Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/DYYbY63_D0eakRu3w_4eVIJOWB0.roa
File:                     DYYbY63_D0eakRu3w_4eVIJOWB0.roa (raw, json)
Hash identifier:          FcQYuJfvLE0OwT36Rq4V6lomZI2mCVaSknnfafEcFJw=
Subject key identifier:   0D:86:1B:63:AD:FF:0F:47:9A:91:1B:B7:C3:FE:1E:54:82:4E:58:1D
Certificate issuer:       /CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Certificate serial:       0B3453AF
Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/DYYbY63_D0eakRu3w_4eVIJOWB0.roa
Signing time:             Thu 05 May 2022 11:21:07 +0000
ROA not before:           Thu 05 May 2022 11:21:07 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     205214
IP address blocks:        2a0d:2146:8480::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 187978671 (0xb3453af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f
        Validity
            Not Before: May  5 11:21:07 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0d861b63adff0f479a911bb7c3fe1e54824e581d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:94:e9:ed:13:71:c3:6b:96:c8:8c:a9:ce:2b:
                    c7:4d:74:d6:05:97:8d:de:fc:50:1f:99:e0:e5:71:
                    6d:41:8b:3e:31:5f:ae:a1:46:cb:df:95:bf:ab:60:
                    70:c1:d4:96:c1:bf:2d:cb:1a:79:5f:f7:12:fe:5e:
                    62:8f:d5:43:e9:12:b6:08:d2:c0:49:e6:bf:e2:9f:
                    3e:10:22:da:a3:77:bf:f9:95:e9:99:12:6d:77:5d:
                    ae:f0:7c:98:4e:37:21:bf:e2:02:54:82:8c:fb:37:
                    d8:21:02:e5:b5:6d:e1:1a:19:2b:c3:87:32:6e:06:
                    d1:5f:d0:00:15:77:7e:a7:ff:53:f6:42:8f:6a:02:
                    2a:7d:d5:e8:c5:5e:73:5c:8a:88:66:69:be:93:a5:
                    89:26:4f:84:5f:57:52:2f:e2:87:8b:f0:45:56:d0:
                    73:15:21:80:2b:51:17:63:2d:6d:5e:fa:14:c9:7d:
                    0b:12:56:98:09:08:8d:aa:f4:d6:a9:b9:79:47:e9:
                    d6:c4:64:82:4d:c6:76:bd:72:ec:d9:e4:7b:e3:6a:
                    d8:08:75:4d:02:92:9a:69:ed:72:a0:fc:e3:2e:92:
                    65:c2:87:00:98:43:93:c7:4e:1c:ab:3e:13:dd:44:
                    4e:37:62:6e:68:2d:d1:f2:8f:e4:ad:57:2c:2e:f8:
                    52:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:86:1B:63:AD:FF:0F:47:9A:91:1B:B7:C3:FE:1E:54:82:4E:58:1D
            X509v3 Authority Key Identifier:
                keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/DYYbY63_D0eakRu3w_4eVIJOWB0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0d:2146:8480::/44

    Signature Algorithm: sha256WithRSAEncryption
         6e:18:1e:66:45:3b:15:d1:45:80:b7:cf:66:7b:0f:69:42:74:
         eb:f2:58:fa:c5:78:b9:c7:d0:6c:5d:d6:10:ff:ba:c8:34:82:
         d1:0c:a7:86:ef:d5:fb:a1:6a:b5:9c:4e:b9:8f:d8:41:c8:8a:
         2d:8d:01:a9:5f:74:0c:ed:73:fc:0e:a4:da:d5:3a:ce:3a:e8:
         7e:d7:65:8b:d2:30:37:e8:09:5c:92:3e:39:b0:1b:97:dd:4e:
         76:04:ab:9f:ae:d3:d7:5e:97:da:44:ce:af:66:31:8b:0e:ad:
         76:cb:98:58:e7:1b:c5:11:7c:6b:65:92:13:57:28:41:85:c8:
         90:e8:fa:e0:ac:6d:29:98:ea:15:41:7d:20:b3:1f:af:fe:07:
         3c:bf:98:77:f9:b3:15:0b:92:9b:b5:8f:7c:d1:32:f7:20:05:
         f5:0e:6a:88:4c:08:05:70:c1:d6:67:d1:1e:bc:35:f2:c6:90:
         f8:c3:e6:74:1c:32:75:73:12:53:20:22:aa:41:78:52:53:e9:
         aa:44:a4:97:7f:de:25:4e:20:0d:34:3f:e5:c5:73:c9:ec:b5:
         ba:4d:2d:99:14:37:50:2f:24:53:62:40:68:5a:d5:e2:c6:f3:
         40:9d:0b:9d:2a:9d:be:42:b3:56:1c:31:7c:f8:75:d3:d2:0c:
         d2:97:69:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:59 2024 by rpki-client on console-fra.rpki-client.org