Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/S4NT5IQ1eGp1zP72b2qXVZcb0SQ.roa
File: S4NT5IQ1eGp1zP72b2qXVZcb0SQ.roa (raw, json)
Hash identifier: 2u/qOFSaM7e+vfz5n4Hyw45Hwg0/I1B7Zu9LmwmgmFA=
Subject key identifier: 4B:83:53:E4:84:35:78:6A:75:CC:FE:F6:6F:6A:97:55:97:1B:D1:24
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 488011A1
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/S4NT5IQ1eGp1zP72b2qXVZcb0SQ.roa
Signing time: Sat 01 Jan 2022 03:00:42 +0000
ROA not before: Sat 01 Jan 2022 03:00:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205701
IP address blocks: 5.8.58.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1216352673 (0x488011a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 1 03:00:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4b8353e48435786a75ccfef66f6a9755971bd124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:08:5a:8b:e4:ef:71:47:88:2f:aa:fd:9e:16:
ee:2f:fb:30:ff:0f:92:d8:9f:48:1a:e5:16:59:10:
84:22:31:17:96:3e:c7:0e:61:3b:63:e0:ad:53:2e:
a1:8c:78:32:a9:c6:23:21:08:0c:b0:45:c5:93:80:
84:2c:c1:27:b3:63:0a:9a:37:f3:55:34:ce:ae:af:
c4:24:47:71:57:95:b4:7c:80:ce:62:ef:15:5d:b8:
8b:ce:a6:8c:90:7a:2c:e7:2e:18:b7:42:88:0c:e3:
fc:4d:e9:6c:b7:0f:f6:73:43:05:75:b6:bf:ec:27:
15:61:c9:1f:ce:d8:eb:c9:8b:6c:47:17:cb:96:0f:
22:0f:49:f3:9d:a7:62:dc:ad:9f:ee:c5:40:fc:e1:
8c:76:42:5e:04:2d:55:97:11:ea:80:71:28:9f:bb:
6b:3d:50:47:41:54:81:0e:e0:fd:a6:96:bc:f1:1e:
95:0b:5f:da:60:d9:40:74:95:58:11:8e:91:c1:8e:
68:4a:c0:43:78:da:e7:6d:a4:b7:af:d9:fd:c2:c4:
1d:0c:c7:3a:54:cd:4a:b3:cd:c7:af:31:86:7b:79:
e4:4e:8d:71:b9:d5:32:03:11:1a:c9:3f:7a:ab:cb:
ea:a5:82:0e:87:08:87:01:0a:f7:4d:ff:58:d6:d0:
72:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:83:53:E4:84:35:78:6A:75:CC:FE:F6:6F:6A:97:55:97:1B:D1:24
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/S4NT5IQ1eGp1zP72b2qXVZcb0SQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.58.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:a9:a6:6f:07:dc:e5:e6:6a:1e:23:b8:c6:74:e1:e8:a9:3f:
2b:fb:3e:42:37:16:b5:9b:24:f7:ed:6f:ac:cd:13:fa:05:cb:
27:8a:95:ba:fc:d0:7b:9b:b8:4d:de:fc:92:b2:43:7b:be:de:
c1:ab:ee:91:2c:a3:ca:99:89:1d:ae:a0:9d:f7:34:db:d4:1f:
70:75:91:44:db:7a:c7:7f:4d:8e:2d:62:ff:76:f2:ee:12:70:
ce:2d:84:22:8d:0f:de:92:f0:94:0d:09:90:c5:6a:75:45:79:
e5:51:4c:1b:41:52:b3:c6:36:f0:68:fe:45:fd:b2:1b:da:d0:
ee:b3:72:f1:3f:8d:3b:79:55:b2:eb:d4:09:45:00:57:b5:b3:
eb:53:d5:84:98:49:44:1c:37:a3:87:b1:fb:6f:00:7c:ea:61:
3b:01:b1:9f:6e:86:a8:f1:73:41:18:b7:6f:24:40:13:2d:25:
79:52:8d:44:cb:72:d0:53:0a:e8:a5:3a:64:34:d8:76:0b:28:
0a:26:e5:97:8c:c8:7b:f9:74:49:cd:24:55:44:ae:6e:88:ef:
f9:ea:97:63:19:b0:30:58:10:3e:cd:cc:b9:31:af:44:4b:ea:
d1:ca:24:0c:f0:89:07:28:52:60:58:bc:7f:b5:68:6d:00:21:
b3:45:7c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:43 2023 by rpki-client on console-ams.rpki-client.org