Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/p4AJjA7lp03IFULkPUnq3d_H4Pw.roa
File: p4AJjA7lp03IFULkPUnq3d_H4Pw.roa (raw, json)
Hash identifier: 664l0TjRSRc7p3sWtzJHSO0ji+Sd+HpSpmZhUVINaNk=
Subject key identifier: A7:80:09:8C:0E:E5:A7:4D:C8:15:42:E4:3D:49:EA:DD:DF:C7:E0:FC
Certificate issuer: /CN=8f9a4670146ad880f14bada4b2762b613ddf1d18
Certificate serial: 3EA7
Authority key identifier: 8F:9A:46:70:14:6A:D8:80:F1:4B:AD:A4:B2:76:2B:61:3D:DF:1D:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5pGcBRq2IDxS62ksnYrYT3fHRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/p4AJjA7lp03IFULkPUnq3d_H4Pw.roa
Signing time: Sat 25 Jun 2022 08:18:15 +0000
ROA not before: Sat 25 Jun 2022 08:18:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15623
IP address blocks: 185.241.85.0/24 maxlen: 24
185.241.84.0/24 maxlen: 24
185.241.86.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16039 (0x3ea7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f9a4670146ad880f14bada4b2762b613ddf1d18
Validity
Not Before: Jun 25 08:18:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a780098c0ee5a74dc81542e43d49eadddfc7e0fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c3:fa:f2:ca:f4:dc:c1:26:c1:d2:ef:38:76:
c7:07:d7:af:03:21:e8:c7:d3:7b:71:9e:19:f1:f5:
c7:43:0b:98:17:76:a9:35:b9:8f:b2:09:b2:55:6c:
26:f2:15:05:a3:ac:ae:f7:9e:ef:ec:a4:70:e1:07:
fd:bc:fa:5f:cf:6c:a5:a9:39:a7:58:3c:81:42:62:
79:9b:c5:2e:7a:07:ba:de:37:74:4b:4b:0d:38:37:
cf:c2:f8:11:7d:34:fb:ce:67:f2:3f:6b:0b:7f:68:
f5:28:f2:47:db:62:bb:1c:53:79:87:b1:a8:00:8e:
2f:cb:6a:6c:5f:01:98:98:30:7d:f0:7b:8b:e2:58:
5b:03:45:3d:ff:1e:9c:b8:34:23:18:67:53:69:58:
2e:d3:bc:fc:bf:66:be:24:2d:b3:14:8c:2e:43:0a:
f3:e0:9b:92:4b:65:dc:c9:68:84:86:7d:34:76:e8:
fb:9b:a9:74:5a:71:f5:b8:a7:d6:2d:a0:97:b9:31:
39:50:0b:9f:00:bd:42:67:40:96:0e:68:7c:ae:71:
79:a8:36:16:8d:04:a9:c9:c5:11:05:27:73:b4:c0:
c9:50:d9:64:8c:e8:eb:43:1f:41:a3:1b:c7:ff:61:
e8:0f:4a:18:4b:e3:45:44:e1:04:53:a9:8c:9d:06:
66:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:80:09:8C:0E:E5:A7:4D:C8:15:42:E4:3D:49:EA:DD:DF:C7:E0:FC
X509v3 Authority Key Identifier:
keyid:8F:9A:46:70:14:6A:D8:80:F1:4B:AD:A4:B2:76:2B:61:3D:DF:1D:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5pGcBRq2IDxS62ksnYrYT3fHRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/p4AJjA7lp03IFULkPUnq3d_H4Pw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j5pGcBRq2IDxS62ksnYrYT3fHRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.241.84.0-185.241.86.255
Signature Algorithm: sha256WithRSAEncryption
95:1c:5f:4a:b3:c2:c9:e6:59:e3:7e:57:bb:c5:cc:bd:59:34:
f9:4f:ae:54:e9:22:59:75:8e:9e:b5:22:66:26:4c:41:e2:a8:
65:2b:a1:22:5a:15:b6:6f:8b:8b:48:bf:75:4e:7a:2c:b8:c8:
ad:40:74:b3:a0:65:30:0b:84:e7:1e:bd:9b:b2:10:40:0b:b3:
43:01:11:99:54:99:3b:ba:00:1f:7e:c5:d2:c8:b5:e8:97:f3:
c9:8c:cb:f5:19:80:31:0c:68:ac:ce:af:30:1c:de:25:d6:d8:
22:aa:a3:d3:a1:6d:1a:c9:ee:d6:01:b4:b1:b8:c0:38:f8:99:
d6:0b:ed:8e:1b:be:53:fb:ea:ea:32:ee:91:d2:d3:c9:94:ce:
3e:46:54:47:65:2a:a3:66:1a:e1:7a:7c:97:25:67:37:00:55:
66:af:46:c5:24:06:1a:54:bb:fb:99:dc:fa:74:10:20:99:12:
d1:6d:d8:42:36:8d:73:c2:72:2d:ea:5b:b3:a9:63:b0:06:72:
c8:5a:de:ac:f5:0f:66:b4:d7:de:a6:8b:d3:f1:ff:9e:56:2a:
ac:5f:a9:9c:f6:81:61:81:74:5b:88:5d:1e:58:05:2c:d8:08:
47:4e:f1:07:38:84:7c:f2:32:fe:3a:74:f9:2e:48:22:91:a3:
73:ce:fd:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 23:57:19 2025 by rpki-client