Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/JqmHiERHvkgj0Np-qOQ3uaUNMDE.roa
File: JqmHiERHvkgj0Np-qOQ3uaUNMDE.roa (raw, json)
Hash identifier: 9o7n/QE3p154DoxE7SovFnqnuHqgrZ+6dgPHumsz5J0=
Subject key identifier: 26:A9:87:88:44:47:BE:48:23:D0:DA:7E:A8:E4:37:B9:A5:0D:30:31
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0186DFBB6CA6D6568F80AAE247878B96B068
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/JqmHiERHvkgj0Np-qOQ3uaUNMDE.roa
Signing time: Tue 14 Mar 2023 10:47:27 +0000
ROA not before: Tue 14 Mar 2023 10:47:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1
IP address blocks: 81.161.236.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:df:bb:6c:a6:d6:56:8f:80:aa:e2:47:87:8b:96:b0:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 14 10:47:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=26a987884447be4823d0da7ea8e437b9a50d3031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7b:bd:15:75:8d:e1:d8:e1:05:a4:2c:52:6a:
79:83:72:6d:fe:af:a8:29:e2:fc:19:d0:15:96:cd:
7a:b8:1c:2b:ea:9c:8f:fa:19:c7:b3:9c:30:4f:ba:
be:de:3e:cb:51:af:6b:6d:08:a3:95:ca:85:cb:37:
63:01:eb:3f:c3:24:c2:89:1e:42:e2:89:5a:42:5a:
60:8f:eb:c9:ab:92:78:59:4a:db:45:23:af:6b:26:
cc:5f:7d:b2:40:3f:a8:1c:c3:78:d1:63:59:d2:02:
61:68:26:2d:79:de:62:bc:87:5d:c4:ff:bd:a0:29:
43:b8:ba:24:ee:b9:68:b6:b5:10:e7:83:4c:df:07:
4d:1c:c2:23:f1:e0:bf:94:96:5c:a1:cc:7e:43:ee:
b4:a9:23:5a:f2:c7:22:53:e0:2c:d7:ee:b1:68:86:
15:f3:4e:16:65:43:0e:d9:1e:6d:7f:c8:de:4a:6e:
f3:46:29:60:20:f2:d2:d3:14:71:91:ff:02:96:af:
cf:0d:e9:5e:c3:34:2e:72:f2:c5:37:e8:af:57:fc:
27:d1:2a:1c:35:c9:13:77:4c:d8:a9:37:9c:2f:90:
51:94:34:3d:9c:38:89:ff:d7:a8:93:b2:67:a9:25:
cb:72:6d:5f:3a:0c:35:63:39:5b:09:7d:35:1e:2e:
d8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:A9:87:88:44:47:BE:48:23:D0:DA:7E:A8:E4:37:B9:A5:0D:30:31
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/JqmHiERHvkgj0Np-qOQ3uaUNMDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.161.236.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:1e:57:60:c4:50:11:6f:b1:9c:0e:e8:03:51:f2:6a:ca:0b:
9e:76:ec:62:a6:74:eb:8c:55:15:ec:da:32:d7:04:10:55:ee:
f4:a4:82:73:d9:41:84:1f:07:7c:91:29:a5:0a:91:00:65:fa:
ea:81:eb:3e:12:7c:c0:26:40:e5:cc:d7:0a:21:ae:4b:24:52:
53:b4:b9:db:3b:1d:7a:ad:33:13:fd:9f:e2:3b:01:f1:51:33:
40:f9:c6:44:c1:e2:41:82:82:f0:0d:85:59:d0:64:e3:ce:1d:
93:2b:cf:73:d4:1b:39:47:22:ea:bf:c6:74:ca:57:bc:fc:13:
6d:b9:bb:a4:c9:79:2a:71:61:d3:fb:4a:f4:22:01:e4:ed:26:
6a:47:dd:6f:75:f2:fa:8e:43:b8:31:87:ad:e9:5a:b8:65:f0:
90:bb:9f:ff:45:ad:94:61:d9:58:0a:7c:ad:40:68:75:f0:88:
ba:78:47:7c:3b:de:f2:77:7b:5a:59:68:9a:2c:a1:c4:25:2d:
df:a5:de:84:90:10:41:b2:55:d8:91:dc:f0:39:8a:41:12:b0:
36:80:78:19:9c:7f:90:66:90:d9:2e:da:50:ed:45:42:37:85:
0b:fc:02:64:39:7a:6b:f3:20:c5:58:f9:ad:fb:5c:ca:0c:15:
34:38:3c:52
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYbfu2ym1laPgKriR4eLlrBoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMwMzE0MTA0NzI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNmE5ODc4ODQ0NDdiZTQ4MjNkMGRhN2VhOGU0MzdiOWE1MGQzMDMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnu9FXWN4djhBaQsUmp5g3Jt/q+o
KeL8GdAVls16uBwr6pyP+hnHs5wwT7q+3j7LUa9rbQijlcqFyzdjAes/wyTCiR5C
4olaQlpgj+vJq5J4WUrbRSOvaybMX32yQD+oHMN40WNZ0gJhaCYted5ivIddxP+9
oClDuLok7rlotrUQ54NM3wdNHMIj8eC/lJZcocx+Q+60qSNa8sciU+As1+6xaIYV
804WZUMO2R5tf8jeSm7zRilgIPLS0xRxkf8Clq/PDelewzQucvLFN+ivV/wn0Soc
NckTd0zYqTecL5BRlDQ9nDiJ/9eok7JnqSXLcm1fOgw1YzlbCX01Hi7YQQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCaph4hER75II9DafqjkN7mlDTAxMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvSnFtSGlFUkh2a2dqME5wLXFPUTN1YVVOTURFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUaHsMA0G
CSqGSIb3DQEBCwUAA4IBAQCjHldgxFARb7GcDugDUfJqygueduxipnTrjFUV7Noy
1wQQVe70pIJz2UGEHwd8kSmlCpEAZfrqges+EnzAJkDlzNcKIa5LJFJTtLnbOx16
rTMT/Z/iOwHxUTNA+cZEweJBgoLwDYVZ0GTjzh2TK89z1Bs5RyLqv8Z0yle8/BNt
ubukyXkqcWHT+0r0IgHk7SZqR91vdfL6jkO4MYet6Vq4ZfCQu5//Ra2UYdlYCnyt
QGh18Ii6eEd8O97yd3taWWiaLKHEJS3fpd6EkBBBslXYkdzwOYpBErA2gHgZnH+Q
ZpDZLtpQ7UVCN4UL/AJkOXpr8yDFWPmt+1zKDBU0ODxS
-----END CERTIFICATE-----
Generated at Mon Jun 16 10:32:32 2025 by rpki-client