Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/xTpUdPi1PZRM5pDxuszvOcJAt88.roa
File: xTpUdPi1PZRM5pDxuszvOcJAt88.roa (raw, json)
Hash identifier: JhQ/zBkCGL+Td0A/reZSrV0B8ztWwDs6twKitVEmko4=
Subject key identifier: C5:3A:54:74:F8:B5:3D:94:4C:E6:90:F1:BA:CC:EF:39:C2:40:B7:CF
Certificate issuer: /CN=06c1fac24e30d9258eb2ef72f31ed9bd608fe0de
Certificate serial: 018784A72E6ECE0669A49421D22D8ED86513
Authority key identifier: 06:C1:FA:C2:4E:30:D9:25:8E:B2:EF:72:F3:1E:D9:BD:60:8F:E0:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/xTpUdPi1PZRM5pDxuszvOcJAt88.roa
Signing time: Sat 15 Apr 2023 11:22:41 +0000
ROA not before: Sat 15 Apr 2023 11:22:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61955
IP address blocks: 185.54.111.0/24 maxlen: 24
185.54.108.0/22 maxlen: 22
185.54.108.0/24 maxlen: 24
185.54.109.0/24 maxlen: 24
185.54.110.0/24 maxlen: 24
2a02:44a0:1c::/48 maxlen: 48
2a02:44a0:17::/48 maxlen: 48
2a02:44a0:12::/48 maxlen: 48
2a02:44a0:d::/48 maxlen: 48
2a02:44a0:10::/48 maxlen: 48
2a02:44a0:b::/48 maxlen: 48
2a02:44a0:6::/48 maxlen: 48
2a02:44a0:1::/48 maxlen: 48
2a02:44a0:14::/48 maxlen: 48
2a02:44a0:f::/48 maxlen: 48
2a02:44a0:a::/48 maxlen: 48
2a02:44a0::/64 maxlen: 64
2a02:44a0:5::/48 maxlen: 48
2a02:44a0:8::/48 maxlen: 48
2a02:44a0:3::/48 maxlen: 48
2a02:44a0:1e::/48 maxlen: 48
2a02:44a0:19::/48 maxlen: 48
2a02:44a0:c::/48 maxlen: 48
2a02:44a0:7::/48 maxlen: 48
2a02:44a0:2::/48 maxlen: 48
2a02:44a0:1d::/48 maxlen: 48
2a02:44a0::/48 maxlen: 48
2a02:44a0:1b::/48 maxlen: 48
2a02:44a0:16::/48 maxlen: 48
2a02:44a0:11::/48 maxlen: 48
2a02:44a0:4::/48 maxlen: 48
2a02:44a0:ffff::/48 maxlen: 48
2a02:44a0:1f::/48 maxlen: 48
2a02:44a0:1a::/48 maxlen: 48
2a02:44a0:15::/48 maxlen: 48
2a02:44a0:18::/48 maxlen: 48
2a02:44a0:13::/48 maxlen: 48
2a02:44a0:e::/48 maxlen: 48
2a02:44a0:9::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:84:a7:2e:6e:ce:06:69:a4:94:21:d2:2d:8e:d8:65:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c1fac24e30d9258eb2ef72f31ed9bd608fe0de
Validity
Not Before: Apr 15 11:22:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c53a5474f8b53d944ce690f1baccef39c240b7cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f4:27:42:e5:54:5a:19:b8:c9:f2:71:33:da:
19:73:5a:d3:01:3c:c8:db:8e:22:83:73:5f:30:9b:
f7:d9:24:fa:d9:04:84:fd:0d:b6:d3:8d:a3:ce:5f:
ae:e6:2f:30:9e:e2:94:11:0f:19:98:9f:cb:b5:49:
60:79:a1:48:e3:64:8a:80:64:28:4e:bc:55:15:01:
df:36:2d:12:a8:a4:27:95:04:48:23:ee:07:a4:00:
ff:38:25:e6:77:9e:95:c4:8c:0b:91:7c:b1:72:94:
80:42:93:2c:ca:a9:af:c9:96:8c:91:bc:d6:9a:f5:
44:c7:8a:87:86:00:17:d8:be:c6:90:94:af:b2:dd:
30:2a:17:4a:b8:38:5f:89:15:59:86:f8:db:0b:e5:
6a:49:9b:98:ca:5f:10:60:d7:33:82:ea:81:01:d1:
f3:5e:4b:3f:f3:dd:3f:c2:52:e7:0f:72:ae:18:10:
80:a7:f1:cb:82:db:d2:2c:51:6e:3a:f1:1e:82:14:
2b:f5:10:10:0a:ae:25:01:c4:eb:d7:f1:93:1c:15:
fa:3d:c4:7c:34:09:00:f3:e0:fd:f7:8a:45:fb:c2:
d4:56:e1:f6:33:ae:c8:cc:64:0d:0c:75:2f:b3:bd:
40:96:4c:f7:83:f3:20:c0:52:bc:b9:bc:a4:01:8a:
35:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:3A:54:74:F8:B5:3D:94:4C:E6:90:F1:BA:CC:EF:39:C2:40:B7:CF
X509v3 Authority Key Identifier:
keyid:06:C1:FA:C2:4E:30:D9:25:8E:B2:EF:72:F3:1E:D9:BD:60:8F:E0:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/xTpUdPi1PZRM5pDxuszvOcJAt88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.54.108.0/22
IPv6:
2a02:44a0::/43
2a02:44a0:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
a1:c9:16:a9:36:b9:e9:4f:c0:b6:4c:a8:39:6f:78:b7:5d:cc:
65:33:5f:18:28:cf:e8:f6:88:68:dc:da:43:5e:e4:53:74:6f:
ef:ea:bb:d3:cb:3d:14:fb:43:ac:5f:7a:3e:1b:f5:97:45:ee:
3c:0c:81:cf:93:43:58:ad:2c:92:49:db:e9:2a:84:a4:a0:95:
f3:16:fc:8d:3b:42:87:0e:17:fc:41:67:bb:52:d9:47:d7:f8:
a3:af:46:29:8d:49:fd:c5:db:9f:19:fb:91:9a:d5:cb:c6:e0:
94:af:ac:15:5d:9c:1b:8c:1c:c2:a7:1a:dc:b7:55:42:2f:cc:
c4:bb:43:b4:19:44:8c:f4:72:e9:7c:41:fd:72:a7:ca:99:8b:
bc:2a:87:d0:47:9a:62:bb:06:c3:82:a6:57:23:37:be:c5:75:
a8:f0:1c:e7:7e:74:f0:34:12:c4:2d:f8:1d:10:6b:ea:87:01:
85:e7:1b:64:01:d6:30:9f:b0:53:5b:3c:6b:1b:c8:74:5d:0e:
88:05:c6:a2:69:6e:9a:c0:af:ea:10:97:93:e3:71:c3:2c:a1:
06:3a:9f:8e:3f:9a:e0:c7:16:be:f1:82:39:9f:1c:ba:eb:4e:
9e:af:0e:89:59:86:ba:87:3f:09:08:57:fe:1c:35:5a:df:1c:
71:30:eb:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:33:14 2025 by rpki-client