Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/K1hPrYKpcfmUGMqDeXr02XIPTNM.roa
File: K1hPrYKpcfmUGMqDeXr02XIPTNM.roa (raw, json)
Hash identifier: f3xjYA0Qg9T0cMSL8Wc1rVcK5yorHqn5KV/TjwO52uA=
Subject key identifier: 2B:58:4F:AD:82:A9:71:F9:94:18:CA:83:79:7A:F4:D9:72:0F:4C:D3
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 01877769E5E4AF96231B3EBDA6CFFBE967BF
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/K1hPrYKpcfmUGMqDeXr02XIPTNM.roa
Signing time: Wed 12 Apr 2023 21:40:41 +0000
ROA not before: Wed 12 Apr 2023 21:40:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.199.212.0/24 maxlen: 24
185.226.180.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:77:69:e5:e4:af:96:23:1b:3e:bd:a6:cf:fb:e9:67:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Apr 12 21:40:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2b584fad82a971f99418ca83797af4d9720f4cd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:60:96:8e:e4:44:d5:34:f6:ac:7d:17:ca:bd:
ca:c1:b5:8d:6f:26:dd:26:e8:78:2c:b5:dc:44:bc:
e1:f3:10:e3:ac:2d:30:26:70:52:a1:b7:8f:99:8f:
42:7b:99:ac:8f:ea:18:ba:29:77:2c:47:f9:4d:ff:
39:ab:17:8b:e0:24:c5:b6:8d:72:ef:c3:3f:b5:02:
37:3f:04:c6:4e:4b:31:26:f2:48:93:33:30:55:5b:
48:fd:67:61:0b:02:11:42:a8:34:9b:b9:0a:62:67:
b6:46:51:30:dc:ba:6e:6d:59:10:5b:6a:d7:ef:63:
7e:a3:b0:2b:ea:2f:4c:3d:07:19:4c:f6:38:3c:8f:
7a:70:c6:76:74:e3:c8:50:05:d9:13:ab:c2:c5:6d:
77:0b:64:35:43:17:a4:e8:aa:f2:c7:d5:92:07:34:
d2:55:b8:18:38:80:20:15:e0:61:e5:11:9a:c5:ec:
84:d8:c4:15:60:e4:12:ea:c5:e4:02:a1:85:46:e9:
e8:98:e9:c1:23:31:4b:a0:31:8d:06:35:e7:fa:7b:
be:72:d9:2f:d2:e8:0c:de:80:aa:6d:6c:6b:82:a8:
ff:c8:34:d3:a7:63:d1:51:48:1b:ff:76:f3:bd:e3:
19:31:ca:74:89:9b:6e:51:28:2b:a8:3e:bc:f3:e2:
e3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:58:4F:AD:82:A9:71:F9:94:18:CA:83:79:7A:F4:D9:72:0F:4C:D3
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/K1hPrYKpcfmUGMqDeXr02XIPTNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.199.212.0/24
185.226.180.0/24
Signature Algorithm: sha256WithRSAEncryption
42:ad:43:29:fd:6d:53:15:2e:fa:5e:dc:08:9a:76:2d:6b:95:
23:af:45:d3:ba:cc:37:c7:55:39:00:09:32:c7:03:bf:1a:3f:
95:57:0e:e0:a4:be:4b:8a:53:4e:f7:fa:fc:6c:e7:fb:e5:47:
af:d4:64:c5:99:5a:e8:ad:c9:ea:79:07:a0:d6:1e:c5:c9:e5:
e6:b2:fe:db:0b:c9:c0:d9:21:6d:d0:ca:98:3a:81:bf:bf:91:
fa:84:b8:ac:c6:1f:29:2f:a4:01:2a:60:b5:42:5f:67:5e:30:
d0:0d:92:51:11:2c:62:e5:d0:18:1d:90:fc:fc:e6:eb:48:c0:
b9:e8:fb:6c:9f:df:a6:b6:75:90:75:3a:03:ff:3e:ca:8d:50:
d1:dd:27:de:88:df:50:83:6f:22:34:52:47:3d:f4:4f:71:c1:
43:31:7b:8e:1e:61:2a:bf:54:9d:8f:ad:56:16:28:b7:01:b6:
db:71:a1:f7:d3:43:52:59:e9:f6:30:e6:51:cb:1c:5f:eb:ca:
e7:e3:1d:4c:f2:34:e7:e1:59:f1:54:70:ce:8a:46:e2:dd:de:
3c:25:3e:1e:26:2f:54:19:a2:9d:6f:44:a4:3a:8b:a8:a0:9c:
db:c0:d4:2d:86:20:87:25:af:8a:32:ba:b7:50:e7:7b:82:a6:
75:25:16:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:55:25 2025 by rpki-client