Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/BLJg2ysNrocVdQFEqXCuEwthjaw.roa
File: BLJg2ysNrocVdQFEqXCuEwthjaw.roa (raw, json)
Hash identifier: X0mHt3tgipfYZ/xQHRaNu7kuIks9FdXPzPU5gaORg7s=
Subject key identifier: 04:B2:60:DB:2B:0D:AE:87:15:75:01:44:A9:70:AE:13:0B:61:8D:AC
Certificate issuer: /CN=b91b91504983091506a1a944457a4558b94dab7f
Certificate serial: 018267DBF389E91AC65F39E39CACEA0719C2
Authority key identifier: B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/BLJg2ysNrocVdQFEqXCuEwthjaw.roa
Signing time: Thu 04 Aug 2022 07:57:24 +0000
ROA not before: Thu 04 Aug 2022 07:57:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31252
IP address blocks: 178.175.153.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:67:db:f3:89:e9:1a:c6:5f:39:e3:9c:ac:ea:07:19:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b91b91504983091506a1a944457a4558b94dab7f
Validity
Not Before: Aug 4 07:57:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=04b260db2b0dae8715750144a970ae130b618dac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:80:b7:2e:57:3c:a9:76:1c:d0:ab:82:3a:ab:
93:ef:ac:34:99:f0:df:af:b0:8c:31:07:9e:c8:a3:
52:8b:bf:b1:90:cc:3f:36:48:b0:c2:06:c8:32:6b:
29:83:e8:81:31:bf:9f:0b:0d:6d:35:ce:c1:4e:16:
3b:e4:47:2e:55:77:40:cc:66:4c:86:5a:62:c1:78:
2b:93:d8:64:af:b6:29:cb:09:bc:af:9a:fb:fe:39:
25:2e:02:c7:9f:ae:95:25:fe:61:5c:34:f7:a2:8f:
20:ce:78:90:34:62:60:57:f2:af:77:b0:ff:be:d6:
e0:6f:5e:41:78:0e:3a:fa:77:45:01:6d:a9:fd:dd:
2c:b7:5f:27:88:16:46:f1:ca:67:95:bf:6a:0d:8f:
9d:2d:01:48:82:06:69:f0:83:ad:d4:7d:aa:88:b8:
a6:54:27:5d:c1:97:b4:f7:43:06:06:33:de:4c:f0:
4d:0d:b6:0e:dc:04:37:ec:30:85:22:dd:ce:c6:e5:
08:7e:3b:6e:39:ca:ce:45:5a:04:56:6a:5f:bc:09:
8c:00:00:47:85:b1:08:0e:73:60:f4:93:f3:c6:1c:
d7:60:88:ee:37:21:76:2b:6c:ee:81:11:b5:66:6c:
a9:d2:bb:57:0c:0a:54:ed:d3:ab:62:f3:cd:f1:72:
e3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:B2:60:DB:2B:0D:AE:87:15:75:01:44:A9:70:AE:13:0B:61:8D:AC
X509v3 Authority Key Identifier:
keyid:B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/BLJg2ysNrocVdQFEqXCuEwthjaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.175.153.0/24
Signature Algorithm: sha256WithRSAEncryption
26:e4:13:d2:6d:c8:3b:51:2e:ab:b1:66:6b:b2:7b:84:a3:f4:
be:1f:5c:ee:d2:dd:be:e2:62:00:b4:9f:c8:df:3c:66:56:ad:
f3:30:ca:57:bb:35:9e:49:c5:0b:be:4b:50:71:25:6e:57:fe:
30:57:ad:43:a8:3a:83:a3:a2:a1:35:47:a9:dc:b1:b1:40:f9:
a4:01:6c:26:d4:60:d5:8e:ad:be:76:99:4e:0e:ad:77:b9:9c:
f2:84:78:fe:b7:c5:1f:11:e1:63:80:98:b2:46:9f:85:57:e1:
c8:1b:be:03:be:b0:55:1e:09:8d:09:6b:5a:51:dc:ce:80:cd:
92:29:9d:62:29:95:07:b2:d5:82:88:fe:3f:be:a2:7d:d6:9d:
4a:d7:c3:5d:e9:13:0d:23:d5:95:9c:9f:40:71:79:3b:fe:37:
6f:fd:64:38:0d:8b:bf:27:8e:a4:83:89:d4:fe:cf:36:a0:22:
d2:68:90:f2:21:3f:be:93:93:b3:cf:1a:6a:c8:aa:3c:f0:f9:
42:3a:ad:a5:0d:ac:d2:1a:79:de:9d:2b:8b:ba:18:32:c5:f4:
fa:6d:9a:c2:03:82:bb:83:6b:88:52:f0:4b:f5:65:b9:29:04:
08:8c:78:47:d0:24:98:0b:06:37:fc:ca:1f:02:e5:8c:40:3c:
80:6d:4f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:31:39 2025 by rpki-client