Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/n_-pFY1cIo_bPN6ku9n-ZJ14KZg.roa
File:                     n_-pFY1cIo_bPN6ku9n-ZJ14KZg.roa (raw, json)
Hash identifier:          KJoJT/En1ToF8B0HCayA36nZ8/OFnRsLng+LK0lLarA=
Subject key identifier:   9F:FF:A9:15:8D:5C:22:8F:DB:3C:DE:A4:BB:D9:FE:64:9D:78:29:98
Certificate issuer:       /CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Certificate serial:       04D027ED
Authority key identifier: C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/n_-pFY1cIo_bPN6ku9n-ZJ14KZg.roa
Signing time:             Mon 09 May 2022 13:26:18 +0000
ROA not before:           Mon 09 May 2022 13:26:18 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     56687
IP address blocks:        46.148.46.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80750573 (0x4d027ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c89c2cc489ebe48f490584ac866fe362c4117e75
        Validity
            Not Before: May  9 13:26:18 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9fffa9158d5c228fdb3cdea4bbd9fe649d782998
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:eb:a6:59:7b:07:b5:19:77:74:66:82:3b:83:
                    2a:88:7d:81:95:a3:0f:c0:a6:4c:ef:a7:30:9b:9c:
                    66:22:2b:20:6d:f2:8f:90:fa:5c:e4:2e:bf:68:a9:
                    db:be:e2:70:6a:b6:0a:0d:99:bd:ad:3e:0f:bf:4d:
                    22:f0:30:97:3c:8d:42:22:9f:3e:46:35:72:75:97:
                    3a:39:33:57:34:a1:19:b1:68:1e:49:50:67:a1:ad:
                    28:c3:3e:76:4a:92:0f:28:68:41:eb:1e:e6:c8:27:
                    fe:30:b2:f0:37:90:75:68:1b:94:92:ae:78:d9:a0:
                    75:ed:53:fa:2e:77:72:39:ab:8f:16:9b:4b:0c:53:
                    72:d9:ab:29:aa:3e:22:dd:94:1b:4b:e4:83:81:14:
                    5b:42:96:a8:f6:dc:cb:71:1c:77:5c:d2:26:ac:e4:
                    e5:e8:5e:43:6f:58:17:7a:0b:81:5c:d2:c9:39:22:
                    59:de:99:ff:85:2a:1a:02:df:cc:3b:49:65:d9:6a:
                    8e:4c:87:02:1d:ca:d2:73:15:c3:a6:d8:b7:92:8e:
                    fd:a6:f6:f9:04:3f:08:67:2c:6f:19:cc:aa:d9:20:
                    a5:88:54:e1:a4:b0:c0:63:d9:15:f7:59:29:2b:e4:
                    63:f9:a9:03:14:9b:96:0c:20:f3:9f:51:c6:d2:34:
                    0c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:FF:A9:15:8D:5C:22:8F:DB:3C:DE:A4:BB:D9:FE:64:9D:78:29:98
            X509v3 Authority Key Identifier:
                keyid:C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/n_-pFY1cIo_bPN6ku9n-ZJ14KZg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.148.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:c1:ba:d0:59:19:5c:75:02:ec:9b:bb:3a:32:34:f4:8e:f8:
         8d:b5:91:b6:64:4b:7b:e5:48:a9:c7:b8:df:f4:33:41:0d:c8:
         38:d1:6d:60:85:b6:67:54:73:ae:00:5f:66:9f:66:19:3c:5b:
         1a:ba:24:8a:55:98:64:4e:99:ea:aa:ab:23:00:1f:e1:a5:a4:
         88:f7:15:66:c5:50:49:48:13:10:5e:31:73:19:43:e1:74:fb:
         d4:f1:9b:76:45:aa:9b:8b:af:53:36:68:e9:86:18:c8:3b:c1:
         4f:2f:47:ad:69:e2:3e:52:25:5a:67:16:e5:88:ce:36:4d:18:
         92:d6:79:91:59:cb:b4:95:e9:d1:04:9c:be:d7:c7:1c:47:c8:
         8e:84:ff:55:96:ee:c7:8b:e7:f7:af:1d:66:d2:d7:ed:e4:bb:
         a6:62:51:71:b2:e6:49:1c:c3:71:bf:ff:21:ae:3b:32:a3:ae:
         72:bb:7c:6f:a6:31:ed:6c:f5:26:68:00:9d:a6:64:f7:3f:69:
         e4:cd:4e:a8:d9:fb:45:29:f6:d2:7a:ac:3c:3e:b8:03:9d:31:
         2c:7d:52:9c:e0:a0:76:7f:0e:8d:39:11:fa:be:db:46:6f:11:
         27:19:a0:62:e3:ad:47:07:d7:a1:bc:44:80:97:f6:e2:28:16:
         92:47:b4:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:21 2024 by rpki-client on console-fra.rpki-client.org