Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/VuLntq5MtZnWeSKboSTgPOGmz-Y.roa
File: VuLntq5MtZnWeSKboSTgPOGmz-Y.roa (raw, json)
Hash identifier: srrsntdTfCbyJkBRqM5eYTA63/6ZUBb1nGLORZpiAFE=
Subject key identifier: 56:E2:E7:B6:AE:4C:B5:99:D6:79:22:9B:A1:24:E0:3C:E1:A6:CF:E6
Certificate issuer: /CN=7d0213e3e7ebe6170a3600a8e3ae64ed962c0e36
Certificate serial: 064413F1
Authority key identifier: 7D:02:13:E3:E7:EB:E6:17:0A:36:00:A8:E3:AE:64:ED:96:2C:0E:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQIT4-fr5hcKNgCo465k7ZYsDjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/VuLntq5MtZnWeSKboSTgPOGmz-Y.roa
Signing time: Sat 01 Jan 2022 11:00:50 +0000
ROA not before: Sat 01 Jan 2022 11:00:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13026
IP address blocks: 91.222.92.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105124849 (0x64413f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d0213e3e7ebe6170a3600a8e3ae64ed962c0e36
Validity
Not Before: Jan 1 11:00:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=56e2e7b6ae4cb599d679229ba124e03ce1a6cfe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:84:fe:fa:61:32:23:62:48:b3:0b:d9:ad:48:
a7:a4:60:08:fb:09:40:51:19:0d:33:88:99:4f:e1:
1a:8c:56:4b:ff:d6:2e:f9:6f:08:e6:a2:64:2f:28:
bf:5c:1d:9e:65:03:ec:e5:54:47:3f:19:c7:12:23:
f8:22:d4:87:7d:dd:6f:c1:90:65:72:64:dc:21:ba:
e3:04:4e:52:55:12:7c:c0:06:2f:55:d9:2a:52:4d:
71:c5:6d:44:d1:34:1b:a8:50:d4:89:bc:a5:8d:4f:
4e:03:6c:13:f1:1b:93:3e:be:eb:0c:9b:78:49:3e:
91:21:87:19:7e:47:15:7a:bf:1f:a5:7b:76:69:2a:
d2:1f:a4:b6:de:86:ea:21:9d:f7:17:4e:f1:32:be:
e4:cd:7d:03:0b:65:aa:98:fc:b1:38:65:3d:04:cc:
6d:d1:ee:9e:4a:f2:5e:b1:5a:68:25:68:91:9e:a1:
5b:68:da:00:97:11:e3:12:fe:ca:9f:53:29:ad:32:
9f:f4:d2:c2:e3:ca:7d:15:41:81:96:c1:15:6f:ed:
4a:38:58:5f:73:55:f9:58:9b:dd:11:37:00:05:38:
b0:39:9e:20:2c:03:a6:bb:40:3b:1e:04:fb:cd:67:
bd:7f:69:0f:8b:c5:9a:fc:06:bd:fc:fc:61:ab:be:
1a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E2:E7:B6:AE:4C:B5:99:D6:79:22:9B:A1:24:E0:3C:E1:A6:CF:E6
X509v3 Authority Key Identifier:
keyid:7D:02:13:E3:E7:EB:E6:17:0A:36:00:A8:E3:AE:64:ED:96:2C:0E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQIT4-fr5hcKNgCo465k7ZYsDjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/VuLntq5MtZnWeSKboSTgPOGmz-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/fQIT4-fr5hcKNgCo465k7ZYsDjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.222.92.0/22
Signature Algorithm: sha256WithRSAEncryption
be:64:81:f6:08:a8:fa:ac:5b:9f:71:a4:6c:b5:a5:13:9c:76:
1c:84:15:c1:2a:22:af:af:58:06:cf:37:85:13:a8:13:03:df:
80:9b:08:66:c0:25:67:38:d7:12:8c:dd:95:b7:f8:b1:1b:7f:
53:90:63:e0:e1:a5:d1:45:09:14:b4:2e:bc:e7:ef:7a:98:c1:
e4:22:e6:d9:40:53:cc:fc:aa:90:57:5b:09:88:20:a4:e0:1a:
0e:b4:a9:2e:66:89:d6:97:c4:36:a7:e9:08:43:dc:85:52:e7:
c3:ab:ca:c5:e9:5c:53:ff:d4:e6:53:b6:fe:59:2a:79:84:dd:
23:50:d8:f5:59:df:19:25:9b:27:9c:c4:9d:27:d4:51:d8:a2:
40:73:85:05:41:dc:bc:fc:a4:47:8d:ea:14:23:61:ee:9a:0b:
a0:24:16:8b:28:85:fe:9c:e5:8b:f6:98:4f:7a:bc:75:3c:e2:
45:eb:e0:26:79:15:bb:0c:5f:b2:3d:cf:69:e7:bf:99:84:be:
3f:e4:03:b0:8e:1f:dd:4b:b0:36:7e:e9:b0:95:01:5c:9c:60:
4b:4f:9a:7a:f5:36:a1:ce:69:91:a7:e3:da:1d:87:dc:01:2f:
d7:36:09:09:fd:43:a3:17:b5:04:4b:ef:c5:29:be:c2:08:09:
65:a4:94:0c
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBkQT8TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
ZDAyMTNlM2U3ZWJlNjE3MGEzNjAwYThlM2FlNjRlZDk2MmMwZTM2MB4XDTIyMDEw
MTExMDA1MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTZlMmU3YjZhZTRj
YjU5OWQ2NzkyMjliYTEyNGUwM2NlMWE2Y2ZlNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJOE/vphMiNiSLML2a1Ip6RgCPsJQFEZDTOImU/hGoxWS//W
LvlvCOaiZC8ov1wdnmUD7OVURz8ZxxIj+CLUh33db8GQZXJk3CG64wROUlUSfMAG
L1XZKlJNccVtRNE0G6hQ1Im8pY1PTgNsE/Ebkz6+6wybeEk+kSGHGX5HFXq/H6V7
dmkq0h+ktt6G6iGd9xdO8TK+5M19Awtlqpj8sThlPQTMbdHunkryXrFaaCVokZ6h
W2jaAJcR4xL+yp9TKa0yn/TSwuPKfRVBgZbBFW/tSjhYX3NV+Vib3RE3AAU4sDme
ICwDprtAOx4E+81nvX9pD4vFmvwGvfz8Yau+Gj8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRW4ue2rky1mdZ5IpuhJOA84abP5jAfBgNVHSMEGDAWgBR9AhPj5+vmFwo2
AKjjrmTtliwONjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2ZRSVQ0LWZyNWhjS05nQ280NjVrN1pZc0RqWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOGMvODIxZGMyLTY3NjYtNDk4OC1iNzc3LTAzNTMyMTQwZWY1Mi8x
L1Z1TG50cTVNdFpuV2VTS2JvU1RnUE9HbXotWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGMv
ODIxZGMyLTY3NjYtNDk4OC1iNzc3LTAzNTMyMTQwZWY1Mi8xL2ZRSVQ0LWZyNWhj
S05nQ280NjVrN1pZc0RqWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAlveXDANBgkqhkiG9w0BAQsFAAOC
AQEAvmSB9gio+qxbn3GkbLWlE5x2HIQVwSoir69YBs83hROoEwPfgJsIZsAlZzjX
Eozdlbf4sRt/U5Bj4OGl0UUJFLQuvOfvepjB5CLm2UBTzPyqkFdbCYggpOAaDrSp
LmaJ1pfENqfpCEPchVLnw6vKxelcU//U5lO2/lkqeYTdI1DY9VnfGSWbJ5zEnSfU
UdiiQHOFBUHcvPykR43qFCNh7poLoCQWiyiF/pzli/aYT3q8dTziRevgJnkVuwxf
sj3Paee/mYS+P+QDsI4f3UuwNn7psJUBXJxgS0+aevU2oc5pkafj2h2H3AEv1zYJ
Cf1Doxe1BEvvxSm+wggJZaSUDA==
-----END CERTIFICATE-----
Generated at Wed Apr 23 07:29:51 2025 by rpki-client