Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/118413-b7aa-459c-99fa-4de1b520a594/1/R1zd-fsLgxQaGIWD3BoOpGO5pW8.roa
File: R1zd-fsLgxQaGIWD3BoOpGO5pW8.roa (raw, json)
Hash identifier: uDVJLUthVe9kZFttQZAzQpvxqvxt+QJZI3l8JE7v3k8=
Subject key identifier: 47:5C:DD:F9:FB:0B:83:14:1A:18:85:83:DC:1A:0E:A4:63:B9:A5:6F
Certificate issuer: /CN=279669579b3ce61ee8ee7d6af7e314b0f726361f
Certificate serial: 08568020
Authority key identifier: 27:96:69:57:9B:3C:E6:1E:E8:EE:7D:6A:F7:E3:14:B0:F7:26:36:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5ZpV5s85h7o7n1q9-MUsPcmNh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/118413-b7aa-459c-99fa-4de1b520a594/1/R1zd-fsLgxQaGIWD3BoOpGO5pW8.roa
Signing time: Sat 01 Jan 2022 08:54:37 +0000
ROA not before: Sat 01 Jan 2022 08:54:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60781
IP address blocks: 185.129.121.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139886624 (0x8568020)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279669579b3ce61ee8ee7d6af7e314b0f726361f
Validity
Not Before: Jan 1 08:54:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=475cddf9fb0b83141a188583dc1a0ea463b9a56f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ad:3a:f7:fd:14:2c:46:e4:14:f2:d8:06:3e:
18:1d:36:03:01:30:1a:54:d9:ae:15:0a:2f:3d:07:
3d:75:22:96:c2:21:85:9b:05:71:6b:6c:4e:be:11:
12:f7:b5:7f:e8:a6:a7:f1:80:c3:8b:b0:a5:17:a7:
02:60:9b:ed:81:60:36:e8:73:e3:c0:e6:4a:63:ab:
69:b7:9a:b3:f7:c6:b2:ba:93:83:10:a2:ce:64:70:
4b:1c:b4:1f:8e:46:c6:cc:47:7c:6b:a2:fa:c2:ad:
e3:21:d6:76:75:25:60:27:f4:39:5d:a8:1f:d5:e4:
e6:c7:3d:23:2d:ca:58:8c:b3:c2:c9:c6:0e:47:43:
bb:19:c0:a6:2f:9f:ac:35:96:37:24:a8:0d:04:26:
48:25:52:a5:59:53:0f:e1:ba:bd:46:b6:c8:8c:42:
ad:ab:d3:79:dd:b2:fc:1e:f6:6c:d9:53:c5:de:9c:
f7:8d:75:94:4e:1e:f8:79:c7:8b:5a:d9:e0:7b:3f:
79:55:24:d9:0f:29:b9:ba:58:30:aa:5f:65:3f:6b:
cc:64:72:1c:10:8e:d2:ff:ca:e9:f6:65:bb:16:7b:
85:f1:27:e8:f3:7a:82:f2:2c:1d:b1:b5:2b:dc:b5:
71:d0:ff:dd:77:1b:85:ac:e0:4e:98:7c:0b:bc:7e:
45:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:5C:DD:F9:FB:0B:83:14:1A:18:85:83:DC:1A:0E:A4:63:B9:A5:6F
X509v3 Authority Key Identifier:
keyid:27:96:69:57:9B:3C:E6:1E:E8:EE:7D:6A:F7:E3:14:B0:F7:26:36:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5ZpV5s85h7o7n1q9-MUsPcmNh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/118413-b7aa-459c-99fa-4de1b520a594/1/R1zd-fsLgxQaGIWD3BoOpGO5pW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/118413-b7aa-459c-99fa-4de1b520a594/1/J5ZpV5s85h7o7n1q9-MUsPcmNh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.129.121.0/24
Signature Algorithm: sha256WithRSAEncryption
52:b7:28:16:8a:11:32:bd:9d:3b:78:27:75:8d:f1:0d:ca:1c:
83:4d:d1:e6:42:92:83:40:5f:00:a0:79:fb:79:71:3a:37:6a:
d6:01:b3:aa:37:4b:ae:06:32:a4:59:e1:98:9f:a5:59:d7:98:
0c:cf:83:22:25:29:9a:d8:68:d6:84:59:6f:c0:d7:2b:35:d7:
9e:68:c3:92:dd:9e:81:3a:2f:17:8e:aa:dd:09:c7:6a:8c:5c:
3b:02:b5:9f:0e:98:e6:dd:28:6e:8f:0d:59:b9:a8:55:3c:b6:
ba:51:97:88:77:b2:e1:0c:e8:dd:6b:a0:55:67:f5:13:f7:5a:
d9:17:46:44:d4:74:d6:2f:f5:be:5f:b8:e3:af:f6:38:f8:f2:
5f:b2:f9:b8:27:c1:9d:ff:97:16:9d:63:cb:f0:2e:cb:71:e8:
c1:cb:eb:18:ec:64:af:a3:b2:16:5c:ee:19:1f:79:3a:c6:65:
83:31:23:92:0a:5f:13:93:fe:95:4c:54:f6:bc:df:80:03:b2:
2f:46:d9:2d:4d:b1:7c:ef:c0:55:12:f6:30:eb:05:8d:d0:26:
62:83:3e:93:74:aa:0b:97:c2:b4:eb:40:e8:23:e2:92:13:93:
aa:e8:94:65:33:e0:8d:19:c2:67:57:05:40:b9:a1:b5:5d:9f:
ef:32:87:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:17 2024 by rpki-client on console-ams.rpki-client.org