Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/JDudz9f46FqfuPd36t5dihq1Xk8.roa
File:                     JDudz9f46FqfuPd36t5dihq1Xk8.roa (raw, json)
Hash identifier:          RrtXTroF/asBlsQCkQZNkHrG+7JviWM+wbjM8NYc9Es=
Subject key identifier:   24:3B:9D:CF:D7:F8:E8:5A:9F:B8:F7:77:EA:DE:5D:8A:1A:B5:5E:4F
Certificate issuer:       /CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f
Certificate serial:       0184E74002BBD291430FE3551A7DEDF1403A
Authority key identifier: F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/JDudz9f46FqfuPd36t5dihq1Xk8.roa
Signing time:             Tue 06 Dec 2022 11:44:02 +0000
ROA not before:           Tue 06 Dec 2022 11:44:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209768
IP address blocks:        176.105.246.0/24 maxlen: 24
                          2a12:5844:1212::/48 maxlen: 48
                          2a12:5840:1f2::/48 maxlen: 48
                          2a12:5844:100::/48 maxlen: 48
                          2a12:5840:1f0::/48 maxlen: 48
                          2a12:5840:2113::/48 maxlen: 48
                          2a12:5844:1141::/48 maxlen: 48
                          2a12:5840:2111::/48 maxlen: 48
                          2a12:5840:1f1::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:e7:40:02:bb:d2:91:43:0f:e3:55:1a:7d:ed:f1:40:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f
        Validity
            Not Before: Dec  6 11:44:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=243b9dcfd7f8e85a9fb8f777eade5d8a1ab55e4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b5:88:c1:b7:5c:19:2d:4e:83:12:a5:b3:9d:
                    9f:27:4b:51:13:40:03:19:8e:ce:e5:9c:04:45:6a:
                    97:06:2c:69:90:b1:a0:06:ce:d6:81:f8:87:9c:ef:
                    b5:52:f7:3a:3a:76:05:45:69:80:a0:31:79:e6:ad:
                    d6:50:78:f9:4a:25:b7:c3:80:95:d0:5c:6d:45:6b:
                    2b:2c:2d:a4:53:96:9a:7b:18:b9:ad:fe:6a:da:5e:
                    b2:39:32:6e:55:e9:dd:d7:8c:5e:ac:fb:e0:6b:f1:
                    c9:e1:d9:ad:da:20:03:37:18:95:3e:26:71:69:c2:
                    eb:85:4a:fd:0b:ba:f0:da:8e:4c:9a:fc:04:eb:b4:
                    b8:dd:b7:64:48:ab:8e:72:55:fe:ff:fb:8e:80:73:
                    2b:c8:fd:a3:f6:bf:b5:fb:07:76:50:cc:f2:57:03:
                    b1:37:d4:2e:4a:42:c4:a3:bd:20:33:c1:80:02:23:
                    78:a9:55:ed:c7:bf:0f:7d:b4:40:24:4d:bd:74:54:
                    bd:a3:ff:5d:10:47:44:a8:e7:57:61:1a:d3:3d:10:
                    a8:29:53:a8:f2:68:37:94:24:47:23:d5:d5:14:09:
                    08:96:82:3d:f1:56:d6:01:29:3e:51:ee:16:1a:3d:
                    be:9c:0b:0f:98:7c:58:b2:b1:80:99:6e:44:b8:f6:
                    f9:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:3B:9D:CF:D7:F8:E8:5A:9F:B8:F7:77:EA:DE:5D:8A:1A:B5:5E:4F
            X509v3 Authority Key Identifier:
                keyid:F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/JDudz9f46FqfuPd36t5dihq1Xk8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.105.246.0/24
                IPv6:
                  2a12:5840:1f0::-2a12:5840:1f2:ffff:ffff:ffff:ffff:ffff
                  2a12:5840:2111::/48
                  2a12:5840:2113::/48
                  2a12:5844:100::/48
                  2a12:5844:1141::/48
                  2a12:5844:1212::/48

    Signature Algorithm: sha256WithRSAEncryption
         b6:56:91:81:63:32:7b:54:5c:86:bf:b9:f5:36:ae:49:8d:8a:
         0d:16:c2:8b:98:41:60:68:6b:a6:f3:b8:b9:06:68:7d:ac:55:
         a3:36:c2:7d:50:ab:39:1d:3b:96:c2:3b:d8:78:f4:b9:ec:bf:
         5d:56:fe:79:21:e8:c2:fc:c0:b7:98:3a:d4:95:d0:2e:76:1d:
         00:6e:2e:56:a2:00:3a:c3:6f:2d:78:3a:b4:dc:07:de:bf:c5:
         e1:7a:d9:31:7b:9c:ec:00:74:4f:31:0c:60:91:87:92:94:75:
         4d:b8:b8:9d:79:7e:29:8a:5b:0e:27:9f:5b:b7:1a:e3:74:47:
         c3:30:71:3c:35:6b:26:91:87:e4:b1:f4:5b:66:b6:2a:3c:e7:
         d8:f8:7a:b5:38:0f:a4:95:82:56:17:e9:c2:96:b0:98:02:f4:
         d2:f0:56:5a:48:87:43:59:92:e0:1a:e2:84:c0:89:50:a8:be:
         9e:e3:31:78:06:74:38:05:32:a7:62:1b:41:80:35:91:26:8a:
         f4:38:9e:cf:83:91:f8:bf:39:be:c7:c8:0b:7c:ad:f1:9e:02:
         8f:91:36:d2:25:07:4e:ee:85:bf:60:2c:fb:63:db:d6:8d:05:
         c4:b4:f8:ae:1d:1b:ef:99:92:39:60:3c:48:1d:c0:ae:83:7b:
         05:6b:99:8a
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgISAYTnQAK70pFDD+NVGn3t8UA6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2YzNlMDI3ZDJkMWMyZDM2ZDdjOTU0ODY3MjI2YzgzYjY1
ZWI1NmYwHhcNMjIxMjA2MTE0NDAyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNDNiOWRjZmQ3ZjhlODVhOWZiOGY3NzdlYWRlNWQ4YTFhYjU1ZTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bWIwbdcGS1OgxKls52fJ0tRE0AD
GY7O5ZwERWqXBixpkLGgBs7WgfiHnO+1Uvc6OnYFRWmAoDF55q3WUHj5SiW3w4CV
0FxtRWsrLC2kU5aaexi5rf5q2l6yOTJuVend14xerPvga/HJ4dmt2iADNxiVPiZx
acLrhUr9C7rw2o5MmvwE67S43bdkSKuOclX+//uOgHMryP2j9r+1+wd2UMzyVwOx
N9QuSkLEo70gM8GAAiN4qVXtx78PfbRAJE29dFS9o/9dEEdEqOdXYRrTPRCoKVOo
8mg3lCRHI9XVFAkIloI98VbWASk+Ue4WGj2+nAsPmHxYsrGAmW5EuPb5yQIDAQAB
o4ICUjCCAk4wHQYDVR0OBBYEFCQ7nc/X+Ohan7j3d+reXYoatV5PMB8GA1UdIwQY
MBaAFPbD4CfS0cLTbXyVSGcibIO2XrVvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXNQZ0o5TFJ3dE50ZkpWSVp5SnNnN1pldFc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8yYjI4NzgtNWI3OS00MGY3LWI0YjUt
MzU2YzRkN2JiNDUyLzEvSkR1ZHo5ZjQ2RnFmdVBkMzZ0NWRpaHExWGs4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8yYjI4NzgtNWI3OS00MGY3LWI0YjUtMzU2YzRkN2JiNDUy
LzEvOXNQZ0o5TFJ3dE50ZkpWSVp5SnNnN1pldFc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGgGCCsGAQUFBwEHAQH/BFkwVzAMBAIAATAGAwQAsGn2MEcE
AgACMEEwEgMHBCoSWEAB8AMHACoSWEAB8gMHACoSWEAhEQMHACoSWEAhEwMHACoS
WEQBAAMHACoSWEQRQQMHACoSWEQSEjANBgkqhkiG9w0BAQsFAAOCAQEAtlaRgWMy
e1Rchr+59TauSY2KDRbCi5hBYGhrpvO4uQZofaxVozbCfVCrOR07lsI72Hj0uey/
XVb+eSHowvzAt5g61JXQLnYdAG4uVqIAOsNvLXg6tNwH3r/F4XrZMXuc7AB0TzEM
YJGHkpR1Tbi4nXl+KYpbDiefW7ca43RHwzBxPDVrJpGH5LH0W2a2Kjzn2Ph6tTgP
pJWCVhfpwpawmAL00vBWWkiHQ1mS4BrihMCJUKi+nuMxeAZ0OAUyp2IbQYA1kSaK
9Diez4OR+L85vsfIC3yt8Z4Cj5E20iUHTu6Fv2As+2Pb1o0FxLT4rh0b75mSOWA8
SB3AroN7BWuZig==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:36 2024 by rpki-client on console-ams.rpki-client.org