Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/c6bpzv_rbHaeWf6NmtiW3ZEXeww.roa
File:                     c6bpzv_rbHaeWf6NmtiW3ZEXeww.roa (raw, json)
Hash identifier:          hetj5Pz29A+yrkP3zWE31Mfnlkjpbv3fGV+imPbyfzg=
Subject key identifier:   73:A6:E9:CE:FF:EB:6C:76:9E:59:FE:8D:9A:D8:96:DD:91:17:7B:0C
Certificate issuer:       /CN=5b494c6e16f49d08be761ca8c0eaa7122872fa82
Certificate serial:       1B6CF1B8
Authority key identifier: 5B:49:4C:6E:16:F4:9D:08:BE:76:1C:A8:C0:EA:A7:12:28:72:FA:82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W0lMbhb0nQi-dhyowOqnEihy-oI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/c6bpzv_rbHaeWf6NmtiW3ZEXeww.roa
Signing time:             Sat 01 Jan 2022 10:05:33 +0000
ROA not before:           Sat 01 Jan 2022 10:05:33 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     43706
IP address blocks:        79.170.6.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 460124600 (0x1b6cf1b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b494c6e16f49d08be761ca8c0eaa7122872fa82
        Validity
            Not Before: Jan  1 10:05:33 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=73a6e9ceffeb6c769e59fe8d9ad896dd91177b0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:91:82:63:92:2f:cd:df:77:46:76:a1:66:fa:
                    d1:79:07:1d:0b:3c:a7:58:cd:62:70:ee:3a:ee:99:
                    a2:97:4a:54:a5:b0:f0:b6:e1:ed:31:f5:b0:72:ba:
                    06:a6:47:d9:c6:d4:16:7e:85:f8:ff:ac:44:11:10:
                    fc:d2:62:24:05:a4:36:bc:63:21:bb:de:aa:d2:56:
                    45:7c:cb:ba:50:6c:0c:39:4b:a1:0e:e8:78:0f:b8:
                    3b:8f:8f:72:db:66:f3:ca:25:b0:ae:da:7b:24:51:
                    1f:fa:46:6c:ba:27:74:7a:7c:6e:90:a8:59:aa:43:
                    36:86:54:d8:55:88:59:17:94:72:61:e5:5d:b3:bd:
                    13:04:66:c5:92:9c:ed:f0:11:cb:b6:5c:eb:f8:47:
                    2b:00:6f:36:81:09:27:6c:88:d3:01:77:1b:c4:1a:
                    b5:e5:8c:51:67:74:80:00:3e:02:bc:7a:bb:65:6a:
                    3e:8b:f7:aa:ef:36:86:79:be:4e:06:52:d4:fb:7d:
                    1e:3e:ad:19:53:46:19:89:ac:5f:6a:5c:56:1b:8d:
                    d4:eb:09:af:8e:96:91:3c:13:39:5b:43:1a:85:23:
                    a0:bb:fc:c2:ac:8c:f5:d1:05:c2:6c:f7:5a:cc:a9:
                    1e:b5:fd:a6:40:b7:93:3f:3b:c7:7a:7e:e3:7e:65:
                    b7:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:A6:E9:CE:FF:EB:6C:76:9E:59:FE:8D:9A:D8:96:DD:91:17:7B:0C
            X509v3 Authority Key Identifier:
                keyid:5B:49:4C:6E:16:F4:9D:08:BE:76:1C:A8:C0:EA:A7:12:28:72:FA:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W0lMbhb0nQi-dhyowOqnEihy-oI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/c6bpzv_rbHaeWf6NmtiW3ZEXeww.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/W0lMbhb0nQi-dhyowOqnEihy-oI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.170.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:5e:e5:a7:28:85:22:c1:3f:c7:da:4c:f5:71:cf:b5:63:a9:
         de:95:d7:0d:2c:e0:b0:56:d6:b1:c4:c4:8b:95:7d:b9:c4:66:
         ba:eb:ce:68:b8:26:21:24:bb:ae:b0:74:4d:a1:eb:67:c8:6d:
         e9:a4:b1:a1:54:22:e6:15:84:b7:31:e4:5b:7c:a5:8b:46:0d:
         08:6a:15:57:ca:50:6d:fc:fc:1c:e4:f6:32:55:0d:be:6f:c0:
         56:03:d3:d2:cc:44:1b:4a:95:c3:b7:cc:88:1c:8f:e5:92:94:
         9d:7e:1c:48:24:1b:48:9d:ef:15:65:cd:a6:4f:d7:ab:a7:bd:
         3e:cf:f5:77:d8:ac:74:c0:8e:ec:6e:ad:e6:6d:f4:af:4a:5e:
         bd:df:c6:65:c1:e0:7d:03:3d:2d:19:cd:9b:4a:f9:69:30:25:
         98:71:ab:24:45:01:f0:6d:15:28:dc:61:a6:05:d0:4f:69:f4:
         5d:8f:15:20:05:11:38:41:7b:1f:e6:71:a0:69:3a:9d:ca:2d:
         6f:ca:60:63:68:50:a8:e0:f2:02:29:b4:35:5c:56:62:65:45:
         dd:df:1e:46:f9:14:2d:0f:8d:09:6b:bc:3f:30:4e:f9:67:3d:
         8c:33:aa:6e:4c:e8:c9:09:27:2a:87:b3:31:ef:46:45:f8:e6:
         be:22:15:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:40 2024 by rpki-client on console-fra.rpki-client.org