Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/Q9w5rri1qBFqHRejR4bMAa4aVko.roa
File: Q9w5rri1qBFqHRejR4bMAa4aVko.roa (raw, json)
Hash identifier: Ca8Ikqra3vau6WKH+w/J5d6K8tMCcu4VumSEmDtCnm4=
Subject key identifier: 43:DC:39:AE:B8:B5:A8:11:6A:1D:17:A3:47:86:CC:01:AE:1A:56:4A
Certificate issuer: /CN=95b30111b0b720a209f788c8b90f60380b465c2e
Certificate serial: 018CAB5C3EB2206EF8C6BF51FCED7154450B
Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/Q9w5rri1qBFqHRejR4bMAa4aVko.roa
Signing time: Wed 27 Dec 2023 12:59:58 +0000
ROA not before: Wed 27 Dec 2023 12:59:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207185
IP address blocks: 185.157.4.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ab:5c:3e:b2:20:6e:f8:c6:bf:51:fc:ed:71:54:45:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e
Validity
Not Before: Dec 27 12:59:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=43dc39aeb8b5a8116a1d17a34786cc01ae1a564a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ac:0c:77:2d:43:86:a3:28:dd:bd:1b:0b:d3:
b5:f5:dd:65:a1:b2:5e:60:57:84:c3:b4:82:ed:78:
9c:ec:ad:2b:64:0d:23:f7:d0:e2:36:82:99:30:08:
d0:c0:65:d6:6b:07:47:5d:57:1d:98:e8:f2:e7:b1:
61:28:72:a0:ee:b0:e2:b4:0f:67:b2:9c:b7:c0:b9:
c9:09:00:4c:1a:41:d0:bd:09:fd:76:45:08:94:c2:
3a:12:69:8b:b9:39:55:d7:af:17:b2:1c:dc:85:d4:
3d:f7:40:ac:29:cb:fb:cb:8f:b1:c5:e1:32:1d:75:
0d:29:86:ad:12:33:ff:9e:7d:85:83:e1:e4:76:2f:
52:80:84:0c:1f:c1:0a:3f:0d:62:c2:53:cd:b5:19:
37:49:c7:d7:cf:53:61:5a:c8:65:47:a3:cc:90:03:
19:d0:d3:83:7d:ef:5b:12:25:00:25:e6:a4:32:9d:
18:ca:88:69:3d:bf:fd:b7:b3:0f:ff:84:64:1e:f3:
f8:6e:55:31:9f:3b:d1:d2:20:4b:dc:ef:7d:6e:4e:
d2:67:75:fd:50:4c:ac:f4:b4:c4:97:82:dc:67:11:
bb:d8:62:b5:cc:4f:41:a3:35:66:1e:8e:53:cd:ef:
8c:00:ed:f1:4a:7f:a4:d2:70:8c:ef:e8:06:e2:63:
8f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:DC:39:AE:B8:B5:A8:11:6A:1D:17:A3:47:86:CC:01:AE:1A:56:4A
X509v3 Authority Key Identifier:
keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/Q9w5rri1qBFqHRejR4bMAa4aVko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.157.4.0/22
Signature Algorithm: sha256WithRSAEncryption
87:39:67:23:d3:b5:50:10:0f:3b:49:b4:ca:c6:dc:ce:a1:a0:
01:ff:69:48:80:85:94:65:de:7c:12:67:00:a1:5f:bf:5c:48:
4b:4a:46:a0:ea:74:53:aa:64:c6:1b:d2:7f:8a:9a:66:6f:ec:
4f:78:0d:54:f9:7e:c6:1a:f5:95:c3:46:45:d1:09:cd:c5:07:
6c:1f:8a:aa:b6:c8:e3:a3:9a:bf:59:19:4b:49:03:d6:e3:d6:
7b:91:32:0f:70:01:92:97:c3:a4:0a:26:1f:11:b8:ca:0c:15:
7b:42:ea:19:f8:c4:5e:73:11:11:95:7b:a0:73:c9:39:38:40:
a7:df:c8:01:b6:27:2f:86:af:28:7f:d5:c7:cf:3d:ee:a6:46:
c2:19:1d:56:cb:cd:fe:b9:78:3f:d2:c9:01:00:6d:88:65:e6:
3b:3b:69:ea:2d:a7:ef:3a:b0:b4:66:49:6d:a6:b6:cd:3f:73:
f2:f7:61:22:99:ad:49:db:df:b5:f7:6a:a8:c4:9c:4a:09:70:
42:73:d8:5c:50:f2:7e:d5:92:4e:7e:82:62:f4:86:9c:29:f1:
c6:a2:7a:7c:06:ff:fa:07:4f:84:1a:c0:f1:8d:cc:c2:75:8f:
e8:85:d3:b0:47:c8:c3:01:14:33:e5:57:fb:0b:b7:ef:55:a3:
2b:50:b2:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 00:23:28 2025 by rpki-client