Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/95bad9-20fe-4b8d-8f03-9c2999d09b8f/1/3m0y0kfnfZTd8NK2P0FRnow2YtU.roa
File:                     3m0y0kfnfZTd8NK2P0FRnow2YtU.roa (raw, json)
Hash identifier:          7JY8NlVc3o6Bma4HqqxDfbiLJ/a75OTJeoSqxegKTgM=
Subject key identifier:   DE:6D:32:D2:47:E7:7D:94:DD:F0:D2:B6:3F:41:51:9E:8C:36:62:D5
Certificate issuer:       /CN=e52cb85ca793fad565b4608e26d82a6ae27dc232
Certificate serial:       01763F
Authority key identifier: E5:2C:B8:5C:A7:93:FA:D5:65:B4:60:8E:26:D8:2A:6A:E2:7D:C2:32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Sy4XKeT-tVltGCOJtgqauJ9wjI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/95bad9-20fe-4b8d-8f03-9c2999d09b8f/1/3m0y0kfnfZTd8NK2P0FRnow2YtU.roa
Signing time:             Mon 30 May 2022 09:57:13 +0000
ROA not before:           Mon 30 May 2022 09:57:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207766
IP address blocks:        213.240.32.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 95807 (0x1763f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e52cb85ca793fad565b4608e26d82a6ae27dc232
        Validity
            Not Before: May 30 09:57:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=de6d32d247e77d94ddf0d2b63f41519e8c3662d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:13:15:b6:52:ae:a3:2d:7e:7a:e3:28:f6:f5:
                    2d:33:24:3b:5d:ca:05:8b:41:96:3c:62:54:5b:3f:
                    cf:63:22:e3:55:14:54:0f:ec:b7:6a:8e:3d:e9:1c:
                    9f:65:7e:ff:0f:9f:1d:8d:6c:34:07:9b:11:26:79:
                    54:19:e9:9b:87:48:b6:93:b4:47:28:5a:a2:26:14:
                    3a:af:cd:24:58:8c:f8:28:37:cb:86:21:f0:e1:5b:
                    aa:1d:61:a4:3d:0f:05:08:ce:88:57:07:9f:5d:98:
                    9e:dd:18:ee:6b:0f:b4:3e:88:3a:de:a6:ab:f2:8e:
                    69:8c:6e:0e:0b:19:86:29:66:b5:6d:c2:57:dc:2d:
                    d1:44:1d:46:ca:1c:57:ac:2f:32:db:18:a2:eb:a1:
                    45:a0:97:fd:ab:2d:ef:8a:9a:cc:1c:0b:eb:58:fd:
                    84:bf:3e:04:d5:c7:24:f7:23:2e:e0:b0:0a:36:7c:
                    ab:c6:0d:cd:ca:11:f4:a1:c8:23:39:4a:e2:24:8f:
                    01:fe:0e:75:d7:25:e7:cf:8d:4d:e7:08:97:8e:24:
                    9f:2c:a2:cb:69:f0:6b:8d:26:47:f2:a7:0e:12:b5:
                    8c:96:0b:8f:85:12:06:60:29:df:f7:f5:ec:22:1e:
                    d3:0a:92:7d:cf:4d:e7:60:a5:c6:b0:02:31:77:6a:
                    76:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:6D:32:D2:47:E7:7D:94:DD:F0:D2:B6:3F:41:51:9E:8C:36:62:D5
            X509v3 Authority Key Identifier:
                keyid:E5:2C:B8:5C:A7:93:FA:D5:65:B4:60:8E:26:D8:2A:6A:E2:7D:C2:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Sy4XKeT-tVltGCOJtgqauJ9wjI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/95bad9-20fe-4b8d-8f03-9c2999d09b8f/1/3m0y0kfnfZTd8NK2P0FRnow2YtU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/95bad9-20fe-4b8d-8f03-9c2999d09b8f/1/5Sy4XKeT-tVltGCOJtgqauJ9wjI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.240.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:10:c6:9a:58:72:ca:51:b8:50:ab:29:8c:bc:18:15:b6:c3:
         ac:2d:cc:01:9b:9b:6f:49:92:41:04:e3:a8:d4:5b:89:d1:5b:
         17:a9:b4:af:fc:3b:45:ac:42:2a:57:3f:80:c9:41:16:c8:6f:
         86:5a:1f:3f:bd:3e:79:f2:8f:c9:c4:61:be:84:d4:52:63:1d:
         94:80:52:1b:00:21:6d:3d:61:49:d4:f8:4f:f9:5c:2c:41:8f:
         66:85:c7:19:11:3f:14:90:4e:a8:db:2e:46:96:37:6f:be:ac:
         70:4d:5d:2b:ba:33:cf:57:28:58:bd:dd:b6:18:a2:23:23:90:
         06:21:c2:72:71:3f:b9:36:ef:d3:4e:58:02:68:6d:ec:83:79:
         01:8c:09:e0:17:56:9b:52:ed:a0:03:22:84:5d:bc:48:13:95:
         7c:c3:ec:a5:4e:0f:b6:6c:89:08:e7:71:d9:30:f1:22:80:cd:
         a1:2c:ab:05:82:70:42:af:8a:25:ec:12:89:c3:5f:04:22:6e:
         69:0c:1b:a6:41:69:54:5a:45:81:5f:b1:b1:25:c3:f4:fd:20:
         e4:3a:31:80:14:e9:e0:9e:b2:6f:48:19:70:8f:1a:69:17:5f:
         f1:52:72:65:c2:27:ac:2d:90:1a:d7:7d:44:d6:b6:37:a6:47:
         ce:dc:83:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:11 2024 by rpki-client on console-ams.rpki-client.org