Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/Os5GFfnpeh6D5Bjvxh9wDzrYpzo.roa
File: Os5GFfnpeh6D5Bjvxh9wDzrYpzo.roa (raw, json)
Hash identifier: 5yr3MtllhKt2MgNuw4q11h0Li+wzae7Muc1rEdtU0ws=
Subject key identifier: 3A:CE:46:15:F9:E9:7A:1E:83:E4:18:EF:C6:1F:70:0F:3A:D8:A7:3A
Certificate issuer: /CN=07090fba663b072bb54cc7d49e88a0380374cb6e
Certificate serial: 06404F31
Authority key identifier: 07:09:0F:BA:66:3B:07:2B:B5:4C:C7:D4:9E:88:A0:38:03:74:CB:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BwkPumY7Byu1TMfUnoigOAN0y24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/Os5GFfnpeh6D5Bjvxh9wDzrYpzo.roa
Signing time: Sat 01 Jan 2022 00:59:14 +0000
ROA not before: Sat 01 Jan 2022 00:59:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197161
IP address blocks: 195.42.149.0/24 maxlen: 24
195.42.148.0/23 maxlen: 23
185.65.80.0/22 maxlen: 24
195.42.148.0/24 maxlen: 24
2a03:1a60::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104877873 (0x6404f31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07090fba663b072bb54cc7d49e88a0380374cb6e
Validity
Not Before: Jan 1 00:59:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3ace4615f9e97a1e83e418efc61f700f3ad8a73a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d9:7f:48:e0:57:6e:8c:be:c6:a7:9a:8f:f9:
42:f1:ae:6d:c4:5c:fe:9a:e6:31:9c:03:49:8b:5a:
37:dd:1e:35:51:29:7c:6c:1a:c9:07:83:09:5e:12:
04:67:73:e3:76:3a:ea:9b:c3:16:08:6c:5b:5b:98:
bb:84:06:e9:4a:d1:f1:8e:cf:8e:0d:06:57:98:7d:
3d:da:90:d7:1b:31:f6:5c:b1:0d:2c:68:af:f9:0b:
0a:9c:a1:21:3f:92:5e:ce:64:aa:f1:49:9f:6a:a8:
b8:b2:2b:a6:60:c4:f6:db:be:b1:c7:2c:3f:42:3f:
38:4e:01:81:24:34:89:00:bb:27:7e:6f:84:d5:9a:
40:86:7a:71:b5:67:ac:05:c9:82:75:6c:e1:04:88:
16:1e:d2:ca:76:4c:bd:61:54:d5:41:94:fa:fb:c9:
95:bb:09:29:0c:8e:e6:3c:26:83:33:f9:09:bd:32:
60:62:58:0e:1e:bd:cc:db:32:f1:8f:e3:85:27:a5:
90:b7:53:36:5f:b7:a7:e6:34:39:74:08:6a:ea:d1:
00:a9:9e:16:eb:dd:22:e0:ee:3c:53:6e:87:14:bc:
52:5a:cc:a6:1a:44:1a:82:b2:63:7a:01:06:5e:9b:
df:9f:96:bc:3e:55:ae:77:15:a7:42:42:f9:79:40:
dd:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:CE:46:15:F9:E9:7A:1E:83:E4:18:EF:C6:1F:70:0F:3A:D8:A7:3A
X509v3 Authority Key Identifier:
keyid:07:09:0F:BA:66:3B:07:2B:B5:4C:C7:D4:9E:88:A0:38:03:74:CB:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwkPumY7Byu1TMfUnoigOAN0y24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/Os5GFfnpeh6D5Bjvxh9wDzrYpzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.65.80.0/22
195.42.148.0/23
IPv6:
2a03:1a60::/32
Signature Algorithm: sha256WithRSAEncryption
31:57:d6:f2:c5:2a:4d:e8:75:f7:6e:4a:d9:b0:b5:3b:74:aa:
cd:09:88:bd:c7:a1:29:db:33:38:26:11:da:04:04:9c:b3:12:
09:18:17:73:a7:51:5e:ce:d7:34:f1:eb:f6:64:00:6a:89:9e:
02:bb:62:ea:59:f6:5f:2e:f4:7d:14:0e:45:99:13:0f:c7:08:
b9:c9:32:73:a6:b4:a4:78:e3:2a:ac:49:6d:8f:91:3e:ce:4e:
32:b0:ea:fe:e1:bc:6c:a2:ff:ca:55:a8:43:66:35:a8:7d:65:
e9:36:14:2f:ee:b0:22:c0:80:a5:33:2e:a4:a2:03:de:be:ce:
d3:57:ef:2d:0f:e6:b1:55:1c:39:c5:e7:37:ec:35:4a:86:43:
14:94:db:ea:bf:5c:5e:7f:14:54:93:2b:4a:f7:cd:3d:6a:13:
c0:5b:c9:9f:3e:43:da:15:68:08:54:70:dc:60:d6:de:b9:5f:
cc:56:02:6c:60:79:f2:e1:4e:8a:80:c1:ab:47:8b:e8:1b:88:
07:20:4d:ab:3e:d4:d0:ad:2c:86:f6:91:5f:79:9d:33:14:5d:
a3:ed:73:34:e1:8c:db:1b:eb:a3:cf:9c:17:bb:16:77:b9:30:
43:40:27:5c:3a:30:ce:0a:a6:66:bb:ef:27:bb:e4:0a:a4:da:
f8:36:45:7e
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIEBkBPMTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
NzA5MGZiYTY2M2IwNzJiYjU0Y2M3ZDQ5ZTg4YTAzODAzNzRjYjZlMB4XDTIyMDEw
MTAwNTkxNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoM2FjZTQ2MTVmOWU5
N2ExZTgzZTQxOGVmYzYxZjcwMGYzYWQ4YTczYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMTZf0jgV26Mvsanmo/5QvGubcRc/prmMZwDSYtaN90eNVEp
fGwayQeDCV4SBGdz43Y66pvDFghsW1uYu4QG6UrR8Y7Pjg0GV5h9PdqQ1xsx9lyx
DSxor/kLCpyhIT+SXs5kqvFJn2qouLIrpmDE9tu+sccsP0I/OE4BgSQ0iQC7J35v
hNWaQIZ6cbVnrAXJgnVs4QSIFh7SynZMvWFU1UGU+vvJlbsJKQyO5jwmgzP5Cb0y
YGJYDh69zNsy8Y/jhSelkLdTNl+3p+Y0OXQIaurRAKmeFuvdIuDuPFNuhxS8UlrM
phpEGoKyY3oBBl6b35+WvD5VrncVp0JC+XlA3YsCAwEAAaOCAh4wggIaMB0GA1Ud
DgQWBBQ6zkYV+el6HoPkGO/GH3APOtinOjAfBgNVHSMEGDAWgBQHCQ+6ZjsHK7VM
x9SeiKA4A3TLbjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0J3a1B1bVk3Qnl1MVRNZlVub2lnT0FOMHkyNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTQvYTA3MzQyLTE3NDItNDFhMS04YmM3LTAxYTI4YTc2Y2NmNC8x
L09zNUdGZm5wZWg2RDVCanZ4aDl3RHpyWXB6by5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTQv
YTA3MzQyLTE3NDItNDFhMS04YmM3LTAxYTI4YTc2Y2NmNC8xL0J3a1B1bVk3Qnl1
MVRNZlVub2lnT0FOMHkyNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEArlBUAMEAcMqlDANBAIAAjAHAwUA
KgMaYDANBgkqhkiG9w0BAQsFAAOCAQEAMVfW8sUqTeh1925K2bC1O3SqzQmIvceh
KdszOCYR2gQEnLMSCRgXc6dRXs7XNPHr9mQAaomeArti6ln2Xy70fRQORZkTD8cI
uckyc6a0pHjjKqxJbY+RPs5OMrDq/uG8bKL/ylWoQ2Y1qH1l6TYUL+6wIsCApTMu
pKID3r7O01fvLQ/msVUcOcXnN+w1SoZDFJTb6r9cXn8UVJMrSvfNPWoTwFvJnz5D
2hVoCFRw3GDW3rlfzFYCbGB58uFOioDBq0eL6BuIByBNqz7U0K0shvaRX3mdMxRd
o+1zNOGM2xvro8+cF7sWd7kwQ0AnXDowzgqmZrvvJ7vkCqTa+DZFfg==
-----END CERTIFICATE-----
Generated at Tue May 13 19:40:06 2025 by rpki-client