Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/46zc9-Pejxxx6t4jEGJ61cZtyCI.roa
File:                     46zc9-Pejxxx6t4jEGJ61cZtyCI.roa (raw, json)
Hash identifier:          allfGNDq8ZplGTXLBD8dlDeaRGTm5jJDkfvOHAvsplM=
Subject key identifier:   E3:AC:DC:F7:E3:DE:8F:1C:71:EA:DE:23:10:62:7A:D5:C6:6D:C8:22
Certificate issuer:       /CN=9d9a0c84b30720f4d4ce4bdba01dd0544d028ecd
Certificate serial:       0E5D1F3A
Authority key identifier: 9D:9A:0C:84:B3:07:20:F4:D4:CE:4B:DB:A0:1D:D0:54:4D:02:8E:CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nZoMhLMHIPTUzkvboB3QVE0Cjs0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/46zc9-Pejxxx6t4jEGJ61cZtyCI.roa
Signing time:             Sat 01 Jan 2022 03:56:30 +0000
ROA not before:           Sat 01 Jan 2022 03:56:30 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     205547
IP address blocks:        185.207.34.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 240983866 (0xe5d1f3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d9a0c84b30720f4d4ce4bdba01dd0544d028ecd
        Validity
            Not Before: Jan  1 03:56:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e3acdcf7e3de8f1c71eade2310627ad5c66dc822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:33:7b:ff:03:6c:ba:92:a3:5d:de:5b:b3:1b:
                    76:55:fc:8f:ac:13:2a:33:86:36:84:b4:f9:3f:e6:
                    56:d7:9a:eb:bc:a2:ec:0b:26:e8:c1:6b:ea:bc:c8:
                    68:a8:54:29:f1:2f:8c:3a:3a:3f:74:41:b9:fd:7c:
                    8a:a9:67:c4:f6:20:be:67:90:c9:38:f2:51:aa:8e:
                    63:37:d0:dd:1f:ce:8c:23:04:25:69:fb:35:de:70:
                    bd:db:ca:ab:b9:02:e6:37:75:eb:1a:f4:26:9f:da:
                    b9:48:d3:b8:fa:b1:ab:19:ff:fa:3c:b0:01:26:44:
                    05:6f:df:ca:59:ef:c3:ad:40:8c:58:17:c5:47:d1:
                    08:4d:5b:3a:93:ee:76:97:3e:35:1f:64:dc:44:7d:
                    fa:67:e4:71:56:9e:e4:50:b6:e2:3a:ce:47:20:a0:
                    f2:c1:34:5c:53:0b:6f:5c:17:74:d7:df:5b:f6:4d:
                    e1:ad:81:ed:55:17:a2:59:e1:e2:a9:a4:91:c1:6b:
                    4c:00:77:a7:96:ec:b3:2d:09:d6:02:59:71:f1:92:
                    69:a6:66:35:a7:66:41:ef:91:6a:c8:66:88:f9:b0:
                    0f:08:ee:31:3d:3b:5e:b5:b0:fe:29:19:d0:68:f7:
                    dd:41:0a:b8:7b:4d:df:4f:be:40:46:bd:aa:3d:e8:
                    7a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:AC:DC:F7:E3:DE:8F:1C:71:EA:DE:23:10:62:7A:D5:C6:6D:C8:22
            X509v3 Authority Key Identifier:
                keyid:9D:9A:0C:84:B3:07:20:F4:D4:CE:4B:DB:A0:1D:D0:54:4D:02:8E:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nZoMhLMHIPTUzkvboB3QVE0Cjs0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/46zc9-Pejxxx6t4jEGJ61cZtyCI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.207.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:5c:0b:67:c3:f9:46:3e:69:18:d6:0a:76:4d:f6:86:e8:91:
         99:aa:fd:53:33:7d:25:74:23:b3:b6:c8:19:fd:41:e1:95:d1:
         40:46:1e:15:df:ef:4d:50:ac:06:c4:3b:9d:1e:7f:c4:6d:d1:
         48:fb:4e:d8:87:f5:5c:bf:15:05:dc:55:03:db:98:43:d6:15:
         fe:e4:da:78:c1:b5:93:cc:20:ae:e8:3b:e7:16:97:db:f6:52:
         f4:f9:2b:26:4d:c2:73:9f:92:e2:c4:99:6f:72:6d:b3:0d:48:
         51:cc:93:f4:0f:7c:81:1e:5b:2d:5c:55:7c:86:35:ca:1f:f9:
         dd:ba:a8:c5:8d:63:cc:08:0a:7c:2e:7c:48:e2:92:e3:05:d3:
         b7:df:83:2c:48:87:1d:df:83:b0:20:a9:2f:e5:c3:59:5c:08:
         d6:13:43:bc:f7:f3:1c:76:95:9e:b2:b0:72:c6:41:28:c6:f5:
         e0:01:80:2f:38:02:d4:0e:02:a5:ef:72:eb:35:5e:a1:3a:96:
         3a:83:dc:87:f0:d0:09:73:14:94:cd:3f:03:7d:ae:2f:b5:07:
         3d:09:77:e4:d8:2d:33:17:4c:3d:e4:88:79:c3:01:33:6d:f3:
         d1:7f:ca:a7:e2:a1:7a:f5:cc:99:3d:13:11:dc:34:df:92:e7:
         4a:2e:b3:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:59 2024 by rpki-client on console-fra.rpki-client.org