Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/UEbU_SJjeW7dP0BauLU69tAX2y8.roa
File:                     UEbU_SJjeW7dP0BauLU69tAX2y8.roa (raw, json)
Hash identifier:          EL/54TickMSlG4WGoijTfZQItbkQPpSUYLeIiYu8WkA=
Subject key identifier:   50:46:D4:FD:22:63:79:6E:DD:3F:40:5A:B8:B5:3A:F6:D0:17:DB:2F
Certificate issuer:       /CN=11bfa2961fa0e0b07041293ddc0c3693a9e0a238
Certificate serial:       072479C9
Authority key identifier: 11:BF:A2:96:1F:A0:E0:B0:70:41:29:3D:DC:0C:36:93:A9:E0:A2:38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/UEbU_SJjeW7dP0BauLU69tAX2y8.roa
Signing time:             Sat 01 Jan 2022 16:05:55 +0000
ROA not before:           Sat 01 Jan 2022 16:05:55 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208892
IP address blocks:        46.22.171.0/24 maxlen: 24
                          80.82.23.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119830985 (0x72479c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11bfa2961fa0e0b07041293ddc0c3693a9e0a238
        Validity
            Not Before: Jan  1 16:05:55 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5046d4fd2263796edd3f405ab8b53af6d017db2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d0:d1:be:50:72:43:d0:2b:fe:ce:1d:c3:39:
                    25:b6:8b:04:72:e2:7e:84:44:e5:75:80:53:6b:62:
                    ad:8d:ac:76:d8:4f:16:3b:6c:a3:d5:06:01:f1:66:
                    dc:38:1d:ee:95:54:33:d0:6d:a2:c9:be:61:a7:ad:
                    fc:61:eb:d3:60:61:58:ca:e5:49:8d:70:bc:4d:07:
                    32:24:f6:6f:83:04:73:ea:ff:9d:a2:b3:c5:83:ab:
                    d4:39:e6:db:71:7f:32:ed:b7:a8:9b:ed:87:7a:84:
                    18:37:5e:16:b6:eb:ce:c4:ab:32:ba:83:81:77:3b:
                    e4:74:50:9e:92:15:66:4f:93:89:6e:02:7a:20:e4:
                    ad:35:d4:f1:5f:60:fe:48:7b:59:e6:07:09:45:65:
                    f5:94:4d:fc:c6:c3:91:dd:99:bb:cc:5c:78:57:2e:
                    b1:fd:9c:04:c4:60:68:f9:31:b8:c0:ac:1b:08:28:
                    c4:a2:1c:da:0f:1d:cc:0f:ef:52:86:ec:3f:b0:17:
                    76:91:c1:0d:bc:af:ed:7b:84:95:2b:2f:b0:8c:c9:
                    cd:7e:0a:ac:ef:15:b3:6d:67:cb:f5:04:21:07:a7:
                    6d:f2:3f:07:c3:10:77:0f:e9:de:41:87:f5:cb:92:
                    86:16:64:60:48:23:60:a7:54:64:d6:23:1e:1b:00:
                    9c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:46:D4:FD:22:63:79:6E:DD:3F:40:5A:B8:B5:3A:F6:D0:17:DB:2F
            X509v3 Authority Key Identifier:
                keyid:11:BF:A2:96:1F:A0:E0:B0:70:41:29:3D:DC:0C:36:93:A9:E0:A2:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/UEbU_SJjeW7dP0BauLU69tAX2y8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.22.171.0/24
                  80.82.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:cd:d6:2a:64:94:63:08:4e:9c:e5:40:c7:ac:f5:af:48:09:
         36:a9:ea:90:e1:49:38:44:1a:9e:0d:33:e8:a2:b5:95:2f:f3:
         1f:02:68:bf:2d:80:63:2e:0c:80:ca:b1:12:0a:1c:bf:76:17:
         94:ef:cb:9a:9a:f6:25:e7:cc:ce:f1:53:3b:9f:9e:3f:27:f5:
         fe:94:cb:92:9c:49:b8:01:06:30:f5:83:8e:ed:86:79:70:b5:
         40:fa:20:29:b2:46:ab:a3:ad:bc:28:19:11:66:5d:63:49:39:
         b6:9c:6d:62:e4:0f:a2:56:88:3b:d0:50:a3:83:75:42:27:c6:
         ba:79:42:1a:a9:13:72:86:d3:be:08:27:00:6d:3a:ff:97:7e:
         71:5e:d8:a9:f2:84:45:c1:20:4d:d1:53:5d:bc:10:34:15:25:
         bd:83:31:35:7c:7e:ae:6c:96:60:d9:98:55:86:47:57:5b:d3:
         fc:46:8f:39:6b:00:1d:de:0e:14:02:b6:74:f6:7e:01:56:cb:
         9e:05:65:8c:67:41:71:1e:4a:4f:a0:e4:3a:5d:e9:c6:85:6e:
         96:82:d4:72:c3:1d:2b:1f:9a:bd:0e:02:e2:ea:eb:d3:d4:83:
         4b:62:04:d4:0f:c4:d8:4d:36:2a:b9:0c:6e:11:d4:f8:d9:e8:
         66:d9:68:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:22 2024 by rpki-client on console-ams.rpki-client.org