Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/440132-eb5a-46df-a229-c68a68e8a234/1/56j1CxOENPxio8qxK4XDVoiOVq8.roa
File: 56j1CxOENPxio8qxK4XDVoiOVq8.roa (raw, json)
Hash identifier: pnVTC3BcUlEWHl6Ubay++pFtBEvnEZwBOSDQUSDHxl0=
Subject key identifier: E7:A8:F5:0B:13:84:34:FC:62:A3:CA:B1:2B:85:C3:56:88:8E:56:AF
Certificate issuer: /CN=b8c5155db7f9859e084c2ee9bf96e8689209d3d5
Certificate serial: 18F23CE3
Authority key identifier: B8:C5:15:5D:B7:F9:85:9E:08:4C:2E:E9:BF:96:E8:68:92:09:D3:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uMUVXbf5hZ4ITC7pv5boaJIJ09U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/440132-eb5a-46df-a229-c68a68e8a234/1/56j1CxOENPxio8qxK4XDVoiOVq8.roa
Signing time: Sat 01 Jan 2022 05:06:36 +0000
ROA not before: Sat 01 Jan 2022 05:06:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51224
IP address blocks: 91.216.216.0/24 maxlen: 32
2001:67c:254::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 418528483 (0x18f23ce3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8c5155db7f9859e084c2ee9bf96e8689209d3d5
Validity
Not Before: Jan 1 05:06:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e7a8f50b138434fc62a3cab12b85c356888e56af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:84:20:be:27:8a:fd:6c:39:bb:49:b1:dd:91:
69:73:e9:73:cf:32:cb:b7:32:f4:4c:3e:94:1c:8a:
57:d5:08:67:81:e6:80:00:63:74:33:f2:02:a9:ff:
1d:0d:f2:fa:be:15:9b:2e:a6:25:ae:5e:9d:b2:c3:
f5:60:62:0d:3c:c3:38:38:ba:27:88:a2:5b:fe:1a:
b5:bf:cd:b7:15:81:30:28:a6:b8:78:8d:fb:d2:af:
fa:0f:fc:4c:a3:9d:81:57:74:e0:a6:9b:69:db:44:
3c:56:bc:d9:da:59:53:6f:bd:d2:74:04:b6:78:9e:
72:40:65:e7:e6:55:c3:41:d0:17:ac:2f:15:72:c9:
a9:de:32:90:38:a0:82:26:07:58:6c:92:96:c1:b6:
c3:2d:15:e1:b6:fa:ed:d1:a8:f4:d1:8e:80:2f:e3:
81:95:99:50:4b:36:e3:ac:1c:57:03:29:d2:13:f4:
42:ba:3e:c5:7d:a8:f2:5b:82:87:69:c4:a6:49:e7:
df:e3:4d:c5:da:9e:81:7c:26:7b:e0:94:06:14:2a:
ad:bf:68:93:2f:d7:2c:7e:e3:f3:21:fd:9b:b2:57:
4a:92:ee:2e:0f:4e:95:8c:e8:7f:a2:5f:48:84:1a:
41:fc:94:d5:ae:fe:bc:02:6c:eb:b6:3d:27:3c:db:
ad:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:A8:F5:0B:13:84:34:FC:62:A3:CA:B1:2B:85:C3:56:88:8E:56:AF
X509v3 Authority Key Identifier:
keyid:B8:C5:15:5D:B7:F9:85:9E:08:4C:2E:E9:BF:96:E8:68:92:09:D3:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMUVXbf5hZ4ITC7pv5boaJIJ09U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/440132-eb5a-46df-a229-c68a68e8a234/1/56j1CxOENPxio8qxK4XDVoiOVq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/440132-eb5a-46df-a229-c68a68e8a234/1/uMUVXbf5hZ4ITC7pv5boaJIJ09U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.216.0/24
IPv6:
2001:67c:254::/48
Signature Algorithm: sha256WithRSAEncryption
43:ce:32:3b:69:fd:02:24:fa:f3:e9:67:c2:eb:cb:ae:c3:84:
b5:47:e0:01:14:40:6d:0a:76:53:ee:ab:e1:10:d6:0f:de:44:
63:bc:91:cd:fc:90:41:7d:65:7a:03:46:4c:88:92:a3:2b:46:
3a:58:d4:82:86:33:e2:c7:dc:ce:f0:29:9e:d3:17:81:db:2f:
ca:7e:1c:60:b9:3e:ed:b1:ae:31:6c:9a:38:9d:bc:c9:be:1e:
b9:e4:a0:ea:7e:6a:78:af:67:85:c9:d4:99:61:fb:ac:11:1c:
47:31:cb:74:e7:2c:9b:d9:93:91:a0:1a:f7:88:e0:ac:81:1d:
05:5e:26:b2:fd:88:b8:1b:a8:fb:e7:05:b3:a8:65:b7:69:ca:
31:c4:d2:eb:cb:db:64:30:1b:49:4d:cd:1b:ad:2b:a9:09:fd:
8f:20:fe:c1:02:ab:84:d6:7e:0e:40:68:ff:e3:0b:78:c7:0c:
10:f7:49:42:af:1b:3e:e2:c3:89:36:d3:58:94:eb:30:1f:2a:
ba:79:4f:7e:7b:6a:85:34:38:ba:b3:cd:a7:1b:e2:0d:85:25:
3a:52:30:41:a1:31:13:b9:27:3c:ad:21:ad:8e:8a:be:bd:30:
5b:8f:97:a8:c2:dc:fb:02:d5:1a:90:09:9a:e0:41:47:5e:7e:
3f:75:74:14
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEGPI84zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
OGM1MTU1ZGI3Zjk4NTllMDg0YzJlZTliZjk2ZTg2ODkyMDlkM2Q1MB4XDTIyMDEw
MTA1MDYzNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTdhOGY1MGIxMzg0
MzRmYzYyYTNjYWIxMmI4NWMzNTY4ODhlNTZhZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALCEIL4niv1sObtJsd2RaXPpc88yy7cy9Ew+lByKV9UIZ4Hm
gABjdDPyAqn/HQ3y+r4Vmy6mJa5enbLD9WBiDTzDODi6J4iiW/4atb/NtxWBMCim
uHiN+9Kv+g/8TKOdgVd04KabadtEPFa82dpZU2+90nQEtnieckBl5+ZVw0HQF6wv
FXLJqd4ykDiggiYHWGySlsG2wy0V4bb67dGo9NGOgC/jgZWZUEs246wcVwMp0hP0
Qro+xX2o8luCh2nEpknn3+NNxdqegXwme+CUBhQqrb9oky/XLH7j8yH9m7JXSpLu
Lg9OlYzof6JfSIQaQfyU1a7+vAJs67Y9JzzbresCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBTnqPULE4Q0/GKjyrErhcNWiI5WrzAfBgNVHSMEGDAWgBS4xRVdt/mFnghM
Lum/luhokgnT1TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3VNVVZYYmY1aFo0SVRDN3B2NWJvYUpJSjA5VS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDQvNDQwMTMyLWViNWEtNDZkZi1hMjI5LWM2OGE2OGU4YTIzNC8x
LzU2ajFDeE9FTlB4aW84cXhLNFhEVm9pT1ZxOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDQv
NDQwMTMyLWViNWEtNDZkZi1hMjI5LWM2OGE2OGU4YTIzNC8xL3VNVVZYYmY1aFo0
SVRDN3B2NWJvYUpJSjA5VS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAFvY2DAPBAIAAjAJAwcAIAEGfAJU
MA0GCSqGSIb3DQEBCwUAA4IBAQBDzjI7af0CJPrz6WfC68uuw4S1R+ABFEBtCnZT
7qvhENYP3kRjvJHN/JBBfWV6A0ZMiJKjK0Y6WNSChjPix9zO8Cme0xeB2y/Kfhxg
uT7tsa4xbJo4nbzJvh655KDqfmp4r2eFydSZYfusERxHMct05yyb2ZORoBr3iOCs
gR0FXiay/Yi4G6j75wWzqGW3acoxxNLry9tkMBtJTc0brSupCf2PIP7BAquE1n4O
QGj/4wt4xwwQ90lCrxs+4sOJNtNYlOswHyq6eU9+e2qFNDi6s82nG+INhSU6UjBB
oTETuSc8rSGtjoq+vTBbj5eowtz7AtUakAma4EFHXn4/dXQU
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:39:31 2025 by rpki-client