Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS63023.roa
File:                     AS63023.roa (raw, json)
Hash identifier:          33xGX/8wR4VLy/Xahr0yvDpt+LB1biVMPfkwPJYEVhM=
Subject key identifier:   99:44:AC:15:B9:1C:AC:08:0C:09:CC:8A:64:63:D7:39:B9:4A:8E:15
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       41638436EE1C8F41670FE4163E2FB714A6EE6080
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS63023.roa
Signing time:             Tue 03 Jan 2023 02:07:09 +0000
ROA not before:           Tue 03 Jan 2023 02:02:09 +0000
ROA not after:            Tue 02 Jan 2024 02:07:09 +0000
asID:                     63023
IP address blocks:        185.147.35.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:63:84:36:ee:1c:8f:41:67:0f:e4:16:3e:2f:b7:14:a6:ee:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Jan  3 02:02:09 2023 GMT
            Not After : Jan  2 02:07:09 2024 GMT
        Subject: CN=9944AC15B91CAC080C09CC8A6463D739B94A8E15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:7d:2e:ee:63:ad:59:d8:62:d4:5c:38:9c:45:
                    c5:fc:55:da:ac:af:3e:93:24:f0:08:44:e7:ee:01:
                    9b:bf:ca:e1:42:f4:65:d2:c3:db:1a:f6:95:55:f8:
                    ab:8c:a2:91:7f:4a:36:ba:e2:0e:44:60:16:82:28:
                    e9:3c:54:b6:a8:90:77:86:04:bc:ef:53:85:8c:25:
                    19:fd:c3:27:05:b3:c4:14:e4:61:c3:f2:7a:dc:ad:
                    a0:83:c5:46:b3:1a:12:e7:c3:3b:7e:c9:0c:45:eb:
                    c9:63:b2:9f:05:28:80:4b:d2:2e:eb:72:90:13:75:
                    46:bf:18:9c:3b:7d:70:29:c8:05:66:be:0c:4f:3b:
                    1b:1f:d3:e8:24:f9:b3:a7:bb:8a:f6:db:25:c3:63:
                    dd:ee:c0:29:db:b6:84:e2:46:ed:42:59:28:67:d9:
                    2e:cf:45:23:96:1a:8c:86:5a:6b:54:f0:97:52:d8:
                    b0:43:44:58:e5:d0:0d:af:98:92:30:a5:9c:fb:c1:
                    b8:f6:d4:df:6a:21:b4:8f:a1:04:d1:c6:9c:f8:31:
                    f5:6c:31:13:88:a6:1c:ce:3a:9b:46:7b:85:03:1f:
                    01:d8:f4:2e:fb:6d:31:5d:b9:83:a0:88:c1:fb:eb:
                    d4:e3:4f:f2:61:6b:b1:80:6e:9c:96:9a:67:4e:1f:
                    6d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:44:AC:15:B9:1C:AC:08:0C:09:CC:8A:64:63:D7:39:B9:4A:8E:15
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS63023.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.147.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:e4:29:97:a9:63:51:7b:28:10:d9:a6:f7:0b:39:9c:ab:be:
         d0:ff:f2:87:90:7c:46:cb:fc:4b:39:1f:67:0b:4d:8f:78:b8:
         59:09:9d:54:2b:8f:f8:9e:8d:ab:42:aa:01:20:b9:fa:80:d5:
         b5:80:8a:d4:d9:19:54:84:00:15:5f:24:6e:a6:d8:ee:ee:20:
         57:16:78:eb:6a:a6:fc:6d:f6:b0:6b:81:2e:8a:fe:48:59:9c:
         9e:fd:d9:b6:c3:ef:3a:7c:75:a9:2c:53:f0:46:df:f3:2e:e5:
         3b:71:b5:c2:50:24:af:fc:bc:80:52:e7:2a:ee:b7:0c:b1:2c:
         da:39:4b:0a:8c:93:b7:e1:96:de:17:53:57:9e:51:c6:c3:4f:
         2d:31:fa:eb:0e:ab:03:fa:11:09:49:59:54:5b:b0:ed:7d:f6:
         e3:18:2d:54:81:94:d1:83:9f:b7:46:d6:fe:d4:c5:40:9c:06:
         8d:af:26:5c:ea:15:99:bf:9d:66:65:c8:80:df:8b:40:5a:00:
         28:d1:80:7a:05:f3:e5:3f:42:d2:88:5c:38:ae:84:4e:97:0b:
         61:f0:5a:72:5a:dc:61:e9:19:f1:de:bf:ea:02:29:c9:37:ad:
         dd:ba:b8:71:2d:3f:76:90:a2:8c:82:9c:a3:70:ee:67:b0:46:
         fe:27:6b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:41 2024 by rpki-client on console-ams.rpki-client.org