Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/eUkFRkb4WaAN7aiSheR12PmrYzg.roa
File:                     eUkFRkb4WaAN7aiSheR12PmrYzg.roa (raw, json)
Hash identifier:          1SY11amZ0Q/JFJ+tNZUL/penM9gro09l5mxhOet8b2A=
Subject key identifier:   79:49:05:46:46:F8:59:A0:0D:ED:A8:92:85:E4:75:D8:F9:AB:63:38
Certificate issuer:       /CN=4ff86cf33e15ea4089da29e2a7881d746df826ef
Certificate serial:       E91253
Authority key identifier: 4F:F8:6C:F3:3E:15:EA:40:89:DA:29:E2:A7:88:1D:74:6D:F8:26:EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T_hs8z4V6kCJ2inip4gddG34Ju8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/eUkFRkb4WaAN7aiSheR12PmrYzg.roa
Signing time:             Sat 01 Jan 2022 11:04:30 +0000
ROA not before:           Sat 01 Jan 2022 11:04:30 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     48314
IP address blocks:        193.29.56.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15274579 (0xe91253)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ff86cf33e15ea4089da29e2a7881d746df826ef
        Validity
            Not Before: Jan  1 11:04:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7949054646f859a00deda89285e475d8f9ab6338
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e2:ee:95:01:09:67:43:e6:ef:a7:40:0b:4d:
                    18:24:e7:3f:36:ba:79:fb:60:6a:84:1f:9d:c8:59:
                    13:51:0b:3b:c2:ac:f1:ce:99:a1:51:e4:ab:9b:a4:
                    8a:c1:f2:a1:78:b6:d3:fb:67:a4:80:81:39:67:c2:
                    2c:5d:85:2c:8e:6b:de:ff:36:aa:ec:10:f2:b1:46:
                    4a:e3:b8:cb:77:4d:11:bf:e4:8c:cc:d8:ce:1f:a4:
                    78:08:a3:b9:eb:41:73:01:4f:1c:51:34:a6:f0:25:
                    4c:0d:38:bc:82:63:d5:93:6f:c6:e5:e9:c5:2a:8e:
                    4b:fd:84:45:6d:d7:40:cf:8f:a7:37:9b:98:d0:18:
                    62:40:71:52:1b:21:0d:cf:44:09:e6:13:b3:48:85:
                    3c:55:27:5a:70:a8:cf:9d:b3:7d:18:1d:b6:fb:14:
                    43:98:6a:e0:50:d7:d7:53:fc:c6:37:77:73:a2:cb:
                    18:bf:07:a8:c7:08:14:d9:c5:0e:b6:3f:6c:62:01:
                    92:bb:a0:18:6b:b0:81:cc:31:04:5b:8d:92:fe:37:
                    16:a7:80:eb:db:71:e2:1d:5d:56:63:d0:e5:1f:06:
                    59:b9:9e:43:ed:c3:82:2e:d5:a3:cf:61:8a:6c:c0:
                    7f:86:d3:b5:f0:2e:63:e1:93:86:c3:b5:8a:9d:ce:
                    a2:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:49:05:46:46:F8:59:A0:0D:ED:A8:92:85:E4:75:D8:F9:AB:63:38
            X509v3 Authority Key Identifier:
                keyid:4F:F8:6C:F3:3E:15:EA:40:89:DA:29:E2:A7:88:1D:74:6D:F8:26:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T_hs8z4V6kCJ2inip4gddG34Ju8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/eUkFRkb4WaAN7aiSheR12PmrYzg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.29.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:df:5f:d8:55:25:fc:14:02:a1:b3:a6:c0:b6:85:86:48:9b:
         bb:8c:8f:03:5b:d1:a1:9f:ed:8d:ed:bb:79:ec:0e:62:4b:0f:
         7c:38:c2:d3:8f:f6:fc:f6:d1:c9:cc:c8:ab:5d:00:b4:88:7e:
         ed:06:d1:12:09:eb:fa:16:d4:44:7c:0e:f4:df:95:86:79:8a:
         a1:e6:1b:36:e8:b7:fc:19:c2:aa:5f:c1:a2:11:5a:7c:c4:1a:
         4f:5a:e6:3d:f3:a0:11:41:a3:28:34:ed:59:86:37:db:d4:74:
         87:44:fa:af:7b:ec:d4:f8:42:ae:be:07:4b:51:8d:0f:2f:b2:
         1b:47:78:69:b0:9d:47:ea:7d:a3:3a:80:31:7a:f6:36:7a:ad:
         1d:52:94:63:5a:46:8c:0f:de:0b:7b:03:19:e2:6d:f9:d8:bd:
         46:b4:f4:82:eb:10:97:7c:d9:40:fc:46:11:09:53:16:58:99:
         78:28:0c:80:b8:6a:8e:bd:02:b8:05:dd:cf:aa:ff:f6:93:dc:
         51:56:63:9b:5f:8b:b2:99:d2:fd:4f:a1:70:ad:ec:a3:e2:15:
         64:e2:1d:ab:ff:f5:b6:47:17:5e:4d:c2:d4:aa:ea:76:76:d6:
         d1:15:31:0e:09:36:2e:77:db:d0:4c:56:32:42:dc:4c:a6:e5:
         e7:00:8a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:46 2024 by rpki-client on console-ams.rpki-client.org