Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/7JA_l-F9e17OraAXmE_9Cs-VTHA.roa
File:                     7JA_l-F9e17OraAXmE_9Cs-VTHA.roa (raw, json)
Hash identifier:          ZAgncCvupWgGDNHHnpYOMJOoS4nQ2GHZQ3jN9ktuX3g=
Subject key identifier:   EC:90:3F:97:E1:7D:7B:5E:CE:AD:A0:17:98:4F:FD:0A:CF:95:4C:70
Certificate issuer:       /CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Certificate serial:       0A04386E
Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/7JA_l-F9e17OraAXmE_9Cs-VTHA.roa
Signing time:             Sat 01 Jan 2022 05:03:24 +0000
ROA not before:           Sat 01 Jan 2022 05:03:24 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     24940
IP address blocks:        2a0d:2146:8180::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 168048750 (0xa04386e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f
        Validity
            Not Before: Jan  1 05:03:24 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ec903f97e17d7b5eceada017984ffd0acf954c70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a5:c5:cf:5f:37:ea:70:b7:bc:9c:a7:02:d5:
                    b0:40:b8:af:fa:d1:0f:cd:fc:ff:a7:08:49:91:3e:
                    9d:4c:d3:df:ff:dd:97:68:b7:2a:fe:27:a0:cf:ef:
                    9a:38:f8:8a:bc:47:35:53:44:62:04:81:62:7e:fb:
                    c5:46:aa:18:c1:5e:f5:36:00:40:9c:dc:e3:58:aa:
                    02:3c:b0:0a:2e:7c:50:00:07:b5:d5:54:e9:ed:b2:
                    09:36:9e:3b:62:55:e0:37:47:b9:55:34:67:52:d7:
                    df:11:aa:ae:b1:05:c6:66:68:1f:24:5a:7b:ae:5c:
                    d1:23:b6:5d:57:4a:e8:67:26:0b:f0:da:8e:78:00:
                    5b:bc:c0:b2:fe:6f:3b:ca:47:d2:c8:24:15:fd:96:
                    ec:b6:e4:94:86:c9:54:41:fa:60:a7:6b:16:be:d6:
                    5d:16:3c:27:b6:f2:13:9e:0a:e4:46:05:65:bf:8d:
                    64:e6:b1:80:a3:ec:f7:a7:cf:0e:30:1a:72:7c:aa:
                    4d:86:d6:a3:b4:52:a8:82:48:6d:7c:37:49:e2:f5:
                    da:95:ce:f9:2c:b7:83:65:3f:99:0a:a7:80:8b:25:
                    ff:78:63:59:1c:11:ae:90:35:96:6e:a8:2e:cb:c1:
                    33:4f:b9:22:64:53:9d:3b:c4:28:d6:33:f5:04:f9:
                    8b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:90:3F:97:E1:7D:7B:5E:CE:AD:A0:17:98:4F:FD:0A:CF:95:4C:70
            X509v3 Authority Key Identifier:
                keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/7JA_l-F9e17OraAXmE_9Cs-VTHA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0d:2146:8180::/44

    Signature Algorithm: sha256WithRSAEncryption
         1b:d0:62:66:85:72:64:f3:dd:97:ff:57:71:bf:18:85:61:d0:
         5f:63:38:fd:f2:fe:74:9b:f1:92:dc:56:9c:84:b3:aa:b7:b8:
         10:ce:b0:da:bd:2e:97:6c:a9:fb:16:1e:a8:1c:5b:46:64:a9:
         74:2b:a2:44:59:ad:a3:76:cb:18:46:08:f4:d9:07:27:f3:9c:
         2f:21:7c:bf:b3:4f:ed:35:f8:48:bf:c0:48:ea:18:59:10:65:
         c5:0f:b7:a0:b5:11:2c:56:2a:8d:77:51:9b:8a:2b:54:1e:12:
         f9:e6:d8:e7:b6:c8:ab:43:3e:cf:73:0f:b9:77:6b:37:3a:e2:
         d9:d9:7d:7e:d7:db:b1:9b:2f:1a:e7:4f:92:01:ee:37:1c:71:
         2a:72:1e:fb:96:76:c0:12:05:c7:52:e1:58:63:27:da:38:84:
         7b:1e:ee:9d:d1:39:fd:40:27:1a:1c:df:d0:5d:ba:eb:de:34:
         cc:e6:91:fb:c7:3b:56:62:e7:82:01:ea:c3:0b:88:a5:6c:4a:
         6d:57:81:af:d4:a4:2d:43:e1:80:03:c8:65:f5:a7:73:3e:f8:
         ad:28:57:5e:19:92:90:62:3f:41:eb:33:e1:95:82:dc:e5:2e:
         04:09:3a:1e:b6:c0:2f:c1:c8:4b:0a:22:3a:a7:f2:22:ea:82:
         33:a7:96:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:39 2024 by rpki-client on console-ams.rpki-client.org