Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/bdfe17-91ad-4f31-aecd-81ed12ddf175/1/Afrl6s5PZPgvkctwbjKet3XkOJQ.roa
File: Afrl6s5PZPgvkctwbjKet3XkOJQ.roa (raw, json)
Hash identifier: tDM+y6upJ+kLXsVAUGhHe/fLIdvidehcBeJxXhqhGdQ=
Subject key identifier: 01:FA:E5:EA:CE:4F:64:F8:2F:91:CB:70:6E:32:9E:B7:75:E4:38:94
Certificate issuer: /CN=1b9e417bb9ecb1ace9491ebc2823bb78934b2cdf
Certificate serial: 018571275AE8B3B224D1C792362728694BB9
Authority key identifier: 1B:9E:41:7B:B9:EC:B1:AC:E9:49:1E:BC:28:23:BB:78:93:4B:2C:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G55Be7nssazpSR68KCO7eJNLLN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/bdfe17-91ad-4f31-aecd-81ed12ddf175/1/Afrl6s5PZPgvkctwbjKet3XkOJQ.roa
Signing time: Mon 02 Jan 2023 06:24:42 +0000
ROA not before: Mon 02 Jan 2023 06:24:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30931
IP address blocks: 185.109.140.0/22 maxlen: 24
185.233.4.0/22 maxlen: 24
2a0c:c900::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:27:5a:e8:b3:b2:24:d1:c7:92:36:27:28:69:4b:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b9e417bb9ecb1ace9491ebc2823bb78934b2cdf
Validity
Not Before: Jan 2 06:24:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=01fae5eace4f64f82f91cb706e329eb775e43894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d7:ea:b1:0c:df:26:bc:ac:b2:8b:f6:01:0b:
e5:01:98:79:25:fc:1d:f9:f6:0a:c8:f8:d4:b2:54:
a2:12:67:8c:88:fc:95:8f:88:2e:a7:94:f2:4f:16:
99:9a:9a:9e:b8:de:06:b4:08:23:75:1e:2b:c9:96:
dc:c1:62:8b:84:a1:bb:ee:52:da:b2:3f:d9:b9:e6:
b7:a9:78:6d:4f:4c:fb:66:ba:e9:62:26:d6:e3:18:
e9:f4:b9:e2:95:d6:e7:91:e7:98:87:b5:6e:7e:74:
df:a0:1d:96:35:14:c0:ea:7d:58:cf:19:64:9b:c1:
42:c7:9a:ab:ad:be:03:66:63:4e:82:ee:eb:b4:28:
17:78:56:7b:60:8e:2d:c4:65:72:42:ca:9b:79:00:
a6:9b:e4:32:af:2d:45:55:d8:ff:2a:94:ca:f3:23:
30:4b:61:13:42:d3:d3:00:93:ac:a0:ee:22:6d:1c:
c4:d5:da:b6:f9:23:6d:52:a7:3e:22:ee:89:ea:4c:
f8:3b:dd:c0:cf:c4:52:af:0a:dd:18:43:a2:1b:e9:
59:d1:00:98:de:58:5f:ab:49:2c:9a:c5:08:3d:9c:
cd:2c:6e:e8:3a:e7:fc:77:0c:68:8b:c7:7b:1e:cc:
d5:8d:82:b8:08:df:a7:08:a2:2d:ad:f0:49:67:dc:
d7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:FA:E5:EA:CE:4F:64:F8:2F:91:CB:70:6E:32:9E:B7:75:E4:38:94
X509v3 Authority Key Identifier:
keyid:1B:9E:41:7B:B9:EC:B1:AC:E9:49:1E:BC:28:23:BB:78:93:4B:2C:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G55Be7nssazpSR68KCO7eJNLLN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bdfe17-91ad-4f31-aecd-81ed12ddf175/1/Afrl6s5PZPgvkctwbjKet3XkOJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bdfe17-91ad-4f31-aecd-81ed12ddf175/1/G55Be7nssazpSR68KCO7eJNLLN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.109.140.0/22
185.233.4.0/22
IPv6:
2a0c:c900::/29
Signature Algorithm: sha256WithRSAEncryption
34:e9:55:af:75:f4:f2:76:16:78:46:2c:65:a6:6d:5b:3b:68:
dd:09:c5:f4:db:24:f0:63:3e:15:a6:48:cc:aa:8f:e4:de:c7:
91:6c:37:65:f9:f3:da:c2:56:cc:ad:a8:f0:27:9c:e0:0f:48:
89:83:62:4d:4a:e2:b9:8f:9f:48:c2:b3:68:4c:9b:48:a9:3e:
9f:bf:1e:94:5b:ed:2c:e5:32:e6:c5:b5:06:4c:d1:e8:c8:ce:
ba:5e:e1:c3:81:94:0b:f7:d4:bd:c3:8d:36:d9:04:34:91:65:
84:dc:97:e8:be:00:32:b9:ee:06:90:b2:7b:e7:dd:3b:a5:a4:
20:1a:e3:40:22:4f:c5:bb:f4:30:74:06:95:bd:a9:a4:f8:87:
9d:8e:3e:46:18:a1:72:bb:8c:b7:73:f4:fd:70:3c:64:98:70:
28:4c:26:2c:84:47:93:2a:76:16:05:25:92:81:ef:cc:29:2b:
7f:38:2b:a6:5a:11:48:b7:a1:f9:25:df:b0:c9:28:63:cc:e2:
1d:f4:4f:25:7e:a1:5b:63:3e:68:14:2e:72:79:67:6d:01:00:
1a:f2:77:2e:ed:61:14:4b:54:f3:20:08:0f:79:77:cf:76:ad:
c1:8d:90:9f:c2:0e:87:8b:d7:5a:e3:7e:05:eb:81:8a:4f:3e:
6d:2c:03:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:30 2025 by rpki-client