Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/HsScB_ONYJpN5Z9SMeUXfgVVJS8.roa
File:                     HsScB_ONYJpN5Z9SMeUXfgVVJS8.roa (raw, json)
Hash identifier:          oL5Ghn0mNHkcSkqFTXXOlia5QsUQiuCaH1O4JHGjKTY=
Subject key identifier:   1E:C4:9C:07:F3:8D:60:9A:4D:E5:9F:52:31:E5:17:7E:05:55:25:2F
Certificate issuer:       /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial:       42A8366D
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/HsScB_ONYJpN5Z9SMeUXfgVVJS8.roa
Signing time:             Sat 01 Jan 2022 06:05:05 +0000
ROA not before:           Sat 01 Jan 2022 06:05:05 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204304
IP address blocks:        92.50.246.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1118320237 (0x42a8366d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
        Validity
            Not Before: Jan  1 06:05:05 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1ec49c07f38d609a4de59f5231e5177e0555252f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f2:75:37:48:f9:ff:f8:65:4b:23:04:e1:a9:
                    6a:c8:66:5f:7e:06:e9:0d:9e:09:36:b7:e3:40:81:
                    6b:82:94:43:7c:1b:0e:47:09:56:9f:5c:34:4b:21:
                    2d:dc:78:e4:62:a0:23:5d:d8:4a:1c:26:47:df:64:
                    60:2c:8e:07:e8:ca:44:ba:04:39:1c:fc:75:3d:f9:
                    a4:1c:cb:3c:d8:6d:4a:ec:ce:dd:84:9f:09:3a:97:
                    51:62:93:b9:26:21:41:67:2f:39:cf:0b:a6:b5:a1:
                    a3:3c:c4:e3:66:f9:70:e6:42:3f:01:85:96:af:78:
                    b4:10:9b:b7:9a:6f:2f:b5:fc:63:50:bb:b1:10:35:
                    9e:0a:ac:ab:23:8a:ea:2b:87:26:f0:84:ad:2d:56:
                    78:5f:d1:69:1e:d8:86:0e:3c:d6:db:a0:c8:ca:72:
                    df:67:78:1b:46:f3:72:76:bd:3b:80:a9:ff:16:51:
                    db:ef:d0:7f:07:52:ab:b4:0f:f7:88:4f:7a:90:4e:
                    d0:ba:22:81:9b:32:cf:73:db:f8:bd:3e:51:2a:3c:
                    e3:44:91:c7:90:89:1b:28:2a:9b:b2:31:f7:5a:f6:
                    52:c7:61:20:79:7a:e8:2c:58:f6:50:5f:3f:f5:91:
                    80:d4:2c:e6:26:ef:41:d1:f5:af:17:4c:ca:44:70:
                    bb:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:C4:9C:07:F3:8D:60:9A:4D:E5:9F:52:31:E5:17:7E:05:55:25:2F
            X509v3 Authority Key Identifier:
                keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/HsScB_ONYJpN5Z9SMeUXfgVVJS8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.50.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:4d:18:09:5b:ee:f6:ff:37:6d:12:b2:99:7b:ce:52:ea:c7:
         8c:55:f2:29:f7:01:c6:90:ca:02:ee:a1:cb:fd:4c:31:ab:74:
         f3:3c:f4:a9:77:f7:00:72:eb:b6:c0:c5:93:8b:22:b5:c0:d0:
         ab:bc:4a:b5:96:53:c8:f7:75:d0:91:91:8c:91:bc:f7:f7:d4:
         e3:1a:d5:e4:02:ef:7d:be:03:c7:5b:fc:ff:d5:be:02:54:63:
         a1:9f:b1:19:6b:bc:fb:b5:43:0b:b2:35:ae:59:2c:cb:fd:b6:
         be:5b:5f:44:8f:91:02:fe:c4:39:6c:f1:61:77:54:62:3d:73:
         46:72:87:0c:81:5d:0f:34:79:40:8f:0c:23:50:5b:64:75:93:
         ee:75:e1:3b:56:70:90:dc:44:13:9b:f0:8d:9d:17:f9:63:28:
         ec:e2:31:f2:9e:aa:13:35:dc:f2:05:b4:4e:6a:13:b3:e4:1b:
         8f:97:6a:40:e0:29:81:60:73:1f:cc:f8:8a:54:6c:32:4f:aa:
         7b:00:a0:12:e3:cf:41:4b:e4:d1:94:a1:5f:3c:12:a5:b8:fb:
         a1:61:7c:66:c4:c4:49:c5:15:72:a0:c6:dd:23:fa:58:c6:6d:
         8a:13:46:b5:3b:24:0f:26:7b:e5:78:1f:e0:7b:a9:db:08:9d:
         44:e3:b1:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:24 2024 by rpki-client on console-ams.rpki-client.org