Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a11477-7d10-47e9-8b5c-7b7244e69a93/1/6kvfRWPJH_Wdn9UdQ6M1Aq8HIV4.roa
File:                     6kvfRWPJH_Wdn9UdQ6M1Aq8HIV4.roa (raw, json)
Hash identifier:          U0KM36dupjUt/Nt4GVIfzhbOG6r8AtuSjMZzd5PK+fc=
Subject key identifier:   EA:4B:DF:45:63:C9:1F:F5:9D:9F:D5:1D:43:A3:35:02:AF:07:21:5E
Certificate issuer:       /CN=1f773a137d5bfb5869f57dac7f359ec2818047a4
Certificate serial:       01837D8988B207DF847D1931C67C9E5909BB
Authority key identifier: 1F:77:3A:13:7D:5B:FB:58:69:F5:7D:AC:7F:35:9E:C2:81:80:47:A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H3c6E31b-1hp9X2sfzWewoGAR6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/a11477-7d10-47e9-8b5c-7b7244e69a93/1/6kvfRWPJH_Wdn9UdQ6M1Aq8HIV4.roa
Signing time:             Tue 27 Sep 2022 06:01:48 +0000
ROA not before:           Tue 27 Sep 2022 06:01:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     43260
IP address blocks:        146.19.128.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:7d:89:88:b2:07:df:84:7d:19:31:c6:7c:9e:59:09:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f773a137d5bfb5869f57dac7f359ec2818047a4
        Validity
            Not Before: Sep 27 06:01:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ea4bdf4563c91ff59d9fd51d43a33502af07215e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:22:51:37:d2:19:d0:40:21:54:3f:de:25:af:
                    e7:ae:70:ee:8e:28:59:3a:7b:a0:68:b3:99:37:a2:
                    aa:2e:8f:50:db:4f:e5:63:f5:2a:df:5b:88:7e:37:
                    14:2a:cd:c4:8f:3d:7d:13:8f:09:db:f1:fa:35:a9:
                    3c:0a:85:33:78:38:98:95:58:7f:b9:8f:d9:e1:a9:
                    e5:13:82:04:2b:26:c5:dc:1d:c1:5a:f3:6c:31:63:
                    10:e1:04:7a:13:cf:f8:0b:2b:6e:97:66:01:59:96:
                    f3:f2:b9:4b:10:ca:32:18:58:ac:be:05:d2:59:8e:
                    a6:04:ac:2a:3d:70:86:98:e7:07:26:4f:8f:04:ca:
                    02:2a:56:49:68:e3:a6:d1:a2:0c:c9:97:0d:18:83:
                    ed:b7:51:c3:77:7b:72:35:2b:bf:45:b7:dd:c7:fb:
                    75:5f:2e:28:33:b5:78:73:7e:db:63:85:17:ed:88:
                    97:4c:c3:bf:76:dc:00:53:01:55:07:f4:e6:ae:b0:
                    90:a6:7d:49:87:ef:b4:b4:ec:c5:06:fb:67:2d:08:
                    34:60:40:a9:22:07:3e:0e:03:48:1e:da:58:5a:4e:
                    b7:ee:82:77:03:28:a3:6b:73:67:3f:bb:5e:72:08:
                    df:54:28:07:c7:ac:d3:da:a7:a2:26:c6:86:7c:24:
                    ae:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:4B:DF:45:63:C9:1F:F5:9D:9F:D5:1D:43:A3:35:02:AF:07:21:5E
            X509v3 Authority Key Identifier:
                keyid:1F:77:3A:13:7D:5B:FB:58:69:F5:7D:AC:7F:35:9E:C2:81:80:47:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3c6E31b-1hp9X2sfzWewoGAR6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a11477-7d10-47e9-8b5c-7b7244e69a93/1/6kvfRWPJH_Wdn9UdQ6M1Aq8HIV4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a11477-7d10-47e9-8b5c-7b7244e69a93/1/H3c6E31b-1hp9X2sfzWewoGAR6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:c3:c8:8f:15:42:8f:21:57:e0:00:14:ee:87:a9:32:4e:93:
         56:a1:6f:11:c2:ea:40:ae:a2:1c:45:91:79:1c:25:b6:2b:23:
         7d:10:26:f6:17:e0:7a:66:74:d6:1d:4c:7f:91:c4:50:81:bb:
         c8:b8:8c:24:8b:52:a2:28:12:34:bd:e5:88:94:e3:76:e7:7a:
         40:7d:c9:fc:41:cf:28:22:43:41:f7:e1:d5:3f:e7:46:3f:0f:
         1c:67:2d:b8:c7:26:e4:b6:9e:ec:c8:af:d0:54:cc:d3:4f:00:
         59:2d:b5:68:32:85:a8:36:c7:26:db:bc:9d:c6:f6:55:49:fc:
         72:ed:b0:07:45:26:e8:f2:10:16:26:8d:24:4d:6f:df:7b:ea:
         97:24:9b:22:c8:77:a8:3a:ea:5c:21:d4:f4:53:88:91:86:ff:
         53:df:85:7f:f0:fe:a0:24:eb:d7:38:7f:44:ec:21:82:ca:fc:
         ba:79:37:0b:1c:fb:08:62:05:36:0c:2c:f0:3b:27:3f:a2:1f:
         7b:0e:ac:6f:d8:9f:fe:15:36:98:a3:60:11:d1:5e:c2:bd:3f:
         a7:8f:83:9a:3b:bd:8c:97:03:54:4f:0a:e6:af:84:d8:2b:fd:
         24:d3:f5:a6:ed:19:10:01:1f:a7:81:2b:04:bf:07:39:25:b9:
         97:c1:da:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:18 2023 by rpki-client on console-ams.rpki-client.org