Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/IS1ZAGS-ciE6D88jJHPwuO330d0.roa
File: IS1ZAGS-ciE6D88jJHPwuO330d0.roa (raw, json)
Hash identifier: CmFOeLI4CPn9z4TCR0SWV038lu5mq555rkVc5o9ohYI=
Subject key identifier: 21:2D:59:00:64:BE:72:21:3A:0F:CF:23:24:73:F0:B8:ED:F7:D1:DD
Certificate issuer: /CN=bde2db8498ee8f7b3ab5caae83829596620702c1
Certificate serial: 0A036B9F
Authority key identifier: BD:E2:DB:84:98:EE:8F:7B:3A:B5:CA:AE:83:82:95:96:62:07:02:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veLbhJjuj3s6tcqug4KVlmIHAsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/IS1ZAGS-ciE6D88jJHPwuO330d0.roa
Signing time: Sat 01 Jan 2022 15:06:10 +0000
ROA not before: Sat 01 Jan 2022 15:06:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41325
IP address blocks: 84.38.48.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 167996319 (0xa036b9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bde2db8498ee8f7b3ab5caae83829596620702c1
Validity
Not Before: Jan 1 15:06:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=212d590064be72213a0fcf232473f0b8edf7d1dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:83:79:6a:45:53:a0:4d:77:a7:eb:38:fa:7e:
39:11:5d:64:fe:d4:4a:4c:10:45:e0:03:d1:9c:4a:
26:3a:e9:49:06:3c:3d:17:da:50:91:28:c7:b9:c6:
e8:59:ad:5f:bc:ac:87:7f:7a:61:6d:ac:6a:f3:dd:
db:68:62:88:93:82:4c:67:5b:63:38:18:b0:aa:70:
0f:0d:b8:13:7f:7f:86:36:44:4f:58:53:e1:3a:87:
e4:59:be:af:3d:3f:b1:45:a7:8e:84:90:ca:fd:2c:
dc:50:cb:65:66:c3:bb:1b:40:31:83:b5:15:53:4f:
66:bc:65:cc:1a:65:2d:48:b5:74:4e:46:48:e1:b8:
0a:e2:40:d8:c7:74:2f:06:30:f8:c6:67:64:b2:58:
95:54:2d:d8:fe:bb:4a:a2:38:50:66:db:05:76:79:
42:0a:c6:40:a8:a1:5c:51:b6:e4:3f:4d:1d:49:6f:
fd:7c:b7:2b:88:38:70:d3:7b:3b:ac:de:87:9d:05:
54:9e:95:db:96:5d:23:a9:83:6a:41:88:2e:2b:90:
67:dd:41:c9:7d:e7:35:eb:25:3d:b5:fd:ae:c3:32:
1f:d4:07:a7:7e:30:bf:de:97:16:3e:f8:7e:7d:7c:
b6:11:68:4e:fb:a8:c0:65:79:8d:5b:ee:62:0d:45:
f1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:2D:59:00:64:BE:72:21:3A:0F:CF:23:24:73:F0:B8:ED:F7:D1:DD
X509v3 Authority Key Identifier:
keyid:BD:E2:DB:84:98:EE:8F:7B:3A:B5:CA:AE:83:82:95:96:62:07:02:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veLbhJjuj3s6tcqug4KVlmIHAsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/IS1ZAGS-ciE6D88jJHPwuO330d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.38.48.0/20
Signature Algorithm: sha256WithRSAEncryption
89:65:08:cf:7c:11:60:a6:64:32:ca:07:52:1a:fe:c5:e7:f9:
94:40:ca:19:6e:17:d9:79:c5:fb:8c:d2:58:c8:c5:70:04:25:
3c:2f:4f:db:23:ed:7b:89:89:21:bd:0e:b7:20:64:5a:5b:e2:
0f:c2:f1:b5:42:ca:ed:12:61:6d:66:91:4e:09:0d:5f:66:10:
4f:17:51:4b:b2:83:77:b8:83:03:dc:1d:97:09:9f:f5:b1:33:
eb:f1:b2:d5:a3:84:fb:8b:4e:72:00:e8:a1:47:c7:96:15:53:
ba:80:a4:bc:6d:53:6d:88:30:13:fc:f5:58:87:30:e1:bb:43:
37:16:9f:f3:0b:ba:a4:ea:04:30:9a:92:35:6d:72:b6:f2:97:
3b:02:96:41:6a:a0:de:74:79:79:20:14:6e:1f:b9:a5:44:a1:
29:45:55:81:3e:a6:20:b2:e1:61:e5:e4:07:88:55:7d:33:e0:
61:88:1c:e1:3f:71:a7:5e:c8:38:37:e8:e0:0f:e3:51:dd:f1:
ee:38:f5:bb:fa:b1:60:31:df:ae:f8:c7:f1:5c:5e:5b:c4:69:
c9:46:f4:4b:f3:3b:ea:c9:c6:29:1a:72:60:01:b1:eb:85:b7:
b0:52:c1:6c:ce:2d:4f:c1:1d:75:a9:a5:c1:54:17:48:40:2f:
6f:29:fb:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:27:58 2025 by rpki-client