Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/118413-b7aa-459c-99fa-4de1b520a594/1/8bfhCCHpWar7xa4ZtBAh1h9PYxs.roa
File: 8bfhCCHpWar7xa4ZtBAh1h9PYxs.roa (raw, json)
Hash identifier: 6Bdv9JAJcUzt09sFhOBKhMAnyTFhiEzYQ6sVwxvshCw=
Subject key identifier: F1:B7:E1:08:21:E9:59:AA:FB:C5:AE:19:B4:10:21:D6:1F:4F:63:1B
Certificate issuer: /CN=279669579b3ce61ee8ee7d6af7e314b0f726361f
Certificate serial: 0858F9BD
Authority key identifier: 27:96:69:57:9B:3C:E6:1E:E8:EE:7D:6A:F7:E3:14:B0:F7:26:36:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5ZpV5s85h7o7n1q9-MUsPcmNh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/118413-b7aa-459c-99fa-4de1b520a594/1/8bfhCCHpWar7xa4ZtBAh1h9PYxs.roa
Signing time: Sat 01 Jan 2022 08:54:38 +0000
ROA not before: Sat 01 Jan 2022 08:54:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 396362
IP address blocks: 185.129.123.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 140048829 (0x858f9bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279669579b3ce61ee8ee7d6af7e314b0f726361f
Validity
Not Before: Jan 1 08:54:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f1b7e10821e959aafbc5ae19b41021d61f4f631b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a3:9b:39:7a:ca:7f:a8:ff:ff:ea:83:c8:5d:
a8:35:c0:d3:17:42:a8:b0:1c:b8:7a:a0:bc:3c:a7:
22:8e:f4:88:09:20:9b:05:6e:de:5d:9b:70:d9:2e:
b9:31:60:68:0b:cb:1d:7a:23:e6:38:6e:6c:c1:e6:
c9:8e:56:88:22:06:4c:8b:9c:b9:a7:62:11:7e:61:
27:df:16:d8:0c:91:41:d1:5c:ee:dd:de:56:36:86:
b9:77:a5:a0:ef:a1:e8:03:51:f1:64:e3:d8:e7:4f:
bd:24:5d:53:cd:a7:45:c1:c8:ba:0d:b0:df:8e:28:
eb:33:7d:48:1f:43:84:af:27:b8:1b:5a:30:a9:d4:
80:50:54:c3:de:92:ca:40:e7:b0:03:48:3f:1b:1c:
32:e2:cd:d0:4c:1d:76:dc:56:32:02:56:c6:69:e1:
ca:ca:8c:6e:4a:13:23:6e:f3:72:3d:4c:ca:31:95:
73:ce:77:3b:79:24:1e:0c:ae:8e:56:47:69:69:f5:
7f:de:7b:be:68:8d:c2:b1:0e:24:f5:73:ac:e9:60:
0e:15:bf:dc:6e:23:45:e3:99:b1:5f:00:d9:09:a9:
2e:f0:07:6b:3c:2d:62:fc:c1:13:0d:e0:46:79:e2:
dc:50:0d:fc:4f:f1:ba:06:ea:3b:ad:69:91:ec:83:
de:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:B7:E1:08:21:E9:59:AA:FB:C5:AE:19:B4:10:21:D6:1F:4F:63:1B
X509v3 Authority Key Identifier:
keyid:27:96:69:57:9B:3C:E6:1E:E8:EE:7D:6A:F7:E3:14:B0:F7:26:36:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5ZpV5s85h7o7n1q9-MUsPcmNh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/118413-b7aa-459c-99fa-4de1b520a594/1/8bfhCCHpWar7xa4ZtBAh1h9PYxs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/118413-b7aa-459c-99fa-4de1b520a594/1/J5ZpV5s85h7o7n1q9-MUsPcmNh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.129.123.0/24
Signature Algorithm: sha256WithRSAEncryption
06:3d:d2:5c:44:3a:64:7c:87:f0:f6:36:5b:61:a9:c6:58:1f:
93:96:66:e7:00:c1:9d:87:d6:06:8e:97:f9:2d:63:50:0a:f2:
7e:c9:c1:03:3c:f5:7d:ce:66:25:0b:4d:02:fd:3c:5a:e9:a2:
dd:76:94:ee:f5:9e:db:02:3c:b3:37:8a:d4:0a:24:96:b2:f1:
8d:44:d5:4e:c1:d6:28:f2:2e:b4:20:88:f3:2e:3a:0e:fe:37:
a4:68:e3:7c:c2:e3:ee:8e:0e:c1:67:6f:9d:12:da:50:5a:cd:
d1:6b:65:62:53:14:59:bd:93:06:5a:a7:8a:15:04:c8:03:48:
5c:09:bf:09:d0:2f:62:26:3d:3d:c5:83:52:6c:78:75:0c:91:
dc:5f:a2:0e:77:84:6f:fe:9c:a9:da:25:37:1f:62:7b:e4:be:
04:ac:88:eb:b7:aa:25:cc:db:99:c2:6e:71:2b:f9:a3:3b:ac:
ed:86:25:be:e1:c7:9e:23:86:4e:8b:fd:10:3a:10:c2:ac:c8:
5e:14:ba:f3:e3:c7:db:4b:af:6b:26:e1:e0:92:69:44:28:31:
a0:d2:77:77:e5:10:8f:01:fd:fe:c0:67:bb:b4:e4:9e:c0:7c:
ae:61:59:73:f6:62:51:c6:7a:36:93:f6:44:52:17:f9:08:21:
ef:f5:25:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:06 2023 by rpki-client on console-fra.rpki-client.org