:76:ec:0c:b4:4d:5f:5e:c2:f2:
8f:95:39:cf:77:19:34:bb:9f:ad:35:d5:70:67:eb:ee:6c:74:
62:26:1e:13:43:de:a4:00:f7:81:60:75:13:25:2e:a1:7b:29:
32:78:0c:f4:47:95:a2:8b:6e:d9:34:ba:ec:21:b0:72:61:1a:
7f:c1:1c:46:d4:a7:b7:62:ad:db:0e:87:b4:16:46:c1:97:80:
3b:aa:30:2a:e1:ed:85:0a:c7:95:cd:27:8d:39:92:76:eb:2e:
d6:f4:ef:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:58 2025 by rpki-client