Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/IKZsSwlAhTlov4Gwrx8xVa_6Q_I.roa
File: IKZsSwlAhTlov4Gwrx8xVa_6Q_I.roa (raw, json)
Hash identifier: WgZs5SVlXa0XlMXxrg5nDj7aB7l1H2Qmdwd6QBw1P7c=
Subject key identifier: 20:A6:6C:4B:09:40:85:39:68:BF:81:B0:AF:1F:31:55:AF:FA:43:F2
Certificate issuer: /CN=b2f27953ad4690c068fb40f9f356003379bb63f8
Certificate serial: 0109FD7B
Authority key identifier: B2:F2:79:53:AD:46:90:C0:68:FB:40:F9:F3:56:00:33:79:BB:63:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/svJ5U61GkMBo-0D581YAM3m7Y_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/IKZsSwlAhTlov4Gwrx8xVa_6Q_I.roa
Signing time: Sat 01 Jan 2022 05:56:39 +0000
ROA not before: Sat 01 Jan 2022 05:56:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35671
IP address blocks: 212.180.184.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17431931 (0x109fd7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f27953ad4690c068fb40f9f356003379bb63f8
Validity
Not Before: Jan 1 05:56:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=20a66c4b0940853968bf81b0af1f3155affa43f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:15:e6:60:eb:92:84:77:8f:87:d2:51:77:42:
44:a5:e9:59:47:58:a2:a1:de:50:62:5e:2b:7c:ee:
3c:71:fa:c1:2d:db:c3:09:b7:fd:7b:e6:6a:bc:59:
3d:ca:fa:77:47:cf:66:4b:23:82:c1:59:67:13:fd:
b1:1d:aa:8b:a1:49:66:82:e0:48:05:45:e4:02:5b:
5f:18:f9:26:fe:27:3a:69:2d:27:55:e2:98:e4:13:
68:08:15:62:46:b2:c3:13:a8:4e:d2:2c:32:3c:4e:
85:75:fe:40:00:aa:75:1a:8f:12:f2:41:b7:62:f8:
57:be:00:38:3a:d6:3c:28:5f:8f:fb:02:b9:7d:9e:
a3:f4:8a:30:76:27:b8:dc:a1:6b:4c:cc:ea:8b:60:
af:df:af:72:98:7a:f2:9f:fc:3b:92:10:6f:8b:bf:
4b:11:cd:25:8b:77:6b:00:4c:63:26:ea:90:5e:3f:
8e:f7:3e:40:21:93:2d:63:11:20:75:bc:85:75:3e:
f8:49:9d:0d:59:81:7f:07:8b:f4:2b:8b:ba:c4:32:
85:46:c2:69:78:d2:c3:99:d0:c6:c4:e2:48:b7:e4:
ac:f2:1e:bb:26:0b:d6:0a:67:30:31:d5:4f:4f:f8:
01:e1:75:1c:28:bd:49:0c:df:12:94:a2:5e:ee:81:
f6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:A6:6C:4B:09:40:85:39:68:BF:81:B0:AF:1F:31:55:AF:FA:43:F2
X509v3 Authority Key Identifier:
keyid:B2:F2:79:53:AD:46:90:C0:68:FB:40:F9:F3:56:00:33:79:BB:63:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/svJ5U61GkMBo-0D581YAM3m7Y_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/IKZsSwlAhTlov4Gwrx8xVa_6Q_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.180.184.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:8c:8e:74:5b:60:82:68:fd:c4:72:be:df:af:fc:f3:f3:a1:
63:94:ef:0b:58:29:d6:5c:42:a0:fc:d7:72:89:76:9f:6e:90:
4f:00:73:2b:1e:fe:27:7d:00:08:ee:88:9c:2c:5f:cc:31:4f:
0a:c2:80:57:0c:68:71:49:da:e3:2a:7c:0f:45:33:57:28:0d:
5f:d0:c8:52:0a:3b:93:f5:0d:91:a9:13:33:01:39:fb:71:1f:
c9:ec:9b:75:6f:5b:7c:e2:8f:5c:a2:88:aa:27:e6:90:60:f7:
43:7e:5f:cd:2d:b8:a2:54:7f:6e:c6:8e:4d:79:51:e2:52:1f:
f7:75:28:0b:41:e8:ae:9c:5c:b4:00:cd:f1:b4:a0:00:96:2d:
db:91:92:0b:9a:22:a0:c0:9e:22:18:35:b6:38:ab:4d:83:45:
cb:e9:36:33:c3:b1:a9:a0:d6:02:eb:e5:0e:6d:e4:9b:a7:fe:
1f:32:38:23:9c:ab:ec:48:4d:6a:4b:07:6c:c0:8b:3f:1b:1b:
0e:ca:4b:3a:34:ea:f1:1e:69:7e:16:0f:7b:ec:85:ac:9d:1b:
ac:ab:75:a9:99:8b:69:39:99:01:a2:cb:03:b8:0a:cd:fa:72:
ef:fa:bc:b4:ef:c0:5c:06:e4:3c:0e:1a:38:26:82:78:c0:b8:
85:e7:75:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:27:34 2025 by rpki-client