Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/paJGByaIoIOdE_9mkNgvcjDc7aE.roa
File: paJGByaIoIOdE_9mkNgvcjDc7aE.roa (raw, json)
Hash identifier: r+CbvYRkxVzbjqV3OpW7Syr8a+ydOAlE66RbfDG0RN4=
Subject key identifier: A5:A2:46:07:26:88:A0:83:9D:13:FF:66:90:D8:2F:72:30:DC:ED:A1
Certificate issuer: /CN=411dea53467b6c7143eb23d284569a8183b2e82f
Certificate serial: 059DE2
Authority key identifier: 41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/paJGByaIoIOdE_9mkNgvcjDc7aE.roa
Signing time: Thu 26 May 2022 17:13:14 +0000
ROA not before: Thu 26 May 2022 17:13:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21294
IP address blocks: 84.239.16.0/23 maxlen: 23
84.239.24.0/24 maxlen: 24
84.239.23.0/24 maxlen: 24
84.239.22.0/24 maxlen: 24
84.239.20.0/24 maxlen: 24
84.239.19.0/24 maxlen: 24
84.239.26.0/24 maxlen: 24
84.239.25.0/24 maxlen: 24
84.239.53.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 368098 (0x59de2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411dea53467b6c7143eb23d284569a8183b2e82f
Validity
Not Before: May 26 17:13:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a5a246072688a0839d13ff6690d82f7230dceda1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fa:b3:b4:5c:0f:17:e4:3b:68:dc:df:7a:77:
35:e4:57:58:93:b9:6b:66:32:82:6e:a6:c8:66:19:
94:af:5c:9b:0a:4e:00:82:06:97:cc:c1:17:5e:02:
10:d0:aa:fb:ff:ba:2e:8e:30:b1:70:c4:1f:78:80:
e7:4f:03:76:37:76:f0:ae:19:b6:36:3c:c0:d1:3e:
4b:3d:b2:5f:65:78:76:3e:77:03:88:fc:d6:53:02:
2f:54:c4:00:9c:ad:87:a5:17:db:6a:51:10:be:35:
8b:51:67:58:1f:d9:77:5d:e2:cf:07:56:fb:55:31:
10:ff:85:a3:8e:b0:b1:83:44:b1:ab:6e:4c:f7:0b:
3d:b7:3a:bc:34:82:bf:79:a1:43:47:ca:96:97:39:
88:bf:5d:c6:9b:75:b7:9c:fb:40:08:7b:41:51:70:
cc:6d:1f:10:39:71:fc:2b:2b:33:ad:17:3e:03:61:
66:83:dc:92:75:9a:aa:c3:0e:56:ef:72:dc:77:8e:
11:5e:9c:f1:a1:b4:fe:b3:ab:5b:35:71:f9:45:c8:
4a:ed:82:09:99:c1:45:2e:34:73:19:cc:52:a2:20:
e9:17:5a:32:f7:6a:64:fa:8e:75:2c:ab:96:39:d6:
e7:94:3f:af:f4:24:0f:53:47:a2:6c:e8:2c:b1:13:
49:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:A2:46:07:26:88:A0:83:9D:13:FF:66:90:D8:2F:72:30:DC:ED:A1
X509v3 Authority Key Identifier:
keyid:41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/paJGByaIoIOdE_9mkNgvcjDc7aE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.239.16.0/23
84.239.19.0-84.239.20.255
84.239.22.0-84.239.26.255
84.239.53.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:ad:84:c6:c5:61:6b:79:c9:fc:fb:7d:ef:4c:31:ca:f3:ca:
03:64:ed:27:27:13:16:15:cd:70:e7:27:10:47:69:55:6c:ca:
10:a6:84:cf:49:7e:e8:40:76:ad:bb:07:2f:10:df:c9:c3:67:
1c:05:da:d6:92:fc:3a:4d:22:53:94:35:7c:50:93:84:a9:c9:
50:bc:14:c9:3e:19:f4:aa:32:5e:57:d1:9b:3e:65:67:83:6b:
67:63:92:bd:15:05:3c:c2:87:68:a8:4d:83:2a:ee:f4:fb:45:
49:ce:89:e5:40:b8:42:50:45:b9:9e:dc:4e:d3:3b:6d:a8:d2:
c0:2c:f4:ff:1a:ce:b7:65:64:0b:09:c4:d1:26:3e:99:58:1d:
63:67:97:a7:8b:1e:5c:32:03:3c:00:ef:f6:54:48:48:0a:76:
4b:ce:f8:a8:7f:93:c1:24:74:c7:a6:b4:43:5e:8f:ef:6a:66:
05:a0:0b:75:13:10:ea:47:6e:45:e4:49:a8:36:7b:53:07:55:
d2:34:98:c7:c9:43:d7:1d:b5:99:07:e1:ad:17:10:4f:6b:19:
74:27:c3:6f:e8:b0:9d:fe:ef:15:bb:4f:fb:9a:63:44:50:ac:
75:75:f5:01:4c:f7:a1:2c:08:bc:fe:1f:9e:9d:fd:2a:0e:9c:
3c:22:be:fc
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIDBZ3iMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQx
MWRlYTUzNDY3YjZjNzE0M2ViMjNkMjg0NTY5YTgxODNiMmU4MmYwHhcNMjIwNTI2
MTcxMzE0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhhNWEyNDYwNzI2ODhh
MDgzOWQxM2ZmNjY5MGQ4MmY3MjMwZGNlZGExMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAxPqztFwPF+Q7aNzfenc15FdYk7lrZjKCbqbIZhmUr1ybCk4A
ggaXzMEXXgIQ0Kr7/7oujjCxcMQfeIDnTwN2N3bwrhm2NjzA0T5LPbJfZXh2PncD
iPzWUwIvVMQAnK2HpRfbalEQvjWLUWdYH9l3XeLPB1b7VTEQ/4WjjrCxg0Sxq25M
9ws9tzq8NIK/eaFDR8qWlzmIv13Gm3W3nPtACHtBUXDMbR8QOXH8KyszrRc+A2Fm
g9ySdZqqww5W73Lcd44RXpzxobT+s6tbNXH5RchK7YIJmcFFLjRzGcxSoiDpF1oy
92pk+o51LKuWOdbnlD+v9CQPU0eibOgssRNJcQIDAQABo4ICKzCCAicwHQYDVR0O
BBYEFKWiRgcmiKCDnRP/ZpDYL3Iw3O2hMB8GA1UdIwQYMBaAFEEd6lNGe2xxQ+sj
0oRWmoGDsugvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
UVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4LmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9lMS9lYWNjZTUtZTRkZC00ZDlmLThlYzEtNDcxMjBiOTA2OWI3LzEv
cGFKR0J5YUlvSU9kRV85bWtOZ3ZjakRjN2FFLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9l
YWNjZTUtZTRkZC00ZDlmLThlYzEtNDcxMjBiOTA2OWI3LzEvUVIzcVUwWjdiSEZE
NnlQU2hGYWFnWU95NkM4LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEEG
CCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoAwQBVO8QMAwDBABU7xMDBABU7xQwDAME
AVTvFgMEAFTvGgMEAFTvNTANBgkqhkiG9w0BAQsFAAOCAQEAT62ExsVha3nJ/Pt9
70wxyvPKA2TtJycTFhXNcOcnEEdpVWzKEKaEz0l+6EB2rbsHLxDfycNnHAXa1pL8
Ok0iU5Q1fFCThKnJULwUyT4Z9KoyXlfRmz5lZ4NrZ2OSvRUFPMKHaKhNgyru9PtF
Sc6J5UC4QlBFuZ7cTtM7bajSwCz0/xrOt2VkCwnE0SY+mVgdY2eXp4seXDIDPADv
9lRISAp2S874qH+TwSR0x6a0Q16P72pmBaALdRMQ6kduReRJqDZ7UwdV0jSYx8lD
1x21mQfhrRcQT2sZdCfDb+iwnf7vFbtP+5pjRFCsdXX1AUz3oSwIvP4fnp39Kg6c
PCK+/A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:02 2024 by rpki-client on console-fra.rpki-client.org