Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/BLT76yJYhDoE2CX4zQV4GzOs9Z0.roa
File: BLT76yJYhDoE2CX4zQV4GzOs9Z0.roa (raw, json)
Hash identifier: 5tXfAtIZW61LK3KYe948Wap3e/LNR/+Dp4JP+Seb5ts=
Subject key identifier: 04:B4:FB:EB:22:58:84:3A:04:D8:25:F8:CD:05:78:1B:33:AC:F5:9D
Certificate issuer: /CN=624ad4535ac88dd534199f2a726095af71afe44e
Certificate serial: 07D02C12
Authority key identifier: 62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/BLT76yJYhDoE2CX4zQV4GzOs9Z0.roa
Signing time: Tue 14 Jun 2022 13:54:47 +0000
ROA not before: Tue 14 Jun 2022 13:54:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208485
IP address blocks: 109.74.29.0/24 maxlen: 24
109.74.28.0/24 maxlen: 24
109.74.31.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 131083282 (0x7d02c12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624ad4535ac88dd534199f2a726095af71afe44e
Validity
Not Before: Jun 14 13:54:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=04b4fbeb2258843a04d825f8cd05781b33acf59d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d9:91:91:8e:2e:93:05:82:56:6c:3d:7b:a0:
91:7b:a9:55:09:6c:56:18:88:73:9b:21:fa:97:3f:
21:df:03:30:ab:d3:17:d8:f1:b4:67:15:24:55:f9:
f9:8d:50:b6:6f:2b:0a:5f:39:0f:3a:b9:92:bb:b5:
e0:c8:7c:43:4a:50:10:17:59:57:cc:ea:80:3f:84:
61:0c:b7:d4:da:c8:73:b3:60:7f:18:4e:57:a4:1b:
bf:35:ab:eb:93:f6:51:51:b8:20:ca:33:00:83:06:
1a:54:6f:e0:c3:4b:3a:cc:a9:52:88:73:62:41:7a:
2c:de:e7:d5:25:95:9b:40:07:1b:60:92:0c:aa:ea:
ca:49:29:9a:1a:67:fb:db:6d:d3:70:12:16:c4:68:
8c:f4:b7:f5:30:1d:e6:77:69:6c:a9:a0:12:9c:02:
66:58:9e:7e:53:25:6c:3c:49:60:27:9e:18:66:40:
af:b3:5c:58:20:5a:23:ae:77:51:bb:06:ea:af:41:
16:ef:90:58:e0:de:21:dd:87:a7:20:16:ec:63:c9:
f2:22:7d:d5:1d:14:50:f1:20:ea:b6:20:ae:29:f3:
4b:9b:9c:bd:05:87:6d:3a:18:fd:00:63:7d:1c:95:
b9:1a:d5:f1:7c:fa:77:db:2f:29:86:28:78:27:db:
d7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:B4:FB:EB:22:58:84:3A:04:D8:25:F8:CD:05:78:1B:33:AC:F5:9D
X509v3 Authority Key Identifier:
keyid:62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/BLT76yJYhDoE2CX4zQV4GzOs9Z0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.74.28.0/23
109.74.31.0/24
Signature Algorithm: sha256WithRSAEncryption
42:c2:d7:17:ef:3d:57:45:e2:05:20:b5:a6:9a:9b:59:dc:04:
76:bb:16:dd:9e:d3:e7:bb:24:7d:13:be:7e:cf:be:d0:0c:fb:
63:63:99:0c:d0:c7:2c:0c:f4:97:fa:c7:5f:86:c4:9f:e4:11:
f1:37:1d:9e:27:5c:26:68:3b:6a:e6:b6:0c:7a:9f:ea:38:83:
7a:1f:9b:cf:67:83:da:dd:89:0b:8c:4d:56:8c:fd:4c:ec:30:
e8:01:00:22:9a:1c:08:d8:6d:3c:51:ab:b6:cb:7e:30:f5:52:
aa:30:b2:0b:8f:83:82:78:87:12:da:ee:a5:e8:8d:ce:bd:5c:
aa:ef:31:25:37:63:cd:75:58:ce:45:51:93:cf:9a:48:9c:6b:
25:37:d0:84:e3:06:98:98:8b:7d:c6:a4:9b:0b:79:79:ea:04:
ef:02:9b:34:35:12:2f:bc:ed:49:65:ff:8b:a3:c5:ba:0e:ae:
34:60:8f:87:99:17:e9:1d:36:32:72:32:29:74:c8:66:ba:39:
6e:0b:f1:f0:78:72:c4:d1:0f:d7:dc:9b:33:cc:dd:ab:b5:37:
9a:6a:c7:93:93:49:5c:e9:05:6d:7e:4d:3d:fc:08:61:f6:f5:
1a:28:05:27:31:5d:e8:e1:cc:bf:d1:77:4f:55:f3:5b:d8:78:
3c:a6:42:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:26 2025 by rpki-client