Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/Q2IMYgUxu9IwAjCea4P0nex2NbE.roa
File: Q2IMYgUxu9IwAjCea4P0nex2NbE.roa (raw, json)
Hash identifier: xOMilZGdPKauEG1M05xzyz05MVOYAotdcyZoZ+e7bQY=
Subject key identifier: 43:62:0C:62:05:31:BB:D2:30:02:30:9E:6B:83:F4:9D:EC:76:35:B1
Certificate issuer: /CN=8f9a4670146ad880f14bada4b2762b613ddf1d18
Certificate serial: 018236B402E0C881A384743598B1E2D3E98E
Authority key identifier: 8F:9A:46:70:14:6A:D8:80:F1:4B:AD:A4:B2:76:2B:61:3D:DF:1D:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5pGcBRq2IDxS62ksnYrYT3fHRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/Q2IMYgUxu9IwAjCea4P0nex2NbE.roa
Signing time: Mon 25 Jul 2022 18:52:23 +0000
ROA not before: Mon 25 Jul 2022 18:52:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15623
IP address blocks: 185.241.85.0/24 maxlen: 24
185.241.84.0/24 maxlen: 24
185.241.86.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:36:b4:02:e0:c8:81:a3:84:74:35:98:b1:e2:d3:e9:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f9a4670146ad880f14bada4b2762b613ddf1d18
Validity
Not Before: Jul 25 18:52:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=43620c620531bbd23002309e6b83f49dec7635b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:2b:fc:12:e6:dc:68:67:27:d7:8c:5b:fc:13:
e1:2d:9b:27:86:0b:38:d3:e3:66:2c:d2:ec:ab:7b:
76:4a:f6:c2:e0:81:7c:42:80:f5:04:e0:3d:32:31:
a0:05:e5:d1:48:4e:9a:9f:3d:06:7d:80:ee:e2:37:
63:d0:04:27:9c:3e:80:a2:11:88:6e:c3:c7:f4:f1:
7a:8e:61:73:97:6f:ef:ff:89:60:46:87:80:96:9d:
50:6b:b4:3b:89:69:b6:77:b9:72:85:88:de:0c:2e:
71:d9:2c:df:e1:c1:1a:0a:63:81:e6:c0:c1:a8:1c:
de:5e:a7:5f:92:fd:dc:9c:64:f9:e5:d3:ad:ae:5e:
47:41:b8:ec:c3:bb:af:c5:46:8e:db:25:57:3e:71:
11:38:1f:dd:ad:17:92:15:89:45:87:ca:61:62:bf:
de:df:f0:d7:09:60:dd:0a:f9:ef:56:b5:f9:19:9c:
4b:d4:53:7f:c4:d3:1e:57:ee:58:9e:79:19:c4:f4:
3e:35:69:29:2e:31:ba:91:6a:30:1c:2d:00:1c:af:
7e:87:f5:9c:72:9e:91:8f:d6:a5:7d:dd:d9:ad:03:
db:53:43:a0:2e:f5:6c:f8:f9:50:18:7f:2a:a9:da:
fb:04:74:6e:77:95:65:67:67:3d:31:73:56:30:81:
e6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:62:0C:62:05:31:BB:D2:30:02:30:9E:6B:83:F4:9D:EC:76:35:B1
X509v3 Authority Key Identifier:
keyid:8F:9A:46:70:14:6A:D8:80:F1:4B:AD:A4:B2:76:2B:61:3D:DF:1D:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5pGcBRq2IDxS62ksnYrYT3fHRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/Q2IMYgUxu9IwAjCea4P0nex2NbE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j5pGcBRq2IDxS62ksnYrYT3fHRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.241.84.0-185.241.86.255
Signature Algorithm: sha256WithRSAEncryption
33:a0:9a:5e:4d:7b:97:1d:cc:db:ca:58:95:b4:f4:02:60:20:
5e:c3:97:44:c8:69:7b:c0:16:db:fb:f7:ec:01:f2:44:3a:da:
81:54:e7:2f:44:0e:94:c0:37:b3:ca:70:c7:2c:ac:dc:b9:e2:
c0:b3:89:23:08:99:bf:3d:02:2d:8c:8e:d7:11:e8:36:b8:65:
4e:9e:25:dc:2a:2c:b7:c6:e1:4b:4a:37:51:3b:f3:03:a0:1a:
58:4a:95:2e:c2:31:b1:e2:3d:6a:63:a2:9d:2e:8d:7a:bb:0b:
7a:4e:04:f3:b4:4c:12:0a:3f:eb:b1:3d:10:1e:d7:57:d5:9f:
d1:d4:8d:e0:f3:ee:f4:99:f8:a0:01:94:8b:a5:30:25:46:46:
4a:65:ba:c5:d6:a3:ca:36:7f:83:37:08:14:62:56:b7:1e:e9:
75:ef:7d:0a:12:94:f8:91:0b:9a:66:cf:eb:ee:a0:8e:6e:0b:
c3:d3:27:9d:68:33:00:bc:d5:fc:32:32:77:b9:4b:36:1f:0e:
88:9f:a5:ce:57:8f:f0:1d:8e:51:10:90:10:12:e5:c6:54:72:
9c:54:bf:48:7a:fb:ee:ad:86:36:11:08:03:73:1e:1b:4e:61:
c6:b8:fd:92:52:97:b4:ca:aa:dc:2a:fc:ee:4b:74:cc:96:bf:
8c:1d:f7:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 18:27:32 2025 by rpki-client