Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6PgZM38N6HqF_GMZhsh6v0k9kqE.roa
File:                     6PgZM38N6HqF_GMZhsh6v0k9kqE.roa (raw, json)
Hash identifier:          +lsDgGS0SiIFQ2a5/cJd1iyux0oeraIlgXPkqwW8aTQ=
Subject key identifier:   E8:F8:19:33:7F:0D:E8:7A:85:FC:63:19:86:C8:7A:BF:49:3D:92:A1
Certificate issuer:       /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial:       48DB0E1A
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6PgZM38N6HqF_GMZhsh6v0k9kqE.roa
Signing time:             Mon 07 Feb 2022 08:20:16 +0000
ROA not before:           Mon 07 Feb 2022 08:20:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     35112
IP address blocks:        46.161.41.0/24 maxlen: 24
                          5.188.84.0/24 maxlen: 24
                          46.161.1.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1222315546 (0x48db0e1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
        Validity
            Not Before: Feb  7 08:20:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e8f819337f0de87a85fc631986c87abf493d92a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:08:ad:81:6f:57:24:60:7e:61:70:6c:08:f4:
                    3f:19:6f:4d:92:2f:37:07:00:c3:a8:f4:88:73:05:
                    37:ef:06:9d:03:9c:bb:63:89:8f:71:42:26:2e:f8:
                    b0:27:e1:9b:5a:51:70:f3:e7:be:1a:0e:10:4b:e2:
                    60:01:b9:cd:df:b1:5a:ec:e7:36:1a:9c:72:cb:9e:
                    42:49:b2:df:c9:df:26:77:12:aa:21:f6:42:c6:7c:
                    14:51:8f:ba:d8:1d:42:30:2d:05:ca:99:c4:30:ca:
                    58:9c:aa:6c:05:5a:c3:fc:20:5c:98:da:dc:ef:c1:
                    95:5b:46:f2:a2:53:3c:9d:96:14:1e:ca:7c:b8:2f:
                    90:99:20:bc:fc:d2:53:e0:b4:8c:0a:7e:da:ed:57:
                    00:73:94:3d:77:63:d8:f4:ba:11:74:19:27:c2:a1:
                    97:d1:1f:0c:6e:eb:bc:98:7e:7c:c2:fb:06:87:16:
                    f0:45:2d:15:5b:c5:dc:0c:39:dd:6c:cc:4b:b6:1f:
                    3e:54:05:ec:44:c3:d7:a8:a0:11:8e:9b:1b:25:02:
                    87:84:51:d6:17:4f:d1:6d:96:88:c1:56:ef:2b:0d:
                    ce:4d:37:e0:ff:6b:7d:06:ef:4c:24:5c:48:70:69:
                    c2:55:9f:29:44:38:74:a1:70:73:65:f3:ae:ff:73:
                    ea:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:F8:19:33:7F:0D:E8:7A:85:FC:63:19:86:C8:7A:BF:49:3D:92:A1
            X509v3 Authority Key Identifier:
                keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6PgZM38N6HqF_GMZhsh6v0k9kqE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.188.84.0/24
                  46.161.1.0/24
                  46.161.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:aa:4e:31:0b:2c:81:45:00:68:de:ef:ad:64:d0:44:29:43:
         28:68:a2:c5:61:8c:eb:a0:0e:ae:78:46:3e:a6:e3:10:0b:f9:
         a2:ac:d7:97:67:0f:4f:d0:20:59:70:e5:31:9a:0a:bb:a5:49:
         7f:a6:a3:c0:4d:e4:1d:c5:13:98:13:8c:bf:b4:91:c4:ed:b0:
         5d:bb:8f:36:53:b5:40:79:33:23:9e:b2:16:b2:07:18:82:a8:
         62:8e:56:03:49:d7:1a:81:1e:01:0c:13:1a:82:c5:e5:a2:a5:
         72:9e:9e:a3:6b:13:ec:a2:94:ad:71:19:9e:4b:40:67:ca:18:
         49:9c:01:52:41:c4:27:21:d5:d2:63:81:68:8e:dd:55:ec:35:
         70:d3:5a:f9:78:66:63:12:2e:b4:ee:e3:b4:81:18:17:cd:0e:
         63:58:56:a6:ac:87:17:a0:ce:1b:cb:23:ec:a0:28:af:49:f9:
         01:3b:db:00:86:9f:43:de:7d:15:7b:d7:d2:d1:f8:66:af:50:
         4a:87:eb:89:4f:81:9d:14:71:cb:ba:2c:68:4c:17:38:0d:53:
         eb:fe:b0:3e:88:34:77:dd:5f:38:2c:d5:99:37:07:82:55:41:
         62:c9:c5:61:04:49:9c:11:b0:81:a3:f7:cf:bd:8c:e7:ed:51:
         9d:de:c9:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:55 2024 by rpki-client on console-ams.rpki-client.org