Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/6FhizICQJ19QTwrQieEnq818P4c.roa
File:                     6FhizICQJ19QTwrQieEnq818P4c.roa (raw, json)
Hash identifier:          7iXsKzLRd6+wr/S6I2NUVDoDM6qVtPwlevMI5TXPuEQ=
Subject key identifier:   E8:58:62:CC:80:90:27:5F:50:4F:0A:D0:89:E1:27:AB:CD:7C:3F:87
Certificate issuer:       /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial:       17FCBBA1
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/6FhizICQJ19QTwrQieEnq818P4c.roa
Signing time:             Sat 01 Jan 2022 04:00:27 +0000
ROA not before:           Sat 01 Jan 2022 04:00:27 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60147
IP address blocks:        213.130.95.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 402439073 (0x17fcbba1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
        Validity
            Not Before: Jan  1 04:00:27 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e85862cc8090275f504f0ad089e127abcd7c3f87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:37:31:49:cf:ba:0b:5b:b5:6d:32:3d:9f:63:
                    cf:71:f0:78:f4:ec:a1:03:4e:50:15:73:ce:6a:34:
                    eb:5e:5e:cf:f2:03:15:f7:a3:6e:0a:83:60:d6:be:
                    ce:4c:e9:74:87:4b:dc:70:95:81:27:cc:68:d6:08:
                    69:01:c8:e9:73:59:0c:91:bb:33:95:19:d4:34:73:
                    13:a5:52:2f:77:fe:0a:35:8c:17:b2:59:64:06:bf:
                    c1:42:fc:3d:b4:95:79:7e:34:39:4b:48:18:ba:21:
                    49:c5:3a:98:56:cd:0d:ea:50:ae:a4:60:e8:bd:28:
                    aa:76:60:53:75:5f:8c:09:66:2e:65:17:5e:de:c4:
                    8f:ca:e0:7f:d0:50:5f:bf:8a:b3:e0:de:41:e4:86:
                    fd:2a:b1:67:87:42:cc:9d:82:43:f7:49:b9:c7:c7:
                    91:63:6b:58:4b:3a:1b:ef:d6:1b:94:24:b2:7b:e3:
                    a6:5d:15:08:89:32:51:08:3d:5f:1e:cb:d2:ed:83:
                    ea:17:4f:65:ae:13:82:c0:cc:3a:6a:cd:87:b9:69:
                    86:1f:dc:f0:ce:f2:f7:f2:ec:99:d3:23:e8:d2:c8:
                    4a:73:05:ca:2a:e2:95:e3:f9:be:0a:1a:e7:2b:31:
                    07:49:97:e5:46:7a:c7:c1:37:a4:f7:11:92:1d:31:
                    dd:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:58:62:CC:80:90:27:5F:50:4F:0A:D0:89:E1:27:AB:CD:7C:3F:87
            X509v3 Authority Key Identifier:
                keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/6FhizICQJ19QTwrQieEnq818P4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.130.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:ad:e4:d0:76:97:7e:97:b2:fb:4b:d2:2d:cf:cc:b9:cb:71:
         09:ce:e8:b2:3c:1b:b5:0e:a6:15:c7:9d:d8:3c:78:49:b7:7d:
         b8:3e:49:4e:d4:59:42:02:36:99:48:0d:d2:12:e3:f5:fa:f9:
         52:48:2a:00:34:1a:7b:8f:a8:34:7e:29:54:9a:28:7c:5a:cc:
         18:1a:85:42:88:34:cc:92:a9:bb:bb:92:0f:33:73:31:51:7a:
         1c:c9:b4:d7:80:7f:f8:58:5f:6f:93:32:fe:fd:e0:fe:3a:53:
         d4:89:9c:be:3d:e8:70:1e:46:ac:b1:49:b5:ae:aa:85:14:10:
         b4:8c:63:5a:c1:49:70:b7:c5:6c:7c:14:29:00:49:20:3e:e6:
         ae:6b:5e:73:28:4c:fa:66:62:b3:c9:0b:b4:3b:47:e3:0e:d1:
         2d:71:3a:24:2a:fa:f9:6c:72:d2:0d:fd:e9:18:f1:5d:8a:b2:
         4f:83:61:1c:f1:d0:87:c5:49:cb:6b:0c:17:9e:57:47:1c:14:
         5d:b9:29:48:94:72:ba:87:c0:62:d0:b2:99:86:ed:dc:56:24:
         ad:8a:9b:1f:4f:34:ef:d1:be:a0:9d:c6:54:09:92:65:d3:c6:
         e4:fe:40:37:67:7b:94:3c:5b:de:9f:e9:d1:43:57:09:62:98:
         79:44:01:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:53 2024 by rpki-client on console-ams.rpki-client.org