Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/e6k0EIVeTB9e9hyBg1U4-OZBOpA.roa
File:                     e6k0EIVeTB9e9hyBg1U4-OZBOpA.roa (raw, json)
Hash identifier:          lSY37fG0Pg1uwU0u+Vw3+yEPq8H9Nw4WXTGD9tuS35w=
Subject key identifier:   7B:A9:34:10:85:5E:4C:1F:5E:F6:1C:81:83:55:38:F8:E6:41:3A:90
Certificate issuer:       /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Certificate serial:       02BFFCCA
Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/e6k0EIVeTB9e9hyBg1U4-OZBOpA.roa
Signing time:             Wed 25 May 2022 12:04:15 +0000
ROA not before:           Wed 25 May 2022 12:04:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     64487
IP address blocks:        109.105.198.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46136522 (0x2bffcca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
        Validity
            Not Before: May 25 12:04:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7ba93410855e4c1f5ef61c81835538f8e6413a90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ad:39:a9:22:64:ba:38:1a:ab:73:31:6e:2a:
                    78:e1:77:91:42:9f:9f:49:e5:b3:db:96:23:d6:c2:
                    60:4c:54:6e:f8:47:c6:80:8b:7f:5e:52:8f:2c:e0:
                    71:9a:47:7d:7b:cf:a2:ab:67:c1:fd:2f:cd:e0:66:
                    bb:3f:22:c8:25:46:4e:1d:c4:5a:62:27:86:2c:9a:
                    3f:a9:25:fa:90:f4:f0:68:aa:d5:e9:1a:d4:f0:0f:
                    e4:74:79:9b:7b:41:45:d8:eb:a5:e4:91:52:31:18:
                    d7:29:13:23:ed:22:70:de:99:b5:99:7d:82:ad:79:
                    e0:26:76:45:da:e8:aa:57:85:67:8a:cc:2f:48:3b:
                    0f:38:02:89:56:19:24:f3:0f:ec:02:e9:6e:26:8d:
                    d0:94:e2:bd:51:4e:10:58:ef:ea:3f:af:f9:27:9c:
                    ea:49:07:93:f5:cb:96:a3:17:93:e4:2f:91:ee:9a:
                    0c:0c:06:d2:74:8e:9f:21:67:a5:1f:c9:21:5f:11:
                    5c:8f:b2:12:bb:59:3a:b2:32:f5:43:21:9b:4b:9e:
                    20:bc:4b:5b:69:00:62:0c:56:10:a4:e5:68:53:09:
                    75:30:7a:67:cd:5d:1b:52:9b:45:ee:a2:df:cf:53:
                    28:30:fe:00:5d:2f:43:4e:dc:17:f3:92:44:bd:57:
                    cb:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:A9:34:10:85:5E:4C:1F:5E:F6:1C:81:83:55:38:F8:E6:41:3A:90
            X509v3 Authority Key Identifier:
                keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/e6k0EIVeTB9e9hyBg1U4-OZBOpA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.105.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:d7:87:91:9b:b3:31:86:43:2f:f6:be:c0:32:ae:02:b0:53:
         b9:1b:3d:f6:25:4f:15:ec:cb:55:67:41:f1:58:25:e1:7e:91:
         8e:d1:ee:a2:eb:7d:c6:ac:81:da:88:d2:81:46:3e:f3:e2:b8:
         fc:8d:81:47:a5:4d:10:53:39:c4:95:33:2a:e4:82:17:4b:31:
         6b:60:10:ea:7a:1d:d9:81:b2:69:a6:7c:6d:a5:9a:09:e9:24:
         48:df:88:2e:ef:c3:98:25:db:84:00:af:d4:e2:9e:09:2f:d9:
         d4:14:39:5c:3c:ad:9d:fa:0d:cb:d0:27:b7:6e:2c:d6:77:16:
         11:8c:83:42:17:d4:2d:98:93:9d:99:39:44:4d:44:34:ee:45:
         65:81:83:2c:63:6e:60:b0:80:22:b3:ca:6b:c8:93:12:c1:54:
         cb:c7:9a:56:b6:d7:c5:b4:35:1d:f3:cc:89:8b:c9:37:52:3c:
         21:a6:bf:f9:cf:51:16:0f:25:df:56:50:b2:9d:8f:c3:cb:da:
         bc:63:11:3c:8f:c5:dd:5f:c8:1d:48:24:5c:a9:0d:c2:89:fb:
         6f:a9:c0:42:8a:ba:8e:31:fd:13:5c:14:ef:17:0d:55:52:81:
         b4:52:22:7b:b1:df:20:36:41:51:2d:ad:c1:46:d4:f5:2f:e8:
         d6:4f:74:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:28 2024 by rpki-client on console-ams.rpki-client.org