Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/2Pt_o6sLNiH88iJ6v7SFWIxllkU.roa
File:                     2Pt_o6sLNiH88iJ6v7SFWIxllkU.roa (raw, json)
Hash identifier:          K5qF+v1Q3iGML21eWVrPnCr4LSrsmq1IhVP7Wg0YjeU=
Subject key identifier:   D8:FB:7F:A3:AB:0B:36:21:FC:F2:22:7A:BF:B4:85:58:8C:65:96:45
Certificate issuer:       /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial:       014305CD
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/2Pt_o6sLNiH88iJ6v7SFWIxllkU.roa
Signing time:             Sat 01 Jan 2022 01:00:14 +0000
ROA not before:           Sat 01 Jan 2022 01:00:14 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211086
IP address blocks:        2a0c:b641:50::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21169613 (0x14305cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05976801363d375786152e4d061e75c8beb35058
        Validity
            Not Before: Jan  1 01:00:14 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d8fb7fa3ab0b3621fcf2227abfb485588c659645
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4f:4f:ad:48:14:ea:38:a0:4f:8d:74:11:18:
                    18:22:69:8c:eb:7d:d2:e0:73:e8:95:a0:44:f6:cc:
                    8e:73:29:69:45:06:43:83:d2:7b:df:17:cf:eb:57:
                    51:56:43:59:6e:d1:42:26:51:7e:44:cc:02:ba:e8:
                    a8:69:44:b9:f9:d1:d9:dd:0d:63:4e:e1:54:a2:3e:
                    f0:a2:e9:28:a8:1e:a4:66:ad:b3:d3:36:75:f5:8b:
                    33:94:4a:59:d5:58:bf:0a:a7:c9:39:69:15:00:32:
                    37:92:8a:06:9d:06:de:c5:14:0e:5f:d5:96:d5:ab:
                    4e:be:05:d4:e8:2f:c4:1b:f4:69:92:0d:c8:e3:1e:
                    88:ac:b3:6a:17:e8:ba:a8:27:b7:c1:48:02:cc:35:
                    f4:68:6d:4c:26:f4:5a:ee:45:78:9a:dd:a7:52:19:
                    da:31:0a:64:de:9f:1f:d7:02:cb:a3:12:46:aa:99:
                    99:f1:28:64:a1:0a:d7:8f:2a:38:66:3c:ee:69:e2:
                    db:e9:e4:f3:cd:f7:c3:8e:68:42:8f:76:79:00:11:
                    d3:56:49:f5:73:20:6a:00:99:4a:17:73:c2:01:e4:
                    72:55:4c:d1:87:52:bc:c6:5e:e9:c4:76:a5:17:4c:
                    f6:f0:a8:bc:17:66:1f:2b:46:7a:93:45:2c:e3:37:
                    15:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:FB:7F:A3:AB:0B:36:21:FC:F2:22:7A:BF:B4:85:58:8C:65:96:45
            X509v3 Authority Key Identifier:
                keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/2Pt_o6sLNiH88iJ6v7SFWIxllkU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:b641:50::/44

    Signature Algorithm: sha256WithRSAEncryption
         4b:02:ac:04:1c:dd:3f:35:2e:ea:c0:d0:e0:84:86:3d:98:f7:
         6e:08:cb:71:c3:fe:af:77:f6:30:0d:1c:de:82:11:ae:f8:76:
         98:27:f2:c6:ea:d4:3d:5c:ca:a6:ec:0b:21:9c:d2:ed:57:e1:
         66:cc:5a:1c:86:62:44:b6:e8:97:66:b1:93:27:16:43:43:89:
         7b:16:92:99:65:0d:a6:04:b0:ec:f6:2f:e1:e4:de:d6:f7:37:
         e0:97:c1:e8:b2:8f:53:90:dc:19:d2:4e:13:43:8d:81:37:68:
         c7:bd:b0:54:e7:15:b5:aa:22:f2:45:93:dc:67:3a:e7:a9:ee:
         dc:4b:e1:ac:ed:75:57:26:9d:7f:a6:b3:05:08:a9:98:da:81:
         ec:61:73:d8:87:7d:c1:67:a4:ab:4f:41:43:58:07:f3:dd:9f:
         95:0c:23:b7:f8:fb:f2:3c:f1:c2:e2:97:27:a4:ee:ef:3c:88:
         64:ce:66:e9:27:83:e8:34:ca:1b:20:c1:9b:2d:d7:fe:6f:76:
         2a:a7:8e:91:cc:50:85:fd:b9:fd:73:4a:22:57:8e:31:96:10:
         01:40:9f:75:b4:a5:61:49:0f:3a:a7:04:be:40:87:ef:91:c2:
         c0:f1:71:1d:95:ba:f0:11:bd:95:c5:b0:51:05:26:7b:24:16:
         04:cb:ca:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:15 2024 by rpki-client on console-fra.rpki-client.org