Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/GWUhPI3jS6ic3t5inb9tMu3Y-Yo.roa
File:                     GWUhPI3jS6ic3t5inb9tMu3Y-Yo.roa (raw, json)
Hash identifier:          rqWfX+O7akJRJ2qemvsbB2unW6zHCe0ZRBxWnKJqnlw=
Subject key identifier:   19:65:21:3C:8D:E3:4B:A8:9C:DE:DE:62:9D:BF:6D:32:ED:D8:F9:8A
Certificate issuer:       /CN=731d9ad404ecdafa70ea9a4c9d10b9801829ea1f
Certificate serial:       0177572A
Authority key identifier: 73:1D:9A:D4:04:EC:DA:FA:70:EA:9A:4C:9D:10:B9:80:18:29:EA:1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/GWUhPI3jS6ic3t5inb9tMu3Y-Yo.roa
Signing time:             Sat 01 Jan 2022 01:54:39 +0000
ROA not before:           Sat 01 Jan 2022 01:54:39 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     24631
IP address blocks:        46.54.139.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24598314 (0x177572a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=731d9ad404ecdafa70ea9a4c9d10b9801829ea1f
        Validity
            Not Before: Jan  1 01:54:39 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1965213c8de34ba89cdede629dbf6d32edd8f98a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a9:ce:29:f5:2c:62:8e:15:c7:90:e4:33:c1:
                    cf:3c:fa:93:c3:06:97:7e:cb:45:68:9c:f4:23:f0:
                    a8:52:73:4c:0a:16:66:0c:3b:64:89:3e:95:c5:98:
                    73:7d:3b:8a:12:e1:46:aa:6c:89:24:54:68:ba:28:
                    14:a5:ba:2a:54:6b:7a:1c:f9:f1:ac:1f:52:dd:3f:
                    44:41:5a:2c:24:f2:5b:28:ac:fa:e0:41:e9:b2:98:
                    61:88:2e:d7:c0:7b:f6:b5:31:52:64:7e:54:b0:1c:
                    7b:29:ec:8b:89:2c:cb:47:93:73:ce:b6:97:df:6f:
                    46:ac:30:00:6f:a0:12:ff:d8:0e:9d:c5:96:3e:47:
                    12:78:ec:68:08:e4:87:40:9a:b2:70:7b:fd:4f:84:
                    78:2a:cb:6e:2b:a9:04:cf:3e:59:e8:c2:34:ec:75:
                    d2:52:2f:97:02:83:66:1e:76:c8:2e:31:51:e8:98:
                    7c:1f:58:c8:0b:d0:36:a2:a3:8d:94:48:57:0d:54:
                    1e:d6:47:17:27:94:bc:d2:62:1a:f6:3c:19:34:4d:
                    25:d1:f4:e2:01:b3:06:f7:4f:65:92:a0:c0:28:f9:
                    2b:44:78:0d:b8:6d:18:41:92:30:df:e8:23:c2:90:
                    67:a9:9b:b4:e3:39:19:06:92:ab:3f:4f:17:ba:68:
                    63:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:65:21:3C:8D:E3:4B:A8:9C:DE:DE:62:9D:BF:6D:32:ED:D8:F9:8A
            X509v3 Authority Key Identifier:
                keyid:73:1D:9A:D4:04:EC:DA:FA:70:EA:9A:4C:9D:10:B9:80:18:29:EA:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/GWUhPI3jS6ic3t5inb9tMu3Y-Yo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.54.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:2d:51:bb:ad:38:4b:26:84:b9:fb:79:5a:6c:e6:b6:ca:a6:
         7d:09:77:3e:95:44:19:b7:de:50:43:4e:13:ab:63:8a:cf:b4:
         9b:1e:35:36:82:b2:ec:45:fc:ab:e7:57:92:9b:7a:d0:03:fe:
         0b:e1:31:25:f0:3d:73:b5:b7:91:7b:3f:d7:67:ff:a1:b8:e5:
         24:0f:b0:b1:25:67:d6:bb:ca:bc:70:b5:11:ad:d1:57:c3:08:
         a8:29:be:67:d8:24:ed:83:65:e8:b1:7a:10:af:e2:31:21:20:
         86:bc:68:d0:2f:12:3b:74:38:cc:77:3f:24:81:c1:87:25:8f:
         97:0c:08:3b:90:a0:68:c8:9a:a9:6f:53:bc:f4:0b:e6:81:2a:
         93:df:17:e7:a0:55:a4:f8:03:cd:6d:27:8e:8d:ea:27:72:62:
         e6:ff:53:f4:fd:5a:d2:b6:ff:54:9c:ac:4d:66:62:19:c6:6a:
         de:61:fd:50:f1:e6:9a:35:de:05:10:71:90:fe:ad:7d:0c:20:
         02:b0:49:29:51:b0:62:39:8b:1e:79:a7:3e:13:b5:59:a9:e0:
         16:d3:88:55:06:f1:12:95:04:e3:55:de:dd:fa:d3:80:8a:67:
         95:95:86:3e:8e:1d:17:12:6e:79:04:dc:07:a7:18:87:68:81:
         4a:21:2d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:40 2024 by rpki-client on console-ams.rpki-client.org