Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/blzoQGVzuEXOQ2-OAKAjQighfaw.roa
File: blzoQGVzuEXOQ2-OAKAjQighfaw.roa (raw, json)
Hash identifier: 5QkGCikU6P+mcUSzpx5s+Qh/QME8XYgmUkaR+r49WBk=
Subject key identifier: 6E:5C:E8:40:65:73:B8:45:CE:43:6F:8E:00:A0:23:42:28:21:7D:AC
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 2862F7F0
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/blzoQGVzuEXOQ2-OAKAjQighfaw.roa
Signing time: Sat 01 Jan 2022 16:10:22 +0000
ROA not before: Sat 01 Jan 2022 16:10:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212571
IP address blocks: 31.148.7.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 677574640 (0x2862f7f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:10:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6e5ce8406573b845ce436f8e00a0234228217dac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f4:c9:5e:40:03:11:ee:5d:9d:77:ff:4e:b2:
3e:26:3f:98:2c:a4:a1:5c:bd:05:7e:2c:e6:84:46:
a6:f0:cb:39:88:d8:ef:0e:7c:95:f4:ce:84:e5:35:
7c:c3:b6:89:8a:89:0e:18:04:18:6e:54:11:53:6c:
7a:13:e5:ad:00:67:01:28:f7:3c:7f:f1:ed:f3:1f:
b6:8f:dd:75:7c:91:e7:ce:37:47:3a:1a:55:cf:b0:
d4:f0:fc:a9:0c:10:39:f0:ec:70:0e:e9:3d:d1:51:
12:30:52:e7:2c:26:ef:b7:64:11:06:51:3e:d7:e1:
2b:3e:e2:6d:f3:74:3f:d6:2b:42:93:e0:c2:d0:72:
93:e6:e9:9d:89:2e:64:03:ec:81:bb:24:95:97:ab:
d1:c7:40:f8:62:03:1f:94:46:c2:46:53:66:7b:5f:
df:70:91:28:d0:ea:05:d1:a4:85:92:4d:51:b2:93:
c3:a6:96:d9:f1:c7:92:c6:24:7b:d4:d9:57:f6:5c:
44:ee:bd:eb:ad:67:0d:02:c4:32:21:cb:5e:b3:dc:
fd:13:70:63:be:97:dd:f2:7b:6b:82:a5:de:35:36:
fc:29:43:e4:1a:53:fe:ab:6a:be:63:7a:03:65:a3:
97:1c:62:75:42:bf:2a:e8:74:b7:25:8b:72:62:3c:
0a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:5C:E8:40:65:73:B8:45:CE:43:6F:8E:00:A0:23:42:28:21:7D:AC
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/blzoQGVzuEXOQ2-OAKAjQighfaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.7.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:06:41:86:61:86:2d:27:5c:77:b9:ef:2d:21:d3:20:16:e1:
25:d6:dd:35:68:12:e3:e9:05:31:a3:4b:73:69:42:64:f2:7d:
10:2f:2f:85:b9:ad:cc:33:8c:21:fe:a6:9c:4c:a2:96:2c:83:
dd:2b:ae:51:e4:8f:72:6d:a6:19:7f:29:17:e2:49:1c:c1:b8:
0c:0c:76:ea:74:cd:af:d9:25:2c:c5:f0:8a:88:02:a1:6b:fd:
24:03:c0:f9:54:1c:55:2c:a6:2e:ee:3d:80:20:08:b1:35:d8:
5f:0b:fc:d7:c5:c0:2a:73:ff:6f:27:ec:5b:45:b9:64:a8:2b:
df:d7:5e:46:90:9e:02:28:e0:fa:f3:dc:97:49:03:88:8e:fa:
42:42:ad:d0:f5:e9:4e:e2:89:de:a9:f4:04:45:af:e7:37:5a:
08:f0:21:6a:64:9e:1c:05:38:9a:db:82:b7:6e:6f:48:d6:3b:
8d:a4:3f:c5:59:e1:40:78:8c:b2:34:ab:cb:90:83:f1:be:fc:
63:cb:98:ae:33:b1:f0:af:d1:28:08:ee:87:0c:19:78:b1:d3:
cf:5c:79:a8:9f:3e:b0:c7:6b:cf:e1:b1:0c:0d:cd:6f:65:f5:
ea:51:bb:16:b1:68:75:99:f8:8d:fc:e7:e2:d8:a8:d1:f0:36:
4d:a7:8c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 09:46:49 2025 by rpki-client