Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/eb0792-843a-46b6-b0da-f468b8c4651a/1/bsH24l2UU6R7WpxAJZlq_zsaZ6Q.roa
File:                     bsH24l2UU6R7WpxAJZlq_zsaZ6Q.roa (raw, json)
Hash identifier:          KXl37bAUrqvwsv5nypc7PkYRQqXjwXpvHa2vzbrsSIA=
Subject key identifier:   6E:C1:F6:E2:5D:94:53:A4:7B:5A:9C:40:25:99:6A:FF:3B:1A:67:A4
Certificate issuer:       /CN=e8477159d65b22568098b95952487300771b3ce5
Certificate serial:       E17F53
Authority key identifier: E8:47:71:59:D6:5B:22:56:80:98:B9:59:52:48:73:00:77:1B:3C:E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6EdxWdZbIlaAmLlZUkhzAHcbPOU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/eb0792-843a-46b6-b0da-f468b8c4651a/1/bsH24l2UU6R7WpxAJZlq_zsaZ6Q.roa
Signing time:             Mon 06 Jun 2022 10:30:20 +0000
ROA not before:           Mon 06 Jun 2022 10:30:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208171
IP address blocks:        2a12:8d40:1024::/48 maxlen: 48
                          2a12:8d40:2022::/48 maxlen: 48
                          2a12:8d40:2048::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14778195 (0xe17f53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8477159d65b22568098b95952487300771b3ce5
        Validity
            Not Before: Jun  6 10:30:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6ec1f6e25d9453a47b5a9c4025996aff3b1a67a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:97:12:df:e6:40:cd:fa:a7:94:65:3c:e1:84:
                    db:0d:1b:1d:c5:c6:53:0d:f8:d5:59:0f:98:61:b3:
                    7e:17:db:63:0f:1c:4f:7a:ae:72:17:b2:87:7a:37:
                    79:93:9f:e6:47:19:95:22:dd:38:8c:43:d7:6c:6f:
                    56:a2:37:42:44:c7:2e:f3:21:66:36:65:f6:5a:3c:
                    1d:a3:e4:5f:d4:6e:7d:1c:86:5b:50:c5:f7:b9:ac:
                    33:a9:b1:d5:d5:ab:d4:75:be:af:df:74:50:50:0e:
                    56:f4:ae:bc:3f:72:2e:09:6f:af:ba:d2:b8:31:84:
                    17:4f:3c:c5:b0:5e:b0:a5:66:93:c2:9f:86:ac:57:
                    d5:f0:df:cf:d3:62:59:40:99:3f:6a:26:20:55:1f:
                    bf:4b:60:57:56:9f:12:6b:9e:2e:71:40:5a:15:86:
                    46:15:cf:bc:75:54:9a:dd:71:76:52:c5:8a:33:bb:
                    a5:41:13:3e:5c:66:11:bb:52:90:4d:8d:c4:bb:41:
                    21:e8:7f:ad:56:3c:05:6e:3d:c2:e9:dd:a0:13:ed:
                    6a:1b:3b:9f:50:e3:e7:7b:6f:f2:23:ac:07:3c:80:
                    2a:4a:ee:a2:a6:5a:30:11:36:e7:c0:7d:5a:66:61:
                    57:8e:8e:a9:48:8c:e5:84:5b:bc:03:36:f1:13:83:
                    d7:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:C1:F6:E2:5D:94:53:A4:7B:5A:9C:40:25:99:6A:FF:3B:1A:67:A4
            X509v3 Authority Key Identifier:
                keyid:E8:47:71:59:D6:5B:22:56:80:98:B9:59:52:48:73:00:77:1B:3C:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EdxWdZbIlaAmLlZUkhzAHcbPOU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/eb0792-843a-46b6-b0da-f468b8c4651a/1/bsH24l2UU6R7WpxAJZlq_zsaZ6Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/eb0792-843a-46b6-b0da-f468b8c4651a/1/6EdxWdZbIlaAmLlZUkhzAHcbPOU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:8d40:1024::/48
                  2a12:8d40:2022::/48
                  2a12:8d40:2048::/48

    Signature Algorithm: sha256WithRSAEncryption
         69:c7:64:6d:db:d4:1f:b1:27:6c:36:93:25:40:ee:7e:89:10:
         11:ef:58:a8:27:26:b9:25:00:48:f2:72:39:a7:34:8f:66:21:
         92:2a:c3:4d:f1:07:98:58:61:65:2c:43:08:77:11:24:24:4c:
         e3:b9:bb:74:dd:24:af:14:d8:56:66:a1:09:f6:e2:cd:34:9a:
         30:c6:d0:0e:ab:4d:0f:dd:c1:41:1d:b6:17:ce:14:9a:23:ad:
         70:52:b0:b5:be:9a:50:b7:86:95:5d:c8:e2:90:b7:f0:59:91:
         0b:08:ed:e3:cf:c8:27:eb:f1:d5:0e:0d:6f:a9:85:70:61:8e:
         3f:3a:87:c0:75:ee:2a:a3:c5:dd:19:77:ed:f6:d3:e7:19:d8:
         34:7c:ad:0a:e6:f2:70:70:3e:ad:f8:ef:e9:8f:63:73:96:ee:
         23:67:84:9d:6b:a6:27:fe:24:79:83:4f:34:fd:28:e7:ef:72:
         44:ed:ab:69:15:8c:6a:e9:b9:33:0c:04:65:84:44:3e:d4:4e:
         d2:60:59:ea:2a:10:cf:b2:00:f3:52:93:e5:d5:01:8f:f4:24:
         fc:f3:d9:cd:7d:10:1d:dc:47:7a:d7:32:2d:b7:34:26:40:b5:
         09:2c:14:88:72:9b:1f:65:ad:ce:a0:45:e8:2f:1b:d9:fd:17:
         63:9b:cf:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:16 2024 by rpki-client on console-ams.rpki-client.org