Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/4-B6sPN0oFD80qLKm70-cg94Hy4.roa
File: 4-B6sPN0oFD80qLKm70-cg94Hy4.roa (raw, json)
Hash identifier: Ug4smK7+QxCkl/gPX8ovth5CJXWi1Db17bUEq0z7zi8=
Subject key identifier: E3:E0:7A:B0:F3:74:A0:50:FC:D2:A2:CA:9B:BD:3E:72:0F:78:1F:2E
Certificate issuer: /CN=5b7a905e25a4d5cccb2eebe4e2d5c3920819758e
Certificate serial: 0647EA2B
Authority key identifier: 5B:7A:90:5E:25:A4:D5:CC:CB:2E:EB:E4:E2:D5:C3:92:08:19:75:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W3qQXiWk1czLLuvk4tXDkggZdY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/4-B6sPN0oFD80qLKm70-cg94Hy4.roa
Signing time: Tue 10 May 2022 13:52:03 +0000
ROA not before: Tue 10 May 2022 13:52:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204650
IP address blocks: 185.110.253.0/24 maxlen: 24
185.110.254.0/24 maxlen: 24
185.119.164.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105376299 (0x647ea2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b7a905e25a4d5cccb2eebe4e2d5c3920819758e
Validity
Not Before: May 10 13:52:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e3e07ab0f374a050fcd2a2ca9bbd3e720f781f2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:46:2f:5b:ed:69:cc:5a:85:15:01:6b:c6:2c:
1d:44:3a:23:cb:72:70:d4:ca:55:0a:bf:82:a4:b2:
fe:7a:e6:0c:98:01:2d:9a:13:1b:dd:01:c2:77:95:
7c:54:36:66:7a:77:4a:81:52:e7:6f:95:1d:8a:3e:
c4:19:b6:af:3a:c0:22:86:fe:fa:aa:be:da:fe:ef:
95:5f:43:0a:40:2e:65:60:d8:3f:22:b9:b2:f7:2d:
6d:3b:5c:78:37:06:e8:df:5b:42:62:f4:92:84:37:
b6:cb:c9:28:f6:53:9f:db:30:2c:5e:22:60:12:aa:
9e:ca:00:43:54:c7:f1:2c:3b:90:df:f8:a1:ca:62:
7b:ba:0b:11:45:48:d9:ae:bf:4e:f7:c6:bd:14:59:
53:ab:80:10:46:07:66:63:14:e2:f6:37:59:b0:f3:
7e:c5:0f:f9:f1:8e:0d:5e:62:48:4d:90:9c:13:69:
ee:45:57:23:bb:e9:20:ef:3f:51:8b:9e:03:12:b8:
70:7a:c8:0b:5a:90:1f:8e:d2:93:03:e8:75:1c:86:
95:4e:8d:b6:98:8b:e4:cf:34:d7:e8:98:13:8f:a7:
60:a9:dc:fd:8b:13:25:ae:a2:60:d9:d5:f6:16:c5:
be:24:e5:0a:38:9e:6c:d7:c9:16:61:c3:20:6d:90:
78:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:E0:7A:B0:F3:74:A0:50:FC:D2:A2:CA:9B:BD:3E:72:0F:78:1F:2E
X509v3 Authority Key Identifier:
keyid:5B:7A:90:5E:25:A4:D5:CC:CB:2E:EB:E4:E2:D5:C3:92:08:19:75:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W3qQXiWk1czLLuvk4tXDkggZdY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/4-B6sPN0oFD80qLKm70-cg94Hy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.110.253.0-185.110.254.255
185.119.164.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:c9:6a:dd:5d:81:5a:0f:40:90:a5:2b:4b:69:d9:b7:1a:0a:
ac:e1:61:a8:0b:c8:52:0d:59:f4:3a:cf:dd:61:ec:a0:c9:a9:
66:0a:ce:3b:5f:83:25:4a:99:13:e8:c1:84:09:b9:e3:fc:85:
51:64:fc:03:c6:1f:6f:d5:bb:c1:a3:ec:2a:bf:d2:fc:ef:d9:
10:17:03:15:1d:b4:47:14:0f:cc:4b:d9:2d:63:ed:ab:5a:c6:
99:cc:22:8b:7d:4b:1d:4f:31:d1:0a:d9:a3:a2:c7:d3:a7:5d:
fe:00:68:2b:61:7c:3c:41:c0:f7:42:21:90:b1:93:df:af:ad:
e4:6f:78:10:48:04:0c:13:c1:cc:c4:57:98:03:b5:07:99:27:
bb:44:03:3d:32:ed:5b:87:e2:b6:f1:d0:fb:1f:c3:e2:b2:c0:
5d:aa:6a:25:0e:4f:82:cd:41:76:85:a8:94:17:70:e3:e0:0b:
ee:0c:d4:92:71:dd:78:0d:9a:4b:b5:8b:f0:2f:fa:c9:a6:25:
4a:cf:8a:6e:6f:67:b5:c3:7b:c7:33:86:61:e6:1d:f4:eb:f5:
89:1b:93:d4:d5:65:5d:bb:12:1c:44:44:d8:40:85:f5:a8:2a:
24:ae:47:f1:17:07:cf:42:c2:6e:9c:89:d2:cf:e4:4f:e7:7b:
be:ec:5c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:51:39 2025 by rpki-client