Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/EbiU-cc5fW9ATKJCgsEaEpnEPbs.roa
File:                     EbiU-cc5fW9ATKJCgsEaEpnEPbs.roa (raw, json)
Hash identifier:          AqHn2n4gJA1jKuNiaPML/oEl/+C+8noRz6Nl1wiBKjs=
Subject key identifier:   11:B8:94:F9:C7:39:7D:6F:40:4C:A2:42:82:C1:1A:12:99:C4:3D:BB
Certificate issuer:       /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial:       50E6DD6E
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/EbiU-cc5fW9ATKJCgsEaEpnEPbs.roa
Signing time:             Sat 01 Jan 2022 16:01:58 +0000
ROA not before:           Sat 01 Jan 2022 16:01:58 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     205218
IP address blocks:        193.246.56.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1357307246 (0x50e6dd6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
        Validity
            Not Before: Jan  1 16:01:58 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=11b894f9c7397d6f404ca24282c11a1299c43dbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:67:3a:56:51:ee:e1:74:5d:7e:0d:ba:0c:b4:
                    ce:33:e2:17:e4:1f:2f:51:9f:fc:58:5a:e1:ab:ea:
                    d0:99:4f:59:09:37:ad:d8:8f:ea:b1:7f:a8:10:c8:
                    fd:9a:ef:e3:62:20:cd:7f:65:2d:64:de:68:97:b8:
                    cb:e9:3c:0f:ec:90:88:80:78:e5:69:a0:e7:c3:38:
                    b4:87:ee:44:c6:8b:fa:c5:51:08:29:c2:84:c0:9b:
                    e6:be:59:fd:7c:eb:40:c2:01:b9:a6:b1:47:74:99:
                    57:91:94:b2:89:88:84:6f:cb:86:cc:b3:dd:84:e3:
                    a7:bd:56:24:4e:ff:7d:c4:82:6e:ec:c0:60:02:6f:
                    86:d7:fe:e6:35:a9:48:69:98:42:24:a5:59:a1:8f:
                    d2:37:85:60:b4:dd:87:50:79:2e:a2:74:e7:28:8d:
                    6e:0d:fd:e3:8f:ef:94:ef:48:16:c1:1a:85:e4:45:
                    ca:2d:ff:f8:89:84:ff:e7:c0:51:43:27:bc:79:80:
                    61:e0:73:c8:68:49:48:ac:e3:59:9d:8c:54:e5:7a:
                    72:14:0b:09:d6:92:f4:83:2e:d1:3b:92:bd:34:30:
                    07:36:c8:ff:d0:7d:b5:12:19:84:1f:01:49:bd:70:
                    02:e6:de:15:7d:8f:90:fc:e6:90:c1:b6:84:38:72:
                    a8:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:B8:94:F9:C7:39:7D:6F:40:4C:A2:42:82:C1:1A:12:99:C4:3D:BB
            X509v3 Authority Key Identifier:
                keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/EbiU-cc5fW9ATKJCgsEaEpnEPbs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.246.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:e2:91:94:a8:cb:f6:e6:c7:9e:29:0c:14:9c:95:8b:6e:15:
         17:01:27:63:61:5c:ea:3d:cc:6d:8b:b5:21:b9:57:18:f2:64:
         c6:71:21:6a:2a:ed:57:b7:12:0c:f5:8b:da:d7:fb:7d:a2:b8:
         ce:db:b5:4d:2f:3c:d1:b7:90:2c:b9:55:c8:32:97:75:4c:8c:
         57:27:a0:e2:92:e4:ae:3c:d2:6b:42:55:d4:c4:82:cc:16:9a:
         5e:27:21:dc:08:8e:cc:18:be:c2:b5:57:8d:81:c6:e4:98:6e:
         d5:ed:f6:c6:3a:24:86:e1:2e:83:43:9c:75:51:f3:13:57:7b:
         a3:c6:c5:1e:2b:b8:06:ce:b9:4b:30:70:4c:aa:02:d3:60:1a:
         e2:5c:8c:ec:71:1d:64:d1:b8:e6:96:76:cd:f5:8c:6a:cd:95:
         d5:91:fd:a3:fb:08:43:e3:c7:81:01:f6:31:3f:59:5b:29:23:
         35:66:4f:ee:9d:97:9e:a3:f5:8c:38:63:5e:f3:a0:89:fd:73:
         22:cc:26:57:26:ad:66:96:e3:d2:1d:53:d5:1c:0c:45:d3:3f:
         ce:8f:db:92:f9:39:ce:60:b3:61:e4:1f:88:c2:66:5a:98:0a:
         a0:d9:58:75:d0:ab:cb:1d:bc:63:44:94:b4:bd:dc:95:29:b4:
         15:f9:11:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:29:10 2025 by rpki-client