Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/267ead-f26a-4b12-9abb-f1d6597aba7e/1/R_W3W9LuWOO0VVLkp5D1Eo6hcBI.roa
File:                     R_W3W9LuWOO0VVLkp5D1Eo6hcBI.roa (raw, json)
Hash identifier:          kvR8H0jPXKJZUeSSSK2PuaUh2vg3JKpXqH7tgioaHbM=
Subject key identifier:   47:F5:B7:5B:D2:EE:58:E3:B4:55:52:E4:A7:90:F5:12:8E:A1:70:12
Certificate issuer:       /CN=31083abd7f9799631a9bbda8a34f442301fc6e6f
Certificate serial:       7E38
Authority key identifier: 31:08:3A:BD:7F:97:99:63:1A:9B:BD:A8:A3:4F:44:23:01:FC:6E:6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MQg6vX-XmWMam72oo09EIwH8bm8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/267ead-f26a-4b12-9abb-f1d6597aba7e/1/R_W3W9LuWOO0VVLkp5D1Eo6hcBI.roa
Signing time:             Tue 25 Jan 2022 09:04:32 +0000
ROA not before:           Tue 25 Jan 2022 09:04:32 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209235
IP address blocks:        91.244.246.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32312 (0x7e38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31083abd7f9799631a9bbda8a34f442301fc6e6f
        Validity
            Not Before: Jan 25 09:04:32 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=47f5b75bd2ee58e3b45552e4a790f5128ea17012
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:22:7f:2e:ba:31:91:24:aa:ab:70:1e:b4:67:
                    ea:d8:cc:cf:41:e7:e4:81:4f:ec:0f:80:a7:0e:3d:
                    41:bf:1c:54:9b:eb:58:32:87:b0:c7:b6:7f:53:a7:
                    93:27:1e:42:e3:16:f1:f6:ca:b1:e4:26:3f:dd:49:
                    d4:3f:22:b0:8e:0a:31:02:e5:b2:4a:83:7e:97:72:
                    d1:6d:d2:6b:78:1d:aa:18:87:9b:dc:fb:b1:76:dc:
                    82:81:58:41:4b:25:4b:fc:0a:a7:e4:72:6b:b8:9f:
                    cd:b2:48:d6:a3:5c:14:3d:bf:bb:f1:ca:ea:6e:84:
                    09:02:64:ee:12:36:7d:16:0a:9d:13:53:ba:cb:dd:
                    fa:ec:78:01:6a:96:ae:e4:49:e0:cc:1b:d9:41:29:
                    16:f9:39:6b:da:c2:f4:43:90:30:e8:54:ba:83:de:
                    95:38:72:a0:11:89:26:e6:ac:27:26:b2:34:04:90:
                    ad:53:c7:7d:8c:75:11:10:95:f7:d5:6f:e5:27:84:
                    6f:0b:10:e3:90:1e:3a:cd:64:48:2c:33:cb:d6:3b:
                    cb:1e:f6:27:2e:24:15:9a:f5:34:4f:40:9c:e5:14:
                    45:11:71:59:91:6c:b5:2b:8f:84:b3:48:89:2d:43:
                    c8:e0:33:74:7a:14:60:81:6c:55:a8:7d:e2:f2:f9:
                    98:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:F5:B7:5B:D2:EE:58:E3:B4:55:52:E4:A7:90:F5:12:8E:A1:70:12
            X509v3 Authority Key Identifier:
                keyid:31:08:3A:BD:7F:97:99:63:1A:9B:BD:A8:A3:4F:44:23:01:FC:6E:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MQg6vX-XmWMam72oo09EIwH8bm8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/267ead-f26a-4b12-9abb-f1d6597aba7e/1/R_W3W9LuWOO0VVLkp5D1Eo6hcBI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/267ead-f26a-4b12-9abb-f1d6597aba7e/1/MQg6vX-XmWMam72oo09EIwH8bm8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.244.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:b1:24:49:53:6e:81:14:d1:17:61:18:89:68:b8:5d:79:ec:
         dc:af:9c:33:b2:54:0d:07:15:dd:1c:ca:e2:6d:eb:a7:24:34:
         f1:7b:70:5d:17:b7:f4:cf:38:11:48:db:85:51:26:e9:29:6f:
         5f:58:60:4a:bd:d7:ba:66:2c:5a:53:8c:2f:1e:2e:1f:52:b4:
         38:c4:0f:d0:f9:be:47:bc:16:0c:af:63:80:9d:60:d2:15:08:
         d1:d7:83:42:af:31:cc:77:96:68:7b:57:07:29:3c:29:ad:b7:
         aa:13:85:b0:aa:d5:24:aa:65:85:b8:95:75:00:d4:96:3c:0b:
         9e:e3:c9:eb:28:7d:b1:3c:91:90:4e:97:52:17:77:41:70:71:
         0b:c6:b5:63:77:c9:94:17:58:e3:38:50:20:94:c3:b2:45:e2:
         fc:24:f4:9e:58:93:b3:70:5a:b7:3c:41:9e:6a:fa:00:6a:b6:
         f3:e4:3d:9d:b8:fd:79:ec:da:58:96:7d:c4:a8:0f:62:00:5a:
         5d:c4:88:c7:95:94:18:0e:ef:b9:26:c4:6e:c7:4c:97:4a:4b:
         af:7d:3a:96:1f:68:ba:66:f0:c3:a2:f7:a0:ed:d3:99:06:b0:
         d3:fd:ac:d5:e3:50:95:d6:7b:dd:a7:58:c3:b8:95:1a:7e:3f:
         ae:67:cd:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:34 2024 by rpki-client on console-fra.rpki-client.org