Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/118413-b7aa-459c-99fa-4de1b520a594/1/d77xaE-dpXFp0dTFTht7vYSfhq8.roa
File: d77xaE-dpXFp0dTFTht7vYSfhq8.roa (raw, json)
Hash identifier: eTQKKneqqcN4ooISCqw2gww7xXGSfDusl0C6bRsgqe4=
Subject key identifier: 77:BE:F1:68:4F:9D:A5:71:69:D1:D4:C5:4E:1B:7B:BD:84:9F:86:AF
Certificate issuer: /CN=279669579b3ce61ee8ee7d6af7e314b0f726361f
Certificate serial: 085784FB
Authority key identifier: 27:96:69:57:9B:3C:E6:1E:E8:EE:7D:6A:F7:E3:14:B0:F7:26:36:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5ZpV5s85h7o7n1q9-MUsPcmNh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/118413-b7aa-459c-99fa-4de1b520a594/1/d77xaE-dpXFp0dTFTht7vYSfhq8.roa
Signing time: Sat 01 Jan 2022 08:54:38 +0000
ROA not before: Sat 01 Jan 2022 08:54:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203512
IP address blocks: 185.129.120.0/24 maxlen: 24
185.129.123.0/24 maxlen: 24
185.129.122.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139953403 (0x85784fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279669579b3ce61ee8ee7d6af7e314b0f726361f
Validity
Not Before: Jan 1 08:54:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=77bef1684f9da57169d1d4c54e1b7bbd849f86af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3b:71:7e:8d:3d:7c:51:2a:6a:89:7f:42:0f:
3a:40:31:4b:5a:c7:b0:c2:aa:9f:2b:ba:49:b3:e3:
b1:8c:e7:00:66:62:e6:46:ed:cc:77:7c:60:a6:16:
7c:25:48:c6:22:85:7f:1e:5f:42:24:c2:17:f8:2e:
d8:ce:2d:58:09:2a:83:c3:10:04:a7:ad:64:11:50:
12:c9:78:47:ea:35:75:d1:6c:74:49:58:43:69:17:
cf:f9:d1:f0:6a:c1:3d:5c:8a:3d:fd:7f:9b:9a:0b:
b5:05:5d:3c:93:cd:be:77:dd:35:7c:54:29:d4:4d:
8d:67:c8:3b:44:6c:fb:67:8c:8c:ed:3c:6d:58:c3:
44:88:8c:d6:5a:98:9b:e3:df:6b:18:ac:6d:81:ed:
bd:b9:bc:d9:91:b6:bf:8b:8d:73:18:07:52:bb:1e:
59:be:8b:4c:ec:af:ea:97:c6:00:b1:c9:e4:8c:e5:
ba:68:19:5c:b5:8f:72:d0:94:cf:3f:bd:31:42:6d:
88:74:e8:28:0b:a9:4d:f4:1f:fa:ae:f0:27:4f:ab:
70:f7:e2:82:67:f7:44:69:46:7a:af:1a:e8:99:6f:
27:3f:b3:24:f7:38:62:ab:6d:19:3c:71:a5:5d:a6:
01:f3:0b:a5:29:14:a6:02:25:d6:98:f5:8c:3f:1f:
fc:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:BE:F1:68:4F:9D:A5:71:69:D1:D4:C5:4E:1B:7B:BD:84:9F:86:AF
X509v3 Authority Key Identifier:
keyid:27:96:69:57:9B:3C:E6:1E:E8:EE:7D:6A:F7:E3:14:B0:F7:26:36:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5ZpV5s85h7o7n1q9-MUsPcmNh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/118413-b7aa-459c-99fa-4de1b520a594/1/d77xaE-dpXFp0dTFTht7vYSfhq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/118413-b7aa-459c-99fa-4de1b520a594/1/J5ZpV5s85h7o7n1q9-MUsPcmNh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.129.120.0/24
185.129.122.0/23
Signature Algorithm: sha256WithRSAEncryption
57:20:d4:50:0b:70:62:e3:96:6d:8c:5e:2a:39:d8:6c:37:43:
c5:27:e4:81:25:44:19:f1:26:14:7a:a3:f9:05:09:1d:56:7e:
65:73:25:7d:46:5d:ec:24:8e:95:84:f7:0c:ae:a3:d7:12:a0:
7c:3f:ed:62:c2:ff:8b:db:c0:15:a8:51:cc:51:2d:ce:1b:af:
ea:76:21:4e:1f:77:7f:ad:83:7c:60:d8:21:b6:78:11:26:33:
70:de:eb:d4:d7:5c:8f:72:2d:d0:47:93:7d:69:0f:fd:52:33:
f1:a2:77:3c:7e:63:17:c0:48:c7:d1:83:26:de:43:ca:59:b7:
87:4b:cc:71:ea:ca:19:0a:74:3d:a3:46:e8:4c:17:dd:c5:23:
59:ee:7b:a7:01:7c:6d:41:49:0f:2f:a7:14:9c:bd:b9:a4:58:
fc:30:f1:0c:16:60:0a:53:ec:d9:87:60:1e:9e:aa:b1:ce:4a:
12:28:7d:8d:7a:15:61:fb:ab:5f:ea:83:f5:77:06:c1:f2:d0:
d0:e7:f8:10:14:9d:49:6b:f0:67:38:7f:5c:87:d9:d8:11:83:
7d:90:63:64:c4:5b:61:9f:ed:33:b1:71:7f:7e:17:fb:3a:fa:
49:de:18:a7:60:cc:48:12:4a:15:f8:bb:66:71:b7:c2:8b:75:
6e:a2:5e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:46 2023 by rpki-client on console-ams.rpki-client.org