Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/e4ca56-1386-432c-96cb-65a9a4dfad9e/1/TRCwDkl5UGTpFncL0AQ5JTHX6YE.roa
File: TRCwDkl5UGTpFncL0AQ5JTHX6YE.roa (raw, json)
Hash identifier: qqBUltyZUMCkfg2ISTU9dpyAfscGCmhtwjSk0N0oNq8=
Subject key identifier: 4D:10:B0:0E:49:79:50:64:E9:16:77:0B:D0:04:39:25:31:D7:E9:81
Certificate issuer: /CN=afb00b29396e78033edbacafef9850b1b0e35323
Certificate serial: 5DFD5C
Authority key identifier: AF:B0:0B:29:39:6E:78:03:3E:DB:AC:AF:EF:98:50:B1:B0:E3:53:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r7ALKTlueAM-26yv75hQsbDjUyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/e4ca56-1386-432c-96cb-65a9a4dfad9e/1/TRCwDkl5UGTpFncL0AQ5JTHX6YE.roa
Signing time: Sat 01 Jan 2022 01:57:54 +0000
ROA not before: Sat 01 Jan 2022 01:57:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206911
IP address blocks: 185.171.109.0/24 maxlen: 24
185.171.108.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6159708 (0x5dfd5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afb00b29396e78033edbacafef9850b1b0e35323
Validity
Not Before: Jan 1 01:57:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4d10b00e49795064e916770bd004392531d7e981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4f:bc:04:d6:7f:16:bd:36:00:62:e5:af:1a:
3d:ed:c7:29:2e:74:f3:02:91:46:9d:12:b1:77:d7:
c5:68:fc:60:f9:1d:cd:08:25:c1:7f:30:0f:a0:de:
a0:e9:d4:d2:37:50:e3:c0:38:6b:ad:91:a3:14:02:
ee:ca:63:35:10:a6:f6:73:d9:6a:95:f9:cf:e8:62:
e6:45:50:28:99:9a:05:2e:1b:7a:6c:46:b2:f9:67:
6c:47:51:bc:b3:90:c3:a3:73:c6:52:b3:32:b9:e4:
28:bb:92:ba:9a:cb:a5:c3:79:4a:85:6f:45:84:c6:
a5:45:a9:13:a0:ea:e9:e7:c8:df:0f:d0:d2:e9:41:
36:4e:77:86:b2:0d:19:e1:be:fe:8a:12:71:d6:45:
93:1a:13:01:4d:2e:a6:6a:56:de:f7:6e:33:1a:64:
d9:9b:38:2f:c8:73:c9:5f:12:61:15:e6:d6:9f:fd:
80:10:b9:4e:6e:16:df:ef:0e:af:ad:f5:70:0a:b9:
a2:78:84:21:22:9b:6f:c6:82:85:c3:8a:99:76:4d:
bb:d9:3b:ef:2a:eb:d1:d3:e4:b2:4f:a1:82:84:5d:
1b:ca:49:b5:ff:24:74:46:4d:76:ab:e0:fa:00:19:
f8:2d:7f:41:c5:96:d4:4b:7a:73:1c:4f:dd:be:66:
49:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:10:B0:0E:49:79:50:64:E9:16:77:0B:D0:04:39:25:31:D7:E9:81
X509v3 Authority Key Identifier:
keyid:AF:B0:0B:29:39:6E:78:03:3E:DB:AC:AF:EF:98:50:B1:B0:E3:53:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7ALKTlueAM-26yv75hQsbDjUyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/e4ca56-1386-432c-96cb-65a9a4dfad9e/1/TRCwDkl5UGTpFncL0AQ5JTHX6YE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/e4ca56-1386-432c-96cb-65a9a4dfad9e/1/r7ALKTlueAM-26yv75hQsbDjUyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.171.108.0/23
Signature Algorithm: sha256WithRSAEncryption
54:05:f9:36:80:a8:e1:24:8d:d4:5e:0b:42:50:f6:9b:de:74:
27:e9:ba:8f:32:b5:a3:59:ca:79:f2:c2:1e:22:a6:f0:63:dd:
1b:3b:83:b9:0f:7f:a5:73:11:04:81:1e:0d:e8:aa:75:17:51:
21:68:0b:0e:fe:5d:3c:d0:a1:70:66:52:ea:e5:81:f6:60:02:
5c:93:41:fc:79:55:81:2a:e0:2d:41:69:c2:27:98:e3:a2:4a:
d1:e8:9e:ad:2c:23:f9:d6:7f:e6:9e:13:0e:55:8f:28:5e:0d:
c6:12:f8:6f:0c:a0:f1:a6:ec:47:12:97:be:b4:c3:fe:a8:a6:
0e:6b:fc:d6:a1:7e:d2:f0:7a:25:a5:8c:90:d1:4b:52:57:05:
bb:a4:82:83:31:5c:9c:63:87:6c:cb:cd:4b:41:87:c6:73:bc:
bc:63:06:e8:fe:e6:78:b8:ce:e5:b2:45:ad:7e:2e:32:e5:31:
b5:21:5a:a0:d6:db:e5:d1:0b:e3:be:1f:a4:79:2e:7e:ee:9c:
0a:0d:04:18:6e:7a:59:b4:13:a5:2c:02:f0:e5:39:72:b2:9c:
b8:bd:cc:05:e1:ce:64:2f:a3:96:ad:24:3c:ed:49:ef:57:b8:
12:a6:e2:91:3f:60:a7:02:92:79:8e:9e:56:24:29:88:23:88:
2c:b4:53:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 19:16:21 2025 by rpki-client