Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/ff3c79-d60f-4b12-8131-95d60b3e46cc/1/IWbaLa6TxBqchQkGJ1Et8-WyIvM.roa
File: IWbaLa6TxBqchQkGJ1Et8-WyIvM.roa (raw, json)
Hash identifier: Szjmaqrlpky4r/aOSsrw7YnwIo2+xUXRS9UZMy4WxkU=
Subject key identifier: 21:66:DA:2D:AE:93:C4:1A:9C:85:09:06:27:51:2D:F3:E5:B2:22:F3
Certificate issuer: /CN=2f65436ac5038332e703adbbeff5814db82ab43f
Certificate serial: B380B6
Authority key identifier: 2F:65:43:6A:C5:03:83:32:E7:03:AD:BB:EF:F5:81:4D:B8:2A:B4:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2VDasUDgzLnA6277_WBTbgqtD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/ff3c79-d60f-4b12-8131-95d60b3e46cc/1/IWbaLa6TxBqchQkGJ1Et8-WyIvM.roa
Signing time: Sat 01 Jan 2022 10:59:40 +0000
ROA not before: Sat 01 Jan 2022 10:59:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212688
IP address blocks: 212.24.125.0/24 maxlen: 24
2a11:28c0:1::/48 maxlen: 48
2a11:28c0::/32 maxlen: 48
2a11:28c0::/48 maxlen: 48
2001:67c:840::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11763894 (0xb380b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f65436ac5038332e703adbbeff5814db82ab43f
Validity
Not Before: Jan 1 10:59:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2166da2dae93c41a9c85090627512df3e5b222f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:14:87:83:ff:65:e7:f7:54:f9:13:ba:3a:69:
01:a3:b7:d9:2f:24:e8:d8:70:d7:67:81:05:94:75:
3b:26:c9:9f:e7:cc:af:e4:55:f6:c0:d0:c1:50:72:
82:48:7d:9a:75:32:75:e0:d9:7e:46:07:2c:8a:26:
57:7a:76:d0:f6:24:0b:d0:56:51:c8:6f:5b:0d:8c:
15:7f:cb:39:78:32:29:02:f4:8e:69:0f:93:27:a6:
01:af:fe:a2:cd:5d:ad:f7:7a:7e:54:6a:68:03:b2:
7f:7a:f4:b4:65:5e:13:52:0d:29:17:e8:d7:db:1f:
68:aa:8e:bd:31:c3:1f:92:70:83:fb:72:69:d4:85:
89:9e:f2:03:db:b7:80:78:4e:a3:51:5d:7b:c5:65:
4f:b6:6a:b8:12:b8:67:6b:9c:f2:31:cc:4f:bf:e5:
49:2d:ae:b5:df:7d:12:dd:8e:ac:b6:d0:e2:65:e0:
9b:8d:9e:23:96:ce:9e:e7:e0:c3:83:40:ce:57:75:
cc:47:77:2f:f6:27:22:bc:3b:1d:0f:fe:f3:f4:f0:
67:17:90:6d:8f:17:c5:40:69:6b:27:b0:d1:e6:8d:
f3:af:c4:95:c9:f8:08:49:49:1f:e7:bb:d1:67:a6:
e5:f5:9e:fe:11:4b:03:aa:00:b3:1f:52:cd:ad:77:
80:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:66:DA:2D:AE:93:C4:1A:9C:85:09:06:27:51:2D:F3:E5:B2:22:F3
X509v3 Authority Key Identifier:
keyid:2F:65:43:6A:C5:03:83:32:E7:03:AD:BB:EF:F5:81:4D:B8:2A:B4:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2VDasUDgzLnA6277_WBTbgqtD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff3c79-d60f-4b12-8131-95d60b3e46cc/1/IWbaLa6TxBqchQkGJ1Et8-WyIvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff3c79-d60f-4b12-8131-95d60b3e46cc/1/L2VDasUDgzLnA6277_WBTbgqtD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.24.125.0/24
IPv6:
2001:67c:840::/48
2a11:28c0::/32
Signature Algorithm: sha256WithRSAEncryption
9c:a0:f0:58:03:e0:e9:f2:9d:b7:f3:a3:89:52:27:10:bd:03:
e6:36:06:8d:cb:42:72:35:ab:f7:91:4a:a0:82:a2:c9:93:34:
0c:81:60:ee:38:70:22:8d:ae:fa:0e:19:bb:0c:ed:86:30:06:
d6:83:30:31:1f:cf:ed:1a:8c:0f:e0:9c:8e:e9:ba:e8:46:0d:
e8:eb:ce:b3:a3:71:62:ee:cf:eb:fb:9a:9d:e0:c4:d4:dc:64:
1c:28:4e:a5:e9:8f:2d:2a:d7:93:94:fe:8c:83:df:f2:1e:c8:
40:4c:a0:4f:fc:cc:38:00:67:22:f0:a6:17:73:5e:04:34:87:
cc:34:8c:df:6a:b5:cb:52:73:8a:2a:7a:ab:d1:d7:8f:b0:12:
f4:90:6d:3e:67:53:ec:8d:7d:05:0c:87:e5:82:de:55:06:fa:
29:16:17:34:6a:4a:0c:36:a3:c9:7f:21:cf:3d:42:3d:59:56:
41:19:a6:37:c0:85:14:5d:36:4f:68:18:92:66:dd:68:ff:5e:
f4:c5:fd:e8:ba:28:49:13:3e:53:a4:7f:97:ec:7b:10:30:dd:
37:b5:3f:bb:f0:55:67:e5:bc:ba:62:7a:8c:5c:ea:0b:17:56:
16:b1:a6:ec:62:bf:f3:26:f5:67:98:78:84:dd:d5:20:ed:10:
46:5e:5f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:12 2025 by rpki-client