Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Ix0m2BiBpiKk_SjpzY0Y-U-9WN8.roa
File:                     Ix0m2BiBpiKk_SjpzY0Y-U-9WN8.roa (raw, json)
Hash identifier:          D9vGwuMdi+zwWYNyUnfrxXnmsrxFbubvBHrZBkqrfH4=
Subject key identifier:   23:1D:26:D8:18:81:A6:22:A4:FD:28:E9:CD:8D:18:F9:4F:BD:58:DF
Certificate issuer:       /CN=63d92b8256159894d2b9b25f4d85986c172723c3
Certificate serial:       06E11E
Authority key identifier: 63:D9:2B:82:56:15:98:94:D2:B9:B2:5F:4D:85:98:6C:17:27:23:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y9krglYVmJTSubJfTYWYbBcnI8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Ix0m2BiBpiKk_SjpzY0Y-U-9WN8.roa
Signing time:             Thu 10 Feb 2022 15:58:18 +0000
ROA not before:           Thu 10 Feb 2022 15:58:18 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     16509
IP address blocks:        81.20.41.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 450846 (0x6e11e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63d92b8256159894d2b9b25f4d85986c172723c3
        Validity
            Not Before: Feb 10 15:58:18 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=231d26d81881a622a4fd28e9cd8d18f94fbd58df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:3b:70:38:bc:de:6c:ec:f0:d0:01:50:0a:df:
                    53:46:29:37:f6:f8:49:9e:f4:29:cd:df:a2:aa:d9:
                    64:07:e2:e0:0c:d0:b8:0f:3d:81:30:63:1a:4d:b5:
                    0b:a7:50:c9:ed:78:d3:59:45:99:a0:50:2b:5b:03:
                    3a:61:0a:da:8f:a4:69:77:81:a6:cc:65:4f:52:c4:
                    c4:4f:29:70:a5:21:92:de:70:1c:bd:ad:12:c2:5c:
                    22:5c:28:9c:b9:a7:a4:a9:e8:ae:6a:57:67:29:fd:
                    cd:f0:17:c1:81:54:01:9e:21:f2:a1:96:f2:58:11:
                    52:ab:be:26:e7:30:6c:7a:e5:e2:bf:5f:4f:47:63:
                    70:cb:dc:f2:56:cc:4c:c0:27:f9:ca:3d:42:60:5e:
                    1b:4e:e1:eb:0f:ad:59:c6:6a:06:f0:45:19:6e:12:
                    54:02:b6:dd:14:bf:3c:d2:25:f5:67:83:91:cd:fc:
                    de:1b:a8:2f:bf:b6:cd:12:57:4b:f1:76:4b:20:2d:
                    35:cd:c0:82:56:4d:3d:79:21:94:f1:2a:0d:58:b1:
                    31:11:40:11:69:0f:e1:2d:4e:9e:8c:ed:47:e5:d1:
                    92:22:a0:5b:7e:2f:00:ee:24:ce:f6:8e:b6:dd:25:
                    b3:f3:de:1c:9b:3b:68:d6:44:e8:3d:dd:58:55:f3:
                    d6:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:1D:26:D8:18:81:A6:22:A4:FD:28:E9:CD:8D:18:F9:4F:BD:58:DF
            X509v3 Authority Key Identifier:
                keyid:63:D9:2B:82:56:15:98:94:D2:B9:B2:5F:4D:85:98:6C:17:27:23:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y9krglYVmJTSubJfTYWYbBcnI8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Ix0m2BiBpiKk_SjpzY0Y-U-9WN8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.20.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:e0:85:da:8d:2c:1a:22:fc:9e:9c:b6:53:11:65:c2:ca:78:
         5b:52:e6:95:dd:74:1d:71:41:58:e3:62:83:16:2e:3b:27:42:
         32:14:46:5e:1a:a5:38:e6:34:ab:d3:06:c0:6a:f7:28:86:69:
         89:8a:5f:ce:6b:e8:e2:c8:b0:ca:0e:83:8c:8e:3a:91:24:dd:
         ea:0c:44:b1:d1:2c:f3:1f:0b:fe:75:54:39:10:79:db:bd:2b:
         19:7d:e1:ee:f3:f5:04:7d:2d:7a:10:56:66:0b:13:ac:49:a7:
         da:2c:62:2e:2c:ac:9e:9e:08:ab:2b:00:f0:2f:70:53:60:6d:
         d0:2f:21:6a:00:c9:94:fa:22:f6:3e:85:7e:f4:d6:b1:77:12:
         c5:3a:2a:26:00:5a:54:a9:77:c0:5f:98:97:0d:42:63:79:88:
         0a:d2:38:39:f0:4f:dd:df:8b:73:cc:97:8f:2c:8b:60:ec:95:
         3f:5d:a8:0c:38:d7:86:8c:3b:19:a4:77:fa:9b:30:c2:4e:f3:
         27:5e:61:ed:a5:f3:cc:bd:9b:c6:a5:40:93:e4:b8:96:92:38:
         1a:40:4c:8f:ac:60:72:c4:9b:e9:4b:65:71:ff:d6:63:ba:46:
         80:9b:a3:0f:00:83:ba:43:49:c5:56:0c:19:9c:ce:4d:82:c2:
         ac:85:b2:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:26 2024 by rpki-client on console-fra.rpki-client.org