Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/41c79d-592b-44ad-8693-f2e058957bc9/1/3Bu6kMzaBVbueOID4Oh3ONG63Yo.roa
File:                     3Bu6kMzaBVbueOID4Oh3ONG63Yo.roa (raw, json)
Hash identifier:          LBTNLNLZrLrRQP++ZJCWXf8GRP7/nwE9yNebmOmXlVs=
Subject key identifier:   DC:1B:BA:90:CC:DA:05:56:EE:78:E2:03:E0:E8:77:38:D1:BA:DD:8A
Certificate issuer:       /CN=48afa1174b0eeea28e7031f017a93ebe5de428e4
Certificate serial:       163EA2C1
Authority key identifier: 48:AF:A1:17:4B:0E:EE:A2:8E:70:31:F0:17:A9:3E:BE:5D:E4:28:E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/41c79d-592b-44ad-8693-f2e058957bc9/1/3Bu6kMzaBVbueOID4Oh3ONG63Yo.roa
Signing time:             Sat 01 Jan 2022 06:58:51 +0000
ROA not before:           Sat 01 Jan 2022 06:58:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200981
IP address blocks:        148.64.57.0/24 maxlen: 24
                          148.64.56.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 373203649 (0x163ea2c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48afa1174b0eeea28e7031f017a93ebe5de428e4
        Validity
            Not Before: Jan  1 06:58:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=dc1bba90ccda0556ee78e203e0e87738d1badd8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1b:e4:3c:0a:54:e4:3a:01:8a:59:00:c5:66:
                    c2:b8:ab:48:8e:dd:69:01:ff:80:db:da:7e:d7:11:
                    00:0b:ab:61:2d:bd:ae:12:6f:10:82:c8:00:38:be:
                    52:d6:12:3a:2b:fd:d2:43:96:f9:b2:9c:2b:24:63:
                    2c:ea:e2:2f:db:6a:79:d1:8f:36:87:b9:e6:e8:3b:
                    50:ba:9a:cf:f7:3f:83:29:33:f9:9e:7a:1a:28:df:
                    c8:15:97:cd:c8:1f:41:ed:4a:58:fa:f1:4c:d2:aa:
                    6f:ea:13:a6:0d:20:dc:d0:a7:18:d7:f5:52:e3:86:
                    cc:eb:dc:8f:dc:ae:1b:77:f9:6c:03:8e:06:da:f9:
                    a4:f9:1f:ee:7f:da:7a:7a:55:a0:eb:d5:91:0a:eb:
                    ab:3b:67:6e:87:49:21:59:23:46:03:c9:e4:77:f2:
                    fa:63:c5:dc:cc:23:0f:7b:63:1b:7f:23:48:0d:a9:
                    32:c3:8a:0d:6a:67:ed:1c:db:63:f4:d9:d6:df:d6:
                    5f:af:95:a9:a2:ed:69:15:82:a6:00:0b:d1:39:15:
                    8c:9d:22:a6:03:69:54:06:84:1a:2c:00:04:07:eb:
                    4b:a3:29:cd:4b:7e:92:5d:f8:5b:0c:fb:e2:98:92:
                    fa:e6:7c:60:02:4a:5f:19:b1:2b:f3:ff:23:7d:63:
                    79:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:1B:BA:90:CC:DA:05:56:EE:78:E2:03:E0:E8:77:38:D1:BA:DD:8A
            X509v3 Authority Key Identifier:
                keyid:48:AF:A1:17:4B:0E:EE:A2:8E:70:31:F0:17:A9:3E:BE:5D:E4:28:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/41c79d-592b-44ad-8693-f2e058957bc9/1/3Bu6kMzaBVbueOID4Oh3ONG63Yo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/41c79d-592b-44ad-8693-f2e058957bc9/1/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.64.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ad:94:bb:4c:0e:ce:fe:80:f2:83:2c:90:11:86:5a:88:fb:73:
         8a:4d:46:4c:2e:16:e7:5e:f0:dd:e9:04:b5:0e:55:06:f1:2e:
         8a:96:ad:52:b0:08:56:5e:9d:c1:59:03:18:7e:2a:4f:e7:89:
         f6:28:40:5e:d3:98:ba:bd:5a:70:85:0b:f3:4f:02:e0:24:77:
         7d:af:82:fa:06:b0:14:83:52:50:c0:01:26:42:33:7b:72:2b:
         e6:15:23:0e:8f:93:1c:fa:5e:36:6a:6a:fd:c3:2f:45:e6:68:
         a0:1a:38:98:40:d9:2f:42:26:9c:1f:fc:50:2f:5f:3e:79:8c:
         92:86:56:ab:0c:c2:6e:20:b3:e8:f7:60:e3:cd:d5:9c:98:1f:
         4a:45:3e:cd:cb:8c:64:5a:37:f7:d6:36:cd:5b:ba:5b:fa:7a:
         27:eb:4f:14:b3:e2:28:37:27:f8:6c:c0:1b:ad:db:2b:66:e3:
         d8:03:c3:59:d6:e0:6a:ec:ec:e2:95:39:58:6b:55:ee:8c:e4:
         7a:91:34:c3:94:7b:bc:b7:7e:a1:69:1a:2f:17:ff:af:ad:10:
         d1:ab:3e:ef:c5:8b:57:28:11:aa:01:e8:87:9d:46:73:94:67:
         b3:49:7b:9c:cc:22:93:d9:b2:ae:f7:26:f5:2d:1d:48:31:26:
         23:1b:a2:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:53 2024 by rpki-client on console-fra.rpki-client.org