Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/4w6g2aOCHITRgHpdAI8eJpng-M8.roa
File: 4w6g2aOCHITRgHpdAI8eJpng-M8.roa (raw, json)
Hash identifier: 0tG/VkKgF6wnAuHinBi1RK/uLPofIKh/Ku3xqoIot6w=
Subject key identifier: E3:0E:A0:D9:A3:82:1C:84:D1:80:7A:5D:00:8F:1E:26:99:E0:F8:CF
Certificate issuer: /CN=a16b0d8ab49436550b6abf45b79035aec6aff23c
Certificate serial: 0189F83B884ED5CB685B5BDAFF4F4C655ABA
Authority key identifier: A1:6B:0D:8A:B4:94:36:55:0B:6A:BF:45:B7:90:35:AE:C6:AF:F2:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWsNirSUNlULar9Ft5A1rsav8jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/4w6g2aOCHITRgHpdAI8eJpng-M8.roa
Signing time: Tue 15 Aug 2023 08:06:38 +0000
ROA not before: Tue 15 Aug 2023 08:06:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34971
IP address blocks: 95.157.96.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f8:3b:88:4e:d5:cb:68:5b:5b:da:ff:4f:4c:65:5a:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a16b0d8ab49436550b6abf45b79035aec6aff23c
Validity
Not Before: Aug 15 08:06:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e30ea0d9a3821c84d1807a5d008f1e2699e0f8cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c4:4f:50:db:02:0d:f4:12:84:e4:92:45:8d:
ef:be:81:27:0a:e8:3b:71:c9:63:d1:c0:8f:17:cc:
9f:7d:59:7a:5b:5c:f1:3c:bc:05:64:cd:6b:84:79:
4c:c7:c6:1a:7e:4a:60:16:c1:c0:84:5a:4c:b7:85:
19:0c:b8:aa:49:a0:f6:91:fe:fe:d4:f9:45:a2:0a:
e3:78:38:a7:2d:93:01:50:ce:ac:c3:1e:39:b7:26:
3b:a4:d6:40:7d:58:39:c9:de:1c:cd:0a:e5:98:1c:
51:a2:3b:6a:d5:98:2e:02:6c:0c:a2:92:b6:f3:41:
fe:72:05:82:ae:a0:42:34:e0:81:bd:30:97:22:37:
7b:25:43:64:24:07:9d:b7:64:91:9c:77:31:dd:8f:
36:79:a1:62:b6:36:84:18:c9:59:08:e1:5a:3d:99:
f4:38:11:e0:60:09:91:70:36:19:0c:ce:ff:fa:e1:
89:16:5c:ea:58:0a:12:db:f9:0d:74:53:58:e0:df:
6b:77:6f:fd:b3:91:c0:40:a3:2d:db:a5:0a:85:31:
34:40:7e:94:36:71:79:ee:9b:67:26:fd:f0:f2:c0:
a5:8a:a1:22:81:56:ea:55:0a:f4:47:40:b1:08:38:
d3:ec:07:e4:d8:1f:db:a9:20:18:71:b0:30:de:e4:
af:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:0E:A0:D9:A3:82:1C:84:D1:80:7A:5D:00:8F:1E:26:99:E0:F8:CF
X509v3 Authority Key Identifier:
keyid:A1:6B:0D:8A:B4:94:36:55:0B:6A:BF:45:B7:90:35:AE:C6:AF:F2:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWsNirSUNlULar9Ft5A1rsav8jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/4w6g2aOCHITRgHpdAI8eJpng-M8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.157.96.0/24
Signature Algorithm: sha256WithRSAEncryption
02:05:f3:09:fb:18:76:a8:2b:cc:d0:18:e9:0a:66:e9:f9:02:
05:e0:fe:16:12:5b:dd:ff:dd:39:be:1a:bc:47:df:36:b5:ea:
0b:c0:93:5b:22:96:f8:65:13:0b:7d:ec:02:15:c7:3b:6d:51:
55:32:ed:dc:cc:f4:17:b0:40:6c:aa:1c:a0:2e:ee:f7:f5:d4:
54:ce:fb:a8:37:e4:e2:07:25:65:4d:50:3c:fb:28:30:72:ba:
08:24:bc:03:af:b5:9e:ae:10:7e:08:0d:a9:4a:5d:7e:59:08:
40:13:ce:70:cd:2f:85:cd:eb:e4:e5:a4:f0:11:b4:a4:4d:49:
63:9f:63:c8:54:65:aa:0a:59:8a:a8:b0:8e:a0:e6:31:87:aa:
80:9c:b5:03:d8:22:f0:4c:50:a8:13:1d:96:5f:81:9f:74:07:
ea:72:57:aa:79:61:1d:5b:ed:e9:d4:cc:a0:9a:63:3f:f6:b4:
04:77:05:35:20:20:4e:e7:39:17:26:4a:ff:a9:62:5b:54:6f:
cf:9f:4f:ef:de:b9:5e:94:83:45:51:46:7c:88:f0:ff:32:eb:
29:94:1c:ac:de:b0:ce:d4:42:fd:e5:6e:20:35:3a:55:a4:46:
93:32:39:5c:6c:1b:f1:e6:92:dd:4a:bf:da:b1:11:5c:42:9a:
71:d8:24:db
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYn4O4hO1ctoW1va/09MZVq6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExNmIwZDhhYjQ5NDM2NTUwYjZhYmY0NWI3OTAzNWFlYzZh
ZmYyM2MwHhcNMjMwODE1MDgwNjM4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMzBlYTBkOWEzODIxYzg0ZDE4MDdhNWQwMDhmMWUyNjk5ZTBmOGNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcRPUNsCDfQShOSSRY3vvoEnCug7
cclj0cCPF8yffVl6W1zxPLwFZM1rhHlMx8YafkpgFsHAhFpMt4UZDLiqSaD2kf7+
1PlFogrjeDinLZMBUM6swx45tyY7pNZAfVg5yd4czQrlmBxRojtq1ZguAmwMopK2
80H+cgWCrqBCNOCBvTCXIjd7JUNkJAedt2SRnHcx3Y82eaFitjaEGMlZCOFaPZn0
OBHgYAmRcDYZDM7/+uGJFlzqWAoS2/kNdFNY4N9rd2/9s5HAQKMt26UKhTE0QH6U
NnF57ptnJv3w8sCliqEigVbqVQr0R0CxCDjT7Afk2B/bqSAYcbAw3uSvtQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOMOoNmjghyE0YB6XQCPHiaZ4PjPMB8GA1UdIwQY
MBaAFKFrDYq0lDZVC2q/RbeQNa7Gr/I8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1dzTmlyU1VObFVMYXI5RnQ1QTFyc2F2OGp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC81ZjQ1MTgtODJlOS00MjkyLWE1NGUt
MTVjYzlkYzdiZDg3LzEvNHc2ZzJhT0NISVRSZ0hwZEFJOGVKcG5nLU04LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC81ZjQ1MTgtODJlOS00MjkyLWE1NGUtMTVjYzlkYzdiZDg3
LzEvb1dzTmlyU1VObFVMYXI5RnQ1QTFyc2F2OGp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX51gMA0G
CSqGSIb3DQEBCwUAA4IBAQACBfMJ+xh2qCvM0BjpCmbp+QIF4P4WElvd/905vhq8
R982teoLwJNbIpb4ZRMLfewCFcc7bVFVMu3czPQXsEBsqhygLu739dRUzvuoN+Ti
ByVlTVA8+ygwcroIJLwDr7WerhB+CA2pSl1+WQhAE85wzS+Fzevk5aTwEbSkTUlj
n2PIVGWqClmKqLCOoOYxh6qAnLUD2CLwTFCoEx2WX4GfdAfqcleqeWEdW+3p1Myg
mmM/9rQEdwU1ICBO5zkXJkr/qWJbVG/Pn0/v3rlelINFUUZ8iPD/MusplBys3rDO
1EL95W4gNTpVpEaTMjlcbBvx5pLdSr/asRFcQppx2CTb
-----END CERTIFICATE-----
Generated at Tue Jun 17 04:58:10 2025 by rpki-client