Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/0z3rNOG9cBwfp3zkPm_d1QOeYJ0.roa
File: 0z3rNOG9cBwfp3zkPm_d1QOeYJ0.roa (raw, json)
Hash identifier: bOmWDwTyw90DvocxovYXvUwm58MCh6N9fxayljsX9wI=
Subject key identifier: D3:3D:EB:34:E1:BD:70:1C:1F:A7:7C:E4:3E:6F:DD:D5:03:9E:60:9D
Certificate issuer: /CN=4e0f39e2caae8e2cf14bcc41b23f3c86e1a720f8
Certificate serial: 11BDCCD3
Authority key identifier: 4E:0F:39:E2:CA:AE:8E:2C:F1:4B:CC:41:B2:3F:3C:86:E1:A7:20:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tg854squjizxS8xBsj88huGnIPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/0z3rNOG9cBwfp3zkPm_d1QOeYJ0.roa
Signing time: Sat 01 Jan 2022 14:57:51 +0000
ROA not before: Sat 01 Jan 2022 14:57:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198203
IP address blocks: 185.157.209.0/24 maxlen: 24
185.157.210.0/24 maxlen: 24
185.157.211.0/24 maxlen: 24
185.157.208.0/24 maxlen: 24
2a03:afe1::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 297651411 (0x11bdccd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e0f39e2caae8e2cf14bcc41b23f3c86e1a720f8
Validity
Not Before: Jan 1 14:57:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d33deb34e1bd701c1fa77ce43e6fddd5039e609d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:11:6b:02:78:55:0a:ec:83:2f:3b:07:8d:08:
4f:86:ac:5c:9d:3d:63:50:37:20:cb:27:7c:3f:d1:
7f:67:8f:46:d4:a7:78:10:79:6a:81:aa:b3:93:22:
e8:6a:20:53:cb:46:78:b5:be:a7:46:be:e6:24:72:
c3:f8:53:46:d0:91:fa:16:ba:98:8b:26:4a:93:91:
b3:1f:5b:7c:cf:9e:6c:d9:d5:8d:55:f7:86:43:7c:
28:9b:61:95:5a:9f:ff:98:ae:17:03:b4:92:b3:7e:
33:a4:de:09:62:4f:90:e5:72:1b:93:bf:5b:91:aa:
13:da:b7:ac:35:5b:51:b2:17:c1:8b:b0:6d:8f:62:
4b:f2:64:e5:2b:ea:9f:d2:47:1f:3d:4d:7d:f8:99:
52:1f:f0:af:1f:d4:e2:eb:48:b7:5d:19:93:63:40:
f0:ac:c7:c8:20:4d:d3:31:bb:99:18:94:ff:54:05:
48:78:c4:96:43:8a:3a:72:bf:e9:8f:69:56:11:ea:
89:63:72:62:03:91:0c:0b:d2:f9:47:07:44:8b:88:
a3:5e:e8:6c:bf:19:ba:15:ec:c1:67:c4:82:e2:2b:
33:52:b2:8d:1e:aa:5e:d7:1c:4a:89:1b:a1:c6:c5:
6f:98:35:5f:2a:cc:d9:2d:df:9f:9e:91:aa:5f:12:
42:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:3D:EB:34:E1:BD:70:1C:1F:A7:7C:E4:3E:6F:DD:D5:03:9E:60:9D
X509v3 Authority Key Identifier:
keyid:4E:0F:39:E2:CA:AE:8E:2C:F1:4B:CC:41:B2:3F:3C:86:E1:A7:20:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tg854squjizxS8xBsj88huGnIPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/0z3rNOG9cBwfp3zkPm_d1QOeYJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.157.208.0/22
IPv6:
2a03:afe1::/32
Signature Algorithm: sha256WithRSAEncryption
ae:52:a4:d1:f2:7e:b5:21:67:3c:c6:e0:6e:c4:f4:a3:22:20:
2b:22:4e:d8:d2:33:ad:a5:82:d9:b2:c0:98:f9:0c:c4:4d:03:
9c:06:a2:e1:fd:83:a6:09:86:d0:05:a8:36:31:d5:9b:7a:39:
ca:87:08:28:aa:e5:16:18:f9:f8:2e:82:61:eb:5f:ed:51:4f:
8e:14:50:a7:4d:44:47:bb:02:be:8c:0d:dc:7a:d9:d1:51:74:
fb:72:e1:86:51:62:9c:c2:63:4d:99:2c:d3:50:f3:63:ed:70:
e1:03:77:ec:aa:5e:d7:27:fb:d6:ad:80:80:cc:ef:e3:79:77:
13:0f:3a:a5:90:f6:45:01:c5:69:d7:37:34:a4:c2:19:65:c0:
43:38:d6:7b:83:61:9c:9a:18:72:81:13:94:d1:52:aa:0e:cd:
20:a5:53:73:72:a8:27:ce:10:3a:07:2f:9d:f5:bb:a2:c6:81:
3b:0f:d2:55:c3:97:76:5b:6c:14:2e:0b:d5:dc:4c:f2:b3:0c:
87:37:fd:c4:fb:da:6c:fa:0c:48:87:6b:63:43:5c:92:29:3c:
fe:0b:62:86:21:cd:8d:2c:61:74:c3:eb:3a:05:43:de:f7:c6:
9a:8c:94:88:91:75:52:99:e0:69:7f:2b:2a:af:06:2d:25:65:
45:5d:1b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:09:18 2025 by rpki-client