Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/72dc55-6ac5-47d7-8e09-91fa61f7326c/1/6xEWdNDS_Q-8P0_C6H8JNbujsX0.roa
File:                     6xEWdNDS_Q-8P0_C6H8JNbujsX0.roa (raw, json)
Hash identifier:          W8uQHt08vvLqolh6WdpP0ifzcivNHqcuRTuDwZRgYxY=
Subject key identifier:   EB:11:16:74:D0:D2:FD:0F:BC:3F:4F:C2:E8:7F:09:35:BB:A3:B1:7D
Certificate issuer:       /CN=119a4d4c503a88f364e4c40d701c44c4437a1a0b
Certificate serial:       0182767E45B76EF83A7ED3653D73B48FE8C4
Authority key identifier: 11:9A:4D:4C:50:3A:88:F3:64:E4:C4:0D:70:1C:44:C4:43:7A:1A:0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EZpNTFA6iPNk5MQNcBxExEN6Ggs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/72dc55-6ac5-47d7-8e09-91fa61f7326c/1/6xEWdNDS_Q-8P0_C6H8JNbujsX0.roa
Signing time:             Sun 07 Aug 2022 04:09:23 +0000
ROA not before:           Sun 07 Aug 2022 04:09:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209693
IP address blocks:        2001:67c:910::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:76:7e:45:b7:6e:f8:3a:7e:d3:65:3d:73:b4:8f:e8:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=119a4d4c503a88f364e4c40d701c44c4437a1a0b
        Validity
            Not Before: Aug  7 04:09:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=eb111674d0d2fd0fbc3f4fc2e87f0935bba3b17d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:82:22:cc:28:d3:14:c4:42:5d:85:68:e4:fe:
                    e3:3c:aa:31:d0:0e:13:0e:65:5c:fe:9f:68:8f:f9:
                    84:5f:c1:fe:48:06:33:20:d2:13:f3:08:b6:bd:c7:
                    5d:9f:1f:52:2f:31:66:9e:a7:a2:e3:d9:b7:6d:f1:
                    44:d0:83:d6:91:1b:fb:72:81:4e:16:c8:b3:7a:1d:
                    dd:5e:74:db:60:52:08:0f:e2:58:7d:34:36:0f:52:
                    dc:3f:8b:1d:da:82:33:e5:9d:a8:f9:0c:55:23:18:
                    e8:44:2a:b5:3f:e4:40:f2:80:ca:9f:8b:3e:22:8c:
                    0a:2e:18:ab:9c:07:db:98:cd:7c:ae:15:f9:58:0a:
                    41:79:3d:9a:91:01:c1:18:ae:7a:bd:43:9e:9e:ca:
                    17:67:fd:e8:be:13:a4:5a:0d:d8:ba:05:73:55:86:
                    35:a9:6b:1a:1a:44:37:16:64:ee:f0:63:40:cd:8d:
                    fb:4d:52:37:8d:6a:57:07:97:39:41:55:52:03:7b:
                    4e:07:a9:51:54:16:6a:81:69:e6:38:19:13:0c:e2:
                    8c:a1:11:43:58:7d:d2:26:42:1d:96:0f:0f:a5:ee:
                    f8:e4:23:74:70:7a:6e:19:ca:d2:f7:60:0e:50:ab:
                    a9:ad:74:7b:b4:2d:84:69:e6:59:2d:76:07:b4:61:
                    9e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:11:16:74:D0:D2:FD:0F:BC:3F:4F:C2:E8:7F:09:35:BB:A3:B1:7D
            X509v3 Authority Key Identifier:
                keyid:11:9A:4D:4C:50:3A:88:F3:64:E4:C4:0D:70:1C:44:C4:43:7A:1A:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EZpNTFA6iPNk5MQNcBxExEN6Ggs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/72dc55-6ac5-47d7-8e09-91fa61f7326c/1/6xEWdNDS_Q-8P0_C6H8JNbujsX0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/72dc55-6ac5-47d7-8e09-91fa61f7326c/1/EZpNTFA6iPNk5MQNcBxExEN6Ggs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:910::/48

    Signature Algorithm: sha256WithRSAEncryption
         83:72:f0:cd:32:04:b4:54:46:11:36:bc:61:ae:b3:64:a5:09:
         1d:be:23:df:1a:df:3b:dd:41:46:d7:ec:ac:d4:b7:ed:62:d5:
         e0:7a:f2:9d:f7:f5:e4:97:92:a6:01:be:5e:dd:4c:83:ea:92:
         6d:2f:d3:6a:a2:d8:3c:c3:c1:07:af:aa:50:d7:a8:87:9d:be:
         bf:6a:5d:ac:24:75:c5:b8:1d:9a:23:73:5d:81:f7:15:08:64:
         86:f9:78:1f:30:04:ed:2b:6f:ca:88:67:56:63:8f:c9:46:84:
         a3:27:94:0d:15:06:b2:f5:0f:13:59:e1:cc:cd:13:39:64:70:
         6e:65:c1:2c:83:27:48:d8:f7:86:d2:1c:26:ab:7e:8a:9d:02:
         75:4e:76:06:a2:d5:d4:77:56:39:71:60:17:95:2e:dc:fb:dd:
         b2:ef:3c:4e:08:d4:18:5f:e6:3b:bb:85:ee:09:69:a3:c0:30:
         d4:f6:6c:ee:4c:7c:ff:3c:82:25:69:dc:96:83:47:8f:b1:d3:
         9f:7d:37:e4:4a:fb:a7:ca:13:95:65:65:cf:ac:63:54:26:76:
         fc:12:b7:8c:5d:e6:ba:62:94:fe:36:5a:61:69:bf:00:3f:51:
         fc:62:e4:db:53:7a:c4:00:69:b9:0f:35:69:47:cd:6e:29:9c:
         3a:2a:34:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:41 2024 by rpki-client on console-ams.rpki-client.org