Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/s_9exLxn_hW6huUu8Ua2lgFh1uA.roa
File:                     s_9exLxn_hW6huUu8Ua2lgFh1uA.roa (raw, json)
Hash identifier:          9bNWHWr6jPVWSgeTE8xhrpCciIVpFT0sJGeeJMslrt8=
Subject key identifier:   B3:FF:5E:C4:BC:67:FE:15:BA:86:E5:2E:F1:46:B6:96:01:61:D6:E0
Certificate issuer:       /CN=e2110acce33ac85011ca8c22d2001666e45b9377
Certificate serial:       01856B37D673122BA08AC942722E6E7B0B0D
Authority key identifier: E2:11:0A:CC:E3:3A:C8:50:11:CA:8C:22:D2:00:16:66:E4:5B:93:77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4hEKzOM6yFARyowi0gAWZuRbk3c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/s_9exLxn_hW6huUu8Ua2lgFh1uA.roa
Signing time:             Sun 01 Jan 2023 02:44:59 +0000
ROA not before:           Sun 01 Jan 2023 02:44:59 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     29550
IP address blocks:        193.111.95.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:37:d6:73:12:2b:a0:8a:c9:42:72:2e:6e:7b:0b:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2110acce33ac85011ca8c22d2001666e45b9377
        Validity
            Not Before: Jan  1 02:44:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b3ff5ec4bc67fe15ba86e52ef146b6960161d6e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c5:ab:d0:53:f8:a6:cd:45:fd:f9:7b:5c:19:
                    92:72:24:97:3c:19:62:0b:b2:e9:70:c6:f4:30:49:
                    cd:c4:dd:6e:96:98:ac:19:59:53:f1:88:a5:4b:3c:
                    a2:d5:c9:cc:aa:29:61:03:ae:22:e4:65:09:05:40:
                    73:28:46:67:3b:4c:9d:0b:c8:5e:41:2f:7a:d6:69:
                    a1:8f:10:58:64:6b:58:61:da:3e:2a:25:b1:c5:4e:
                    02:67:b9:3b:df:97:fa:eb:b2:31:8c:68:bf:03:7f:
                    0d:54:e3:93:86:83:3e:83:5a:2e:fe:1e:47:0b:c1:
                    4f:e5:17:3d:94:7f:f8:ca:87:20:04:d5:09:27:66:
                    a4:27:cd:51:77:cd:9b:59:a3:0d:a3:7d:6d:50:dc:
                    b9:77:72:ef:51:7c:6a:73:a0:c8:e1:13:6d:c1:54:
                    22:10:4c:04:aa:55:1b:dc:5c:a6:07:a7:9a:be:5c:
                    c9:75:b5:d6:4b:d3:f8:19:9b:e3:54:e7:32:de:48:
                    fd:c1:da:2e:c2:fa:a8:ea:5b:ab:0b:bf:7e:9b:85:
                    8c:ef:1b:c2:22:10:e8:a2:f8:af:10:75:e1:82:78:
                    b8:d6:4b:de:73:d9:be:7d:5a:89:9c:9f:27:04:43:
                    54:66:a4:62:2a:82:ad:ec:8a:2a:75:94:3a:c9:d7:
                    df:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:FF:5E:C4:BC:67:FE:15:BA:86:E5:2E:F1:46:B6:96:01:61:D6:E0
            X509v3 Authority Key Identifier:
                keyid:E2:11:0A:CC:E3:3A:C8:50:11:CA:8C:22:D2:00:16:66:E4:5B:93:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4hEKzOM6yFARyowi0gAWZuRbk3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/s_9exLxn_hW6huUu8Ua2lgFh1uA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.111.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:5d:07:ed:ea:48:07:34:22:54:48:67:88:57:84:6e:bf:ba:
         f8:41:c1:01:df:21:8e:8c:81:8a:63:0d:dc:4c:0d:08:b6:29:
         30:f7:8a:b2:09:30:97:27:69:81:01:c8:40:e3:9a:1f:4e:06:
         7c:4f:81:f1:50:0c:7f:9d:2f:0b:e6:a0:bd:e9:d3:bc:d8:ec:
         b3:1e:bf:60:79:c7:00:af:30:e1:9d:f6:93:ef:7c:83:6d:35:
         e2:ec:e9:ac:eb:07:e9:e7:c0:02:52:ed:7e:b1:7a:29:f5:28:
         f1:bd:61:b4:ef:6b:05:19:9b:0a:0f:35:57:10:9e:33:8d:21:
         d9:d5:1c:8e:c2:84:bf:17:63:e0:8e:c8:d8:e7:59:85:9b:b9:
         0b:66:c7:10:f6:19:30:74:ca:c6:2a:55:db:6f:b0:db:15:34:
         8a:08:f6:8e:d5:06:42:ed:55:43:b4:c1:5a:fa:ef:de:a6:ae:
         a9:ff:b4:f9:82:9c:b0:a6:c4:0c:79:4d:86:59:26:ca:e0:ae:
         b3:d0:ff:d9:79:5f:b3:b1:03:3d:a0:5a:45:cd:84:82:b7:29:
         b0:39:aa:03:dc:4c:dc:d8:ce:a8:b7:3f:b0:9d:7f:ee:23:62:
         20:9e:3a:b1:43:19:69:2b:58:13:8c:86:d3:31:f2:59:f6:88:
         4e:2e:54:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:39 2025 by rpki-client