Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/Bi7cm6x3B2AoeqP1Dijp-y_ZWMw.roa
File: Bi7cm6x3B2AoeqP1Dijp-y_ZWMw.roa (raw, json)
Hash identifier: S4O4QpDjkp9CaOpT61m+jsQhIWhaFbXCVohsoACLFx4=
Subject key identifier: 06:2E:DC:9B:AC:77:07:60:28:7A:A3:F5:0E:28:E9:FB:2F:D9:58:CC
Certificate issuer: /CN=8b9f258283517df19859388e13bad1ae0268a5fb
Certificate serial: 018AC8C21519C016289E14F27F2198919F33
Authority key identifier: 8B:9F:25:82:83:51:7D:F1:98:59:38:8E:13:BA:D1:AE:02:68:A5:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i58lgoNRffGYWTiOE7rRrgJopfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/Bi7cm6x3B2AoeqP1Dijp-y_ZWMw.roa
Signing time: Sun 24 Sep 2023 19:54:37 +0000
ROA not before: Sun 24 Sep 2023 19:54:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48181
IP address blocks: 2.56.52.0/22 maxlen: 24
151.237.48.0/21 maxlen: 21
45.154.76.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:c8:c2:15:19:c0:16:28:9e:14:f2:7f:21:98:91:9f:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9f258283517df19859388e13bad1ae0268a5fb
Validity
Not Before: Sep 24 19:54:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=062edc9bac770760287aa3f50e28e9fb2fd958cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:db:62:bb:f9:68:a5:92:48:b0:c2:b0:a5:4d:
7b:0c:d0:57:8f:e3:c6:9d:f2:d0:74:42:34:0b:5d:
34:1d:72:81:af:e2:7c:16:e2:78:e7:8f:4b:37:b9:
69:58:2d:27:68:15:91:3e:2d:50:f9:16:d5:9b:69:
fc:32:61:49:f6:64:e9:77:91:4e:77:8a:8a:26:5c:
d6:5c:af:4d:07:c6:c2:ee:c4:b3:96:2e:43:55:2e:
5d:22:2c:be:10:93:9b:d5:b8:ad:7f:ce:ef:3b:c1:
b8:0e:89:71:c3:98:63:c0:ba:1a:fe:d8:c4:d7:16:
40:ff:40:9d:8e:d4:b7:e0:10:9d:84:89:cc:72:3a:
8e:5e:07:2b:ee:1e:01:a7:27:9d:da:12:33:ca:92:
95:80:e4:83:d4:b9:5c:aa:d1:4c:d4:81:77:9e:68:
33:e5:7a:0c:30:72:9d:82:86:63:20:48:d1:08:04:
7f:d4:94:e0:19:16:03:54:95:27:6e:aa:9d:ba:52:
a1:c2:cb:29:e2:ab:56:00:ea:a6:29:b0:db:d7:bf:
1f:49:a7:84:ff:c1:1e:2d:7a:fd:93:cf:75:da:6f:
b9:db:80:f3:45:b0:22:f0:c0:c0:e7:2e:a4:5a:4d:
2e:56:29:48:7e:ff:d5:82:ab:42:43:5f:b9:60:f3:
a8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:2E:DC:9B:AC:77:07:60:28:7A:A3:F5:0E:28:E9:FB:2F:D9:58:CC
X509v3 Authority Key Identifier:
keyid:8B:9F:25:82:83:51:7D:F1:98:59:38:8E:13:BA:D1:AE:02:68:A5:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i58lgoNRffGYWTiOE7rRrgJopfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/Bi7cm6x3B2AoeqP1Dijp-y_ZWMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/i58lgoNRffGYWTiOE7rRrgJopfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.52.0/22
45.154.76.0/22
151.237.48.0/21
Signature Algorithm: sha256WithRSAEncryption
6f:6f:25:1e:11:fb:ef:4f:37:9b:8a:59:0a:d1:8c:c8:ed:8f:
b4:a4:db:4e:e7:3d:d9:1b:6d:bd:c7:e9:1b:bd:94:ae:43:23:
6c:f9:a6:5d:81:03:86:0a:6d:63:35:59:65:cd:90:38:88:f0:
18:48:bf:19:77:1c:42:da:52:08:8a:9b:07:9a:62:38:ee:9b:
bd:bb:2e:0e:ec:47:07:60:ce:b7:60:83:ae:6b:80:dd:6f:86:
af:20:1d:81:00:60:82:7c:ee:bc:05:38:99:bd:de:0a:3b:45:
b7:2f:62:50:ca:68:72:23:0d:f5:0a:6f:f7:91:01:2e:3a:1b:
df:e4:44:52:9e:e2:5c:59:7c:0a:d4:c5:2a:86:6c:93:f7:94:
5f:aa:7b:d4:f4:2e:f6:27:9d:e2:26:00:95:01:a1:bb:55:83:
16:5a:dd:21:6a:65:bb:87:c6:1e:3c:a3:54:9b:41:ab:8a:8d:
cc:32:74:15:82:43:78:d0:40:9b:3e:14:b1:f2:30:cb:6b:3b:
ae:78:19:39:cd:5f:80:ee:d5:33:b2:28:ed:83:c6:4b:1f:1e:
f4:68:7d:3f:cc:bb:0c:a8:ba:04:d7:04:54:cd:f5:a6:c7:3b:
93:ff:55:60:e8:b2:35:2f:d6:eb:d5:a1:82:fc:63:24:fb:e3:
2b:de:0f:0a
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYrIwhUZwBYonhTyfyGYkZ8zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiOWYyNTgyODM1MTdkZjE5ODU5Mzg4ZTEzYmFkMWFlMDI2
OGE1ZmIwHhcNMjMwOTI0MTk1NDM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNjJlZGM5YmFjNzcwNzYwMjg3YWEzZjUwZTI4ZTlmYjJmZDk1OGNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdtiu/lopZJIsMKwpU17DNBXj+PG
nfLQdEI0C100HXKBr+J8FuJ4549LN7lpWC0naBWRPi1Q+RbVm2n8MmFJ9mTpd5FO
d4qKJlzWXK9NB8bC7sSzli5DVS5dIiy+EJOb1bitf87vO8G4Dolxw5hjwLoa/tjE
1xZA/0CdjtS34BCdhInMcjqOXgcr7h4Bpyed2hIzypKVgOSD1LlcqtFM1IF3nmgz
5XoMMHKdgoZjIEjRCAR/1JTgGRYDVJUnbqqdulKhwssp4qtWAOqmKbDb178fSaeE
/8EeLXr9k8912m+524DzRbAi8MDA5y6kWk0uVilIfv/VgqtCQ1+5YPOoxwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFAYu3JusdwdgKHqj9Q4o6fsv2VjMMB8GA1UdIwQY
MBaAFIufJYKDUX3xmFk4jhO60a4CaKX7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTU4bGdvTlJmZkdZV1RpT0U3clJyZ0pvcGZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy81MjhlMjEtMjNiMi00NDM2LWJjOGIt
OGY1ZTk5N2FiMWI1LzEvQmk3Y202eDNCMkFvZXFQMURpanAteV9aV013LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy81MjhlMjEtMjNiMi00NDM2LWJjOGItOGY1ZTk5N2FiMWI1
LzEvaTU4bGdvTlJmZkdZV1RpT0U3clJyZ0pvcGZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCAjg0AwQC
LZpMAwQDl+0wMA0GCSqGSIb3DQEBCwUAA4IBAQBvbyUeEfvvTzebilkK0YzI7Y+0
pNtO5z3ZG229x+kbvZSuQyNs+aZdgQOGCm1jNVllzZA4iPAYSL8ZdxxC2lIIipsH
mmI47pu9uy4O7EcHYM63YIOua4Ddb4avIB2BAGCCfO68BTiZvd4KO0W3L2JQymhy
Iw31Cm/3kQEuOhvf5ERSnuJcWXwK1MUqhmyT95RfqnvU9C72J53iJgCVAaG7VYMW
Wt0hamW7h8YePKNUm0Grio3MMnQVgkN40ECbPhSx8jDLazuueBk5zV+A7tUzsijt
g8ZLHx70aH0/zLsMqLoE1wRUzfWmxzuT/1Vg6LI1L9br1aGC/GMk++Mr3g8K
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:23:53 2025 by rpki-client