Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/3334f8-dace-497f-a5a3-814e80904be4/1/s4-i-LDXWSB__P8MDUiMdAW-Dnk.roa
File: s4-i-LDXWSB__P8MDUiMdAW-Dnk.roa (raw, json)
Hash identifier: FjXv8n6QCilJdntbpOCfRTsBmU7bXLutbiHGQF9dQIA=
Subject key identifier: B3:8F:A2:F8:B0:D7:59:20:7F:FC:FF:0C:0D:48:8C:74:05:BE:0E:79
Certificate issuer: /CN=5bea2b884c7067f58fff040a1f06e0df1e80ab3e
Certificate serial: 117FF4AE
Authority key identifier: 5B:EA:2B:88:4C:70:67:F5:8F:FF:04:0A:1F:06:E0:DF:1E:80:AB:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-oriExwZ_WP_wQKHwbg3x6Aqz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/3334f8-dace-497f-a5a3-814e80904be4/1/s4-i-LDXWSB__P8MDUiMdAW-Dnk.roa
Signing time: Sat 01 Jan 2022 12:55:44 +0000
ROA not before: Sat 01 Jan 2022 12:55:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39668
IP address blocks: 92.87.105.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 293598382 (0x117ff4ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bea2b884c7067f58fff040a1f06e0df1e80ab3e
Validity
Not Before: Jan 1 12:55:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b38fa2f8b0d759207ffcff0c0d488c7405be0e79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:b3:21:4d:77:de:4a:b2:6a:58:e1:0a:ed:12:
37:5d:e1:7f:43:28:e6:5f:43:f8:17:c1:77:64:5c:
c8:4c:b8:79:a7:1a:ae:29:8e:fd:c3:30:8d:e1:8e:
18:ba:1a:2a:a3:0a:18:af:45:84:37:98:d0:29:de:
2a:5b:a6:99:2c:46:98:80:b2:eb:b9:bd:6c:18:25:
11:b7:bb:26:b6:ac:49:6b:dd:c3:bd:cd:cf:d6:fc:
d3:85:33:83:56:05:82:5b:88:d3:15:62:d4:b4:2a:
ec:98:dc:ce:3f:ec:83:ae:8d:df:c5:1d:0c:30:13:
af:63:00:57:bb:52:fd:9f:61:61:eb:5d:68:36:e4:
52:a6:c4:95:a8:3f:43:18:ab:26:88:bb:01:89:be:
6c:03:7d:73:fb:d0:cf:35:68:db:0d:9e:00:01:e8:
cd:33:a9:3d:77:36:ce:e6:22:e6:dd:b4:79:15:2a:
be:4c:27:85:44:53:16:41:c0:8d:4e:ff:2d:9f:63:
12:0e:ad:42:dd:05:d9:e3:17:fe:c8:e6:73:72:65:
db:15:c9:dd:ec:a5:b8:a4:62:8d:72:87:d8:72:9a:
8d:9b:08:db:62:5c:a2:3d:f1:38:f7:dd:b3:07:44:
ad:ec:9d:93:8f:cb:b9:be:53:f8:d5:6d:f8:58:35:
25:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:8F:A2:F8:B0:D7:59:20:7F:FC:FF:0C:0D:48:8C:74:05:BE:0E:79
X509v3 Authority Key Identifier:
keyid:5B:EA:2B:88:4C:70:67:F5:8F:FF:04:0A:1F:06:E0:DF:1E:80:AB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-oriExwZ_WP_wQKHwbg3x6Aqz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3334f8-dace-497f-a5a3-814e80904be4/1/s4-i-LDXWSB__P8MDUiMdAW-Dnk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3334f8-dace-497f-a5a3-814e80904be4/1/W-oriExwZ_WP_wQKHwbg3x6Aqz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.87.105.0/24
Signature Algorithm: sha256WithRSAEncryption
01:fb:eb:31:4e:c5:54:ce:a7:fd:83:d6:61:bd:ba:67:67:ed:
f0:a3:14:28:8b:c0:55:d2:26:86:41:34:45:2e:92:cf:c7:fa:
d1:34:ed:c8:77:16:24:f9:38:90:98:6f:94:51:da:25:b3:70:
57:56:e2:4c:35:35:92:6a:c5:94:b1:84:71:c8:58:d8:ba:35:
b6:14:69:aa:47:8b:5a:8d:15:21:4c:b6:29:54:e6:50:9e:26:
48:e8:0b:fc:90:de:b8:ac:91:f7:b1:c2:d9:07:c5:6c:84:e8:
bd:e6:8c:88:c0:f4:d8:9c:54:ca:cc:3f:36:cc:04:fd:cc:79:
f5:41:64:51:fd:34:bc:67:ce:49:ef:76:0a:2f:f7:b1:36:69:
d2:f9:e3:3f:63:d7:fd:f3:8a:83:c3:f6:7c:89:a8:d3:e1:f3:
13:59:dd:ef:65:40:da:cf:5f:0f:45:ce:48:68:a0:36:ce:da:
da:2d:1b:32:0a:ce:7e:43:2d:8b:57:14:fb:6e:a0:af:de:28:
bb:7e:4d:d3:fc:34:e2:81:89:70:c3:b6:56:bb:e7:b1:ab:a1:
99:42:aa:12:db:47:38:c1:0e:5c:39:97:ce:ba:2c:2c:5d:c7:
c7:e4:05:e4:dc:79:d4:f4:17:38:4e:df:81:a5:bf:b7:9e:19:
9b:4b:9b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:36 2024 by rpki-client on console-ams.rpki-client.org