Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/SO6i7uNnm9PVtDjalmu5xayKMFY.roa
File:                     SO6i7uNnm9PVtDjalmu5xayKMFY.roa (raw, json)
Hash identifier:          st/sah/eqDR8P73i9if++Hjyj4ai6+7lZxpknqIOHfI=
Subject key identifier:   48:EE:A2:EE:E3:67:9B:D3:D5:B4:38:DA:96:6B:B9:C5:AC:8A:30:56
Certificate issuer:       /CN=51476318d71bf658f9a845f54ab27bd899892437
Certificate serial:       137DCD22
Authority key identifier: 51:47:63:18:D7:1B:F6:58:F9:A8:45:F5:4A:B2:7B:D8:99:89:24:37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UUdjGNcb9lj5qEX1SrJ72JmJJDc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/SO6i7uNnm9PVtDjalmu5xayKMFY.roa
Signing time:             Sat 01 Jan 2022 15:03:49 +0000
ROA not before:           Sat 01 Jan 2022 15:03:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     197380
IP address blocks:        185.127.112.0/24 maxlen: 24
                          185.127.115.0/24 maxlen: 24
                          185.127.113.0/24 maxlen: 24
                          185.127.114.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 327011618 (0x137dcd22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51476318d71bf658f9a845f54ab27bd899892437
        Validity
            Not Before: Jan  1 15:03:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=48eea2eee3679bd3d5b438da966bb9c5ac8a3056
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b5:97:9c:cf:d5:7c:ec:8a:9b:ff:0a:f7:56:
                    c9:01:77:75:35:90:fc:75:f1:84:8b:1b:f1:4f:59:
                    89:d8:ae:bc:5d:7b:30:3b:6f:d9:fb:95:d6:2b:c8:
                    90:3a:7c:ec:39:fd:7c:b7:dc:ae:bb:9e:53:26:97:
                    75:28:d5:0f:b0:e3:b1:b0:d2:18:0a:92:77:b4:df:
                    0c:40:70:d8:8e:63:2e:1a:31:c9:27:aa:45:c0:e9:
                    df:4d:79:d8:75:26:b4:9a:4a:cc:3a:31:67:d7:77:
                    50:4a:2c:d1:1f:1e:b4:6c:81:6b:4d:8d:5b:b2:41:
                    3f:42:71:88:40:ad:26:a8:82:17:03:a0:9f:46:13:
                    2f:90:48:bb:c4:2f:4c:d5:d1:f2:50:8f:06:90:0b:
                    1b:3d:a0:14:1e:42:73:e8:8f:f8:b8:4f:43:06:d7:
                    52:85:2a:84:5c:7f:11:f4:96:4a:24:ea:69:c9:a1:
                    6b:a0:0f:b8:ac:3b:88:09:ce:fd:1d:f0:20:cb:e5:
                    7b:25:b0:67:2e:35:1f:0b:e5:01:ac:81:1c:3c:1f:
                    bc:fd:7f:d5:76:e3:f8:7b:77:ae:1b:2e:87:1b:80:
                    7c:37:37:d8:e1:87:3f:6a:1e:99:d8:4a:21:54:ec:
                    1e:f1:2a:77:b0:69:b2:1a:ee:e6:bf:e8:3f:74:83:
                    0a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:EE:A2:EE:E3:67:9B:D3:D5:B4:38:DA:96:6B:B9:C5:AC:8A:30:56
            X509v3 Authority Key Identifier:
                keyid:51:47:63:18:D7:1B:F6:58:F9:A8:45:F5:4A:B2:7B:D8:99:89:24:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UUdjGNcb9lj5qEX1SrJ72JmJJDc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/SO6i7uNnm9PVtDjalmu5xayKMFY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.127.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c8:9c:66:98:64:8a:e4:56:aa:58:af:ed:0b:9c:6d:e8:17:74:
         c0:6d:f1:85:4e:b8:ac:fc:b7:c2:94:36:c9:d2:6d:0a:9f:d3:
         8d:e7:2d:7f:1c:a2:97:97:93:90:13:5c:9d:1e:a9:f1:f5:c0:
         3c:eb:5a:a8:e3:83:98:ce:e0:0a:95:64:f7:99:0f:97:6a:e5:
         b9:c2:cf:7a:07:94:cb:bf:65:27:2d:1f:b0:4f:49:5f:44:a6:
         21:6e:ef:9a:1a:b5:b6:cb:78:e5:29:13:38:15:62:e8:61:9d:
         3b:5a:af:a7:0c:b9:e8:b3:c0:4f:14:20:bc:99:dc:22:05:67:
         11:5b:33:50:7d:1f:ec:4b:2f:44:5a:7d:f8:a0:ea:b8:7b:98:
         27:d6:e8:f0:3a:c3:d8:47:3c:13:8f:0f:25:0e:b1:92:5c:c9:
         b2:4c:90:e4:6a:95:5a:29:0d:ee:e0:62:38:13:87:a2:9b:a3:
         e5:0f:f8:3d:e6:ca:a3:d9:74:34:94:c8:9e:0a:63:73:3f:64:
         2b:d0:b3:f5:21:80:d3:a4:0c:92:27:39:60:66:ee:7d:38:7b:
         81:1f:c5:c0:5e:7a:b4:16:2f:bf:1c:3c:2e:ad:c4:34:84:66:
         56:f9:9e:37:85:65:4d:19:34:4d:0e:24:e3:9e:47:34:31:54:
         02:da:fb:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:39 2024 by rpki-client on console-ams.rpki-client.org