Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/9jqwyHNo2gXUdfdLIObpF4o7w7k.roa
File: 9jqwyHNo2gXUdfdLIObpF4o7w7k.roa (raw, json)
Hash identifier: eXlLvlFfuWLwdbqEm24VdlDHl7nyEnikWhY/B6OHHs4=
Subject key identifier: F6:3A:B0:C8:73:68:DA:05:D4:75:F7:4B:20:E6:E9:17:8A:3B:C3:B9
Certificate issuer: /CN=3841abaa3e75c46d98b6fa8678d34fef2ac385b0
Certificate serial: 028612
Authority key identifier: 38:41:AB:AA:3E:75:C4:6D:98:B6:FA:86:78:D3:4F:EF:2A:C3:85:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEGrqj51xG2YtvqGeNNP7yrDhbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/9jqwyHNo2gXUdfdLIObpF4o7w7k.roa
Signing time: Thu 17 Mar 2022 19:41:05 +0000
ROA not before: Thu 17 Mar 2022 19:41:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35175
IP address blocks: 85.194.208.0/21 maxlen: 21
85.194.216.0/22 maxlen: 22
185.117.220.0/22 maxlen: 22
2a06:8680::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 165394 (0x28612)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3841abaa3e75c46d98b6fa8678d34fef2ac385b0
Validity
Not Before: Mar 17 19:41:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f63ab0c87368da05d475f74b20e6e9178a3bc3b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c1:c9:51:e3:60:f1:92:f2:b8:a6:e5:ef:59:
26:79:83:a6:75:be:3f:98:28:e0:20:8b:e4:e7:34:
38:91:6f:9a:83:31:f2:4c:cb:26:c8:ca:4f:cb:fb:
8a:96:1b:78:5a:35:c3:02:9d:ad:ed:07:23:2f:13:
28:26:a1:0b:d3:9c:56:7b:92:43:08:a4:ba:8d:6f:
37:fd:ad:81:c4:47:dc:39:b0:1f:dd:96:58:70:4b:
f6:f8:5e:9b:11:31:e4:4a:89:ad:e9:fd:77:02:81:
ab:6f:ac:72:35:37:81:90:d3:31:fd:f3:fb:1f:df:
31:30:9e:8c:4c:65:96:70:9e:91:11:c2:de:8f:5b:
7a:5f:0f:1d:30:32:f7:2f:db:70:fd:8b:9a:5e:59:
04:a9:46:78:d5:35:e2:5d:a1:33:27:d2:8f:e5:82:
66:80:78:df:d2:8e:ae:fb:1f:0b:df:cc:5e:7b:7c:
e9:2a:8e:af:f0:4e:12:51:0f:50:98:62:87:d5:e3:
d3:b6:47:bb:81:08:fa:60:8b:e4:04:23:76:f6:a0:
97:db:6a:82:3b:2e:a8:7a:a1:23:2f:13:f4:1a:c5:
ad:0a:e6:82:c8:f2:72:72:44:7c:55:25:14:3d:a0:
0a:69:66:ac:61:8e:bf:02:ea:6b:9b:82:a2:dc:39:
4d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:3A:B0:C8:73:68:DA:05:D4:75:F7:4B:20:E6:E9:17:8A:3B:C3:B9
X509v3 Authority Key Identifier:
keyid:38:41:AB:AA:3E:75:C4:6D:98:B6:FA:86:78:D3:4F:EF:2A:C3:85:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEGrqj51xG2YtvqGeNNP7yrDhbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/9jqwyHNo2gXUdfdLIObpF4o7w7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/OEGrqj51xG2YtvqGeNNP7yrDhbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.194.208.0-85.194.219.255
185.117.220.0/22
IPv6:
2a06:8680::/29
Signature Algorithm: sha256WithRSAEncryption
36:73:28:9b:1c:71:76:90:9e:b7:f9:57:a8:ce:fd:0c:05:15:
c5:24:75:80:52:9b:be:f3:ee:63:12:a1:2d:79:64:36:2a:42:
13:54:4d:3d:30:f8:67:0b:bb:19:0d:5d:e1:aa:0f:91:c3:5a:
11:77:9f:3f:a4:46:6e:5f:4a:f7:4f:d0:74:9b:8c:88:e8:bb:
14:1d:eb:47:d2:d1:b0:4a:41:d9:18:4e:84:65:f3:1b:66:00:
2b:0a:a9:ac:9c:70:6a:17:21:11:fd:e6:bb:8a:0e:31:ad:00:
db:50:5e:9e:b8:3f:0a:cb:01:09:df:78:0e:9b:93:64:29:81:
57:47:5b:ca:71:0a:4c:5f:83:27:e5:11:a2:5d:88:df:b0:1b:
7f:f3:c8:3e:4b:a5:bc:1d:01:10:07:7d:dc:d4:a1:1a:57:0d:
31:9b:18:59:f1:27:cf:09:ee:96:db:dd:c1:26:fd:81:2b:cf:
1d:84:a6:9d:41:09:4d:b2:12:24:97:4b:0a:03:32:b3:70:0a:
51:f3:77:49:b8:3f:e4:1c:e9:f7:a2:b5:52:83:a3:74:3c:69:
c7:43:a6:a7:43:31:73:66:03:aa:14:3b:6d:71:38:4d:2b:58:
d5:af:83:55:8f:ad:bb:d2:b8:c6:89:22:c2:73:dd:c0:f7:5b:
3e:67:09:18
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 8 17:49:19 2025 by rpki-client