Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/RFhkRJ7-DklwdgvTIu1F34cWCow.roa
File: RFhkRJ7-DklwdgvTIu1F34cWCow.roa (raw, json)
Hash identifier: jZAQyV2wGIacjpCM13KYyII9Pvfi7jZ1tAzV4VrggEo=
Subject key identifier: 44:58:64:44:9E:FE:0E:49:70:76:0B:D3:22:ED:45:DF:87:16:0A:8C
Certificate issuer: /CN=306d618355bd8937f75bb4650bb5c1af70f9a12e
Certificate serial: 018C458FA0EB29761A872962A36FB845FE25
Authority key identifier: 30:6D:61:83:55:BD:89:37:F7:5B:B4:65:0B:B5:C1:AF:70:F9:A1:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/RFhkRJ7-DklwdgvTIu1F34cWCow.roa
Signing time: Thu 07 Dec 2023 18:34:49 +0000
ROA not before: Thu 07 Dec 2023 18:34:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29119
IP address blocks: 185.155.207.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:45:8f:a0:eb:29:76:1a:87:29:62:a3:6f:b8:45:fe:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=306d618355bd8937f75bb4650bb5c1af70f9a12e
Validity
Not Before: Dec 7 18:34:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=445864449efe0e4970760bd322ed45df87160a8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fb:19:63:26:5d:09:27:56:fb:6f:e7:0e:22:
a3:a4:c8:8d:8f:e5:19:88:41:60:96:a3:f6:08:bf:
7e:82:11:58:16:60:52:a1:c2:4a:68:53:9a:fa:75:
10:87:c4:77:80:fe:5e:8c:30:5f:85:a1:eb:4f:0e:
9e:49:74:e5:5f:95:b9:fe:d8:e4:73:5b:4d:73:56:
d6:6f:61:7d:8e:bc:2a:0f:00:51:6f:50:02:58:f3:
b3:55:8a:ad:18:d5:e6:ec:3f:e4:d4:04:e9:bf:d7:
b6:3a:50:5d:83:c9:03:c6:61:6e:f8:fb:9e:2d:0f:
35:7a:c7:25:7d:96:34:39:99:dc:fb:c5:16:92:17:
f9:57:b2:8f:94:b5:24:d6:4b:11:6c:bf:48:87:f0:
00:5c:98:9a:d6:ed:3f:38:2c:6a:82:29:7c:13:82:
27:ae:9d:b6:40:69:65:49:89:dd:a1:47:5c:ac:79:
9f:c4:16:1f:b9:cc:7f:d7:7b:c9:ad:f1:5d:d3:f8:
42:f5:91:41:e0:76:ea:f9:1d:45:85:15:1c:e2:c8:
8e:11:ff:56:92:a7:ee:9c:4f:83:1a:90:19:bd:2f:
28:a1:a5:6f:09:83:0a:f7:d5:e5:43:7d:37:82:81:
84:45:65:d4:ef:db:43:9f:7b:2d:f5:b3:af:65:3d:
f1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:58:64:44:9E:FE:0E:49:70:76:0B:D3:22:ED:45:DF:87:16:0A:8C
X509v3 Authority Key Identifier:
keyid:30:6D:61:83:55:BD:89:37:F7:5B:B4:65:0B:B5:C1:AF:70:F9:A1:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/RFhkRJ7-DklwdgvTIu1F34cWCow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.207.0/24
Signature Algorithm: sha256WithRSAEncryption
af:18:5d:5d:08:6f:8c:49:98:fd:a7:11:6d:fd:bd:72:c3:2c:
65:9e:09:1a:aa:df:a8:b4:e5:d6:1b:60:37:9f:21:4b:09:7f:
d4:6b:b8:86:86:b8:fb:4c:0d:29:65:c1:9e:ab:88:2a:f3:a5:
b3:e6:71:49:1f:8c:86:5c:52:20:f0:1b:0b:ee:11:85:98:e2:
c7:59:7e:19:19:9d:33:27:c4:6a:12:ed:6f:52:70:ab:2e:be:
63:2e:ea:04:72:4b:14:bd:2f:83:e4:e8:31:07:d3:bf:5f:87:
27:e2:3f:35:9a:3d:80:d5:27:fd:3a:9c:ff:0a:8a:23:cc:3f:
49:5c:e4:d9:f0:8a:0b:b7:26:df:bf:e6:f2:cf:64:b0:37:ae:
c1:b0:86:f2:74:3e:66:69:fc:67:e0:e5:67:68:3b:07:ed:f5:
61:32:91:61:46:fe:07:f9:45:f3:93:b2:75:69:8e:a7:33:3c:
a6:7b:7f:de:d9:48:45:dc:82:f5:23:b2:3f:5c:7c:89:b5:d2:
19:d5:04:f0:eb:68:08:b9:17:38:e1:76:88:dd:38:9b:08:6d:
be:e4:e4:a5:a4:a8:45:a5:20:0d:98:8d:be:06:ac:71:d0:04:
a0:94:5e:2e:55:76:69:6f:c2:65:d9:00:75:73:65:2a:c0:40:
bc:67:cc:f3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYxFj6DrKXYahylio2+4Rf4lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwNmQ2MTgzNTViZDg5MzdmNzViYjQ2NTBiYjVjMWFmNzBm
OWExMmUwHhcNMjMxMjA3MTgzNDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NDU4NjQ0NDllZmUwZTQ5NzA3NjBiZDMyMmVkNDVkZjg3MTYwYThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvsZYyZdCSdW+2/nDiKjpMiNj+UZ
iEFglqP2CL9+ghFYFmBSocJKaFOa+nUQh8R3gP5ejDBfhaHrTw6eSXTlX5W5/tjk
c1tNc1bWb2F9jrwqDwBRb1ACWPOzVYqtGNXm7D/k1ATpv9e2OlBdg8kDxmFu+Pue
LQ81esclfZY0OZnc+8UWkhf5V7KPlLUk1ksRbL9Ih/AAXJia1u0/OCxqgil8E4In
rp22QGllSYndoUdcrHmfxBYfucx/13vJrfFd0/hC9ZFB4Hbq+R1FhRUc4siOEf9W
kqfunE+DGpAZvS8ooaVvCYMK99XlQ303goGERWXU79tDn3st9bOvZT3xuwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFERYZESe/g5JcHYL0yLtRd+HFgqMMB8GA1UdIwQY
MBaAFDBtYYNVvYk391u0ZQu1wa9w+aEuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUcxaGcxVzlpVGYzVzdSbEM3WEJyM0Q1b1M0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8zY2RlOWItMzcwNS00ZGMzLThkN2Ut
NTE2ZmZkODczNzZjLzEvUkZoa1JKNy1Ea2x3ZGd2VEl1MUYzNGNXQ293LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi8zY2RlOWItMzcwNS00ZGMzLThkN2UtNTE2ZmZkODczNzZj
LzEvTUcxaGcxVzlpVGYzVzdSbEM3WEJyM0Q1b1M0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZvPMA0G
CSqGSIb3DQEBCwUAA4IBAQCvGF1dCG+MSZj9pxFt/b1ywyxlngkaqt+otOXWG2A3
nyFLCX/Ua7iGhrj7TA0pZcGeq4gq86Wz5nFJH4yGXFIg8BsL7hGFmOLHWX4ZGZ0z
J8RqEu1vUnCrLr5jLuoEcksUvS+D5OgxB9O/X4cn4j81mj2A1Sf9Opz/CoojzD9J
XOTZ8IoLtybfv+byz2SwN67BsIbydD5mafxn4OVnaDsH7fVhMpFhRv4H+UXzk7J1
aY6nMzyme3/e2UhF3IL1I7I/XHyJtdIZ1QTw62gIuRc44XaI3TibCG2+5OSlpKhF
pSANmI2+Bqxx0ASglF4uVXZpb8Jl2QB1c2UqwEC8Z8zz
-----END CERTIFICATE-----
Generated at Mon May 5 12:11:13 2025 by rpki-client