Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ET_L4udxWoAsKBVcsa0o3v0fbAM.roa
File:                     ET_L4udxWoAsKBVcsa0o3v0fbAM.roa (raw, json)
Hash identifier:          pZeeLqW2L/AqOYCDSQa7SwQOoXPXE8bwai2Snu5LdHw=
Subject key identifier:   11:3F:CB:E2:E7:71:5A:80:2C:28:15:5C:B1:AD:28:DE:FD:1F:6C:03
Certificate issuer:       /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial:       0E611E0A
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ET_L4udxWoAsKBVcsa0o3v0fbAM.roa
Signing time:             Tue 18 Jan 2022 23:10:27 +0000
ROA not before:           Tue 18 Jan 2022 23:10:27 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     46844
IP address blocks:        194.87.55.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 241245706 (0xe611e0a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
        Validity
            Not Before: Jan 18 23:10:27 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=113fcbe2e7715a802c28155cb1ad28defd1f6c03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:24:2d:f7:c7:72:b4:8a:a1:13:1b:5c:f3:63:
                    eb:c0:cf:3e:45:7c:7d:4c:ea:a5:65:2d:1f:27:2d:
                    be:07:4c:ab:fb:ae:02:b5:9d:67:ff:ba:04:d7:1b:
                    93:60:15:4e:e8:58:89:be:39:15:d7:60:f2:a7:1b:
                    84:3c:ba:fe:3c:2a:37:62:5e:cd:2f:bf:3f:14:e1:
                    07:f4:f8:b7:b8:d9:d2:78:37:72:48:e9:24:2c:18:
                    bf:3d:f7:02:b0:47:7d:4c:53:13:e4:de:28:94:86:
                    3b:69:24:4d:f6:d0:d9:b4:1d:e0:1c:bb:1f:5d:71:
                    ba:7a:b4:0d:1a:ff:9b:62:65:6b:60:3f:55:dd:ed:
                    ce:43:a8:8d:70:90:71:6d:5c:dd:4a:9b:74:01:e1:
                    5c:58:45:12:46:ca:a4:16:cf:28:af:04:84:32:6b:
                    e5:32:9d:bf:e2:ac:50:5e:e1:c7:18:64:51:2e:a4:
                    d5:31:0d:84:8a:2b:bd:f9:5b:ce:69:13:44:61:c3:
                    6b:53:ab:b0:57:fa:36:ca:78:d3:40:60:d4:47:45:
                    55:3b:fd:80:29:80:97:76:82:7e:51:3f:d7:16:2d:
                    76:4a:7f:b3:90:a6:fb:ef:63:0e:6f:33:32:4e:2b:
                    bc:1e:e2:3e:9c:4c:fc:8f:0d:5b:16:be:b5:8a:ef:
                    bc:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:3F:CB:E2:E7:71:5A:80:2C:28:15:5C:B1:AD:28:DE:FD:1F:6C:03
            X509v3 Authority Key Identifier:
                keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ET_L4udxWoAsKBVcsa0o3v0fbAM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.87.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:07:0e:3c:d1:a8:65:b7:43:1d:ed:a8:7d:f7:90:30:70:90:
         4a:53:61:33:4a:4d:aa:de:01:60:79:2e:b8:34:39:9c:76:9f:
         3b:42:c6:27:83:33:b1:d8:47:74:ca:23:d1:f2:a1:2f:82:2b:
         67:ac:7e:93:6e:d2:72:f6:59:bd:7f:4b:cc:92:8e:15:97:b6:
         c2:41:44:84:43:2d:d3:64:b0:31:79:f4:f4:60:54:c5:b6:a7:
         2b:68:a5:77:7e:85:ad:7f:d6:ef:ee:75:64:d7:14:78:74:96:
         d8:6f:d3:b4:f7:23:1d:dd:e3:b9:10:4e:45:0a:7d:68:c8:f5:
         4b:ae:f5:12:eb:57:31:e3:62:f4:46:ae:4c:cb:55:78:f1:aa:
         80:61:72:0d:2e:70:67:b0:48:55:90:da:ec:c2:e9:c5:dc:44:
         a1:f0:f6:d3:a0:19:c0:f8:3b:16:b8:c0:54:c2:12:9e:ec:9c:
         23:c0:1f:42:a9:a5:3e:23:c9:72:29:42:e9:ed:0e:f7:67:4c:
         5a:09:58:05:c9:37:ea:b2:29:7f:87:d6:ad:f0:82:03:5d:bc:
         5c:c7:cd:bc:05:3a:69:0f:80:e8:4f:40:16:fb:86:ad:f9:91:
         86:04:6e:c6:c6:02:dc:c4:8a:51:a8:79:50:f1:4c:11:42:d9:
         51:d5:34:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:10 2024 by rpki-client on console-fra.rpki-client.org