Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/AFFLdOFARNsXg2miK4y1zAdxDQI.roa
File: AFFLdOFARNsXg2miK4y1zAdxDQI.roa (raw, json)
Hash identifier: x2Z+Yzojog2IJfGkp0F3RD3QdVvxwfUyRbqIQqld3pA=
Subject key identifier: 00:51:4B:74:E1:40:44:DB:17:83:69:A2:2B:8C:B5:CC:07:71:0D:02
Certificate issuer: /CN=5b7a905e25a4d5cccb2eebe4e2d5c3920819758e
Certificate serial: 05745EB0
Authority key identifier: 5B:7A:90:5E:25:A4:D5:CC:CB:2E:EB:E4:E2:D5:C3:92:08:19:75:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W3qQXiWk1czLLuvk4tXDkggZdY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/AFFLdOFARNsXg2miK4y1zAdxDQI.roa
Signing time: Sun 13 Feb 2022 09:57:34 +0000
ROA not before: Sun 13 Feb 2022 09:57:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204650
IP address blocks: 185.110.253.0/24 maxlen: 24
185.110.254.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91512496 (0x5745eb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b7a905e25a4d5cccb2eebe4e2d5c3920819758e
Validity
Not Before: Feb 13 09:57:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=00514b74e14044db178369a22b8cb5cc07710d02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:fc:3b:01:8e:c6:1d:76:61:42:ea:31:35:e2:
3b:c9:65:8a:d5:dc:f8:02:c4:5b:b9:0e:eb:bc:5c:
60:42:6f:03:5b:92:f8:fe:70:ff:1a:2d:b9:a0:21:
ba:10:72:b7:c3:70:da:3e:77:82:c1:33:9c:a9:ac:
ca:21:2b:27:a7:99:cd:6d:b1:2c:08:bb:e2:0d:99:
5c:2f:5a:55:14:99:da:79:d8:5e:1e:8f:cb:27:98:
53:59:7c:10:86:6a:6c:ff:f8:1c:d5:ea:ff:e2:82:
56:b1:4c:df:32:97:bd:aa:41:3e:a0:18:97:1c:bc:
95:a7:50:79:cd:1a:30:36:fe:1a:5d:37:a1:4c:c7:
59:b2:6a:da:07:24:a3:77:35:e1:63:b5:0f:91:a8:
20:af:a2:71:72:d1:05:aa:7d:d8:db:23:9e:3f:55:
01:41:24:11:b8:88:51:fd:a6:86:d1:fb:40:8e:72:
3c:c8:bd:80:a8:51:74:e8:39:ee:8d:8f:9f:2e:3b:
13:03:84:0f:86:17:c5:ad:f3:f3:2a:58:a6:26:24:
63:89:9a:9e:0c:23:08:a4:80:fb:81:8e:35:00:a8:
b5:61:dd:65:f2:c0:29:d7:9a:fc:53:8e:dd:d6:e8:
bf:e4:ee:05:af:be:80:66:64:78:d2:99:bf:07:e1:
8f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:51:4B:74:E1:40:44:DB:17:83:69:A2:2B:8C:B5:CC:07:71:0D:02
X509v3 Authority Key Identifier:
keyid:5B:7A:90:5E:25:A4:D5:CC:CB:2E:EB:E4:E2:D5:C3:92:08:19:75:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W3qQXiWk1czLLuvk4tXDkggZdY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/AFFLdOFARNsXg2miK4y1zAdxDQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.110.253.0-185.110.254.255
Signature Algorithm: sha256WithRSAEncryption
4e:79:c2:78:c5:eb:bc:cf:6c:e8:0b:8c:ae:89:e7:e4:82:04:
b7:8c:4f:16:04:1b:ba:e9:95:8e:2b:87:01:ad:00:29:15:44:
8c:1a:50:2f:b6:80:24:a0:70:89:71:c3:25:01:87:57:70:51:
b9:65:35:d9:14:0f:94:f4:97:4d:a5:2d:bb:f2:99:1c:0d:7d:
aa:74:dd:64:75:47:b0:32:86:24:8d:88:d9:2b:b5:db:06:07:
80:a6:aa:7d:d9:0b:55:31:ce:4f:b8:7c:60:50:6a:09:a2:b3:
77:55:78:a4:c4:36:50:d2:a4:9f:57:ac:b6:51:f8:30:4e:8f:
54:4d:0c:ad:8b:99:ee:68:af:5c:e8:82:15:e8:c1:0a:30:4d:
3b:b1:85:04:26:11:df:eb:bd:7c:1b:8d:cb:da:74:9b:4e:fe:
fb:d1:ab:ba:2c:39:0e:75:af:65:01:1d:ab:c6:5e:2a:32:80:
a5:74:69:d3:66:18:e4:e3:d9:16:97:2a:20:aa:70:c9:c7:4f:
cf:42:07:e7:34:a9:75:1d:79:a3:b2:96:18:0a:39:34:8a:05:
49:d3:c7:80:8e:12:c0:66:ee:fa:8e:33:ef:fd:9e:94:f7:7e:
29:88:57:e4:e4:63:44:1c:16:5f:ed:da:31:0b:b9:d3:77:f5:
9f:fe:9c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:15:31 2025 by rpki-client