Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/D2izm_1-ir_ueZJPFEKul_O1aOc.roa
File: D2izm_1-ir_ueZJPFEKul_O1aOc.roa (raw, json)
Hash identifier: ppMAzbArtcYHtz4QeDT83rjg9IMlC3/oHELdz0Yl0xo=
Subject key identifier: 0F:68:B3:9B:FD:7E:8A:BF:EE:79:92:4F:14:42:AE:97:F3:B5:68:E7
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 50EF23E8
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/D2izm_1-ir_ueZJPFEKul_O1aOc.roa
Signing time: Sat 01 Jan 2022 16:02:03 +0000
ROA not before: Sat 01 Jan 2022 16:02:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209880
IP address blocks: 212.243.125.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1357849576 (0x50ef23e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 16:02:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0f68b39bfd7e8abfee79924f1442ae97f3b568e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:99:13:f7:78:6a:02:ac:d1:57:f4:55:ea:49:
19:1f:8c:dd:2d:1d:de:54:68:2a:4c:76:f1:6f:30:
38:8d:af:d6:cc:8e:99:57:57:33:3f:24:ea:7c:8a:
bc:cc:97:d3:aa:c3:75:20:56:73:a7:9e:31:67:76:
bd:5f:eb:25:13:dc:77:14:ff:28:55:88:e4:11:c7:
80:2e:3e:20:a8:54:da:ae:a2:1d:09:07:0f:94:cc:
af:ff:c1:01:cf:65:f4:85:a0:e9:63:21:4f:52:45:
03:25:05:fc:3e:f3:f8:d3:10:33:59:24:8a:38:91:
bc:b6:22:5b:02:73:bf:59:87:74:49:80:a1:1f:4c:
66:b0:e2:42:67:49:ae:33:c5:aa:35:fc:12:dd:86:
0c:ae:ec:8f:b6:ec:1f:59:c8:8e:52:d2:ab:dc:2a:
a5:2d:fd:68:77:be:e7:98:2d:96:97:28:06:27:8b:
ef:d3:ea:7d:7f:e3:f5:81:8b:62:49:31:f8:e9:71:
c8:78:14:29:4e:40:b4:4e:8f:87:c4:40:91:f5:00:
d0:57:86:b6:18:92:b6:e2:3f:ab:d0:cd:d8:d9:e2:
23:3e:d7:f0:90:5a:b5:1c:1f:87:41:69:cc:db:3b:
8c:af:4f:93:b7:89:2c:0a:9e:bd:47:0e:de:bc:5b:
ae:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:68:B3:9B:FD:7E:8A:BF:EE:79:92:4F:14:42:AE:97:F3:B5:68:E7
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/D2izm_1-ir_ueZJPFEKul_O1aOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.243.125.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:ae:03:81:76:8f:fb:01:11:88:07:4c:f4:5f:1f:8e:fb:88:
4d:3a:cb:9f:60:fb:5c:dd:31:64:d4:8d:9c:90:07:10:b1:37:
3f:f0:16:00:7e:8d:bc:9b:9a:25:dd:cf:d2:60:ac:a3:99:cd:
71:77:aa:32:18:1b:7e:15:44:ef:bf:76:a0:79:4e:8d:1c:fc:
e0:88:80:f7:e8:37:2e:9f:1a:88:08:80:03:65:95:e5:30:cb:
26:ff:cc:e6:b9:73:7b:4e:12:67:af:ff:d6:81:b6:89:4b:94:
2f:68:32:72:d4:1f:48:5f:e5:68:d8:7b:27:22:4e:12:90:b3:
e1:43:54:03:a9:4a:b5:e5:00:b7:8c:b8:42:8e:cb:58:6a:b0:
ce:68:97:8d:08:3e:c5:f8:00:50:bb:7c:ec:da:0f:b9:13:0e:
bd:e2:bc:8c:05:7a:22:4d:f6:15:58:19:9e:32:70:c7:76:92:
0f:2e:fe:e1:5e:a2:35:22:fa:64:38:71:86:b3:f1:bd:62:7c:
cf:ee:38:c3:31:b5:5f:51:09:1a:6f:96:c6:46:13:0b:b9:89:
66:8e:11:28:86:bc:96:4f:6b:46:06:39:74:3f:55:f8:4d:04:
2a:dd:f7:ae:c8:97:30:4e:be:d3:31:37:d5:f8:1f:cf:2c:0e:
ef:f6:a8:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:36:40 2025 by rpki-client