Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/LIXK5kMi-qFiE101k7_eEw651_I.roa
File:                     LIXK5kMi-qFiE101k7_eEw651_I.roa (raw, json)
Hash identifier:          Fn+tAzkU8fe/91q5Xp80wBgOvZNmMyg7fhvdYxqa/8c=
Subject key identifier:   2C:85:CA:E6:43:22:FA:A1:62:13:5D:35:93:BF:DE:13:0E:B9:D7:F2
Certificate issuer:       /CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f
Certificate serial:       9540FE
Authority key identifier: F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/LIXK5kMi-qFiE101k7_eEw651_I.roa
Signing time:             Mon 14 Mar 2022 15:32:31 +0000
ROA not before:           Mon 14 Mar 2022 15:32:31 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209768
IP address blocks:        2a12:5844:1212::/48 maxlen: 48
                          2a12:5840:1f2::/48 maxlen: 48
                          2a12:5840:1f0::/48 maxlen: 48
                          2a12:5844:1111::/48 maxlen: 48
                          2a12:5840:1f1::/48 maxlen: 48
                          2a12:5840:2111::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9781502 (0x9540fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f
        Validity
            Not Before: Mar 14 15:32:31 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2c85cae64322faa162135d3593bfde130eb9d7f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c1:5f:66:90:38:12:5d:5f:7c:e3:3e:80:94:
                    62:b4:f5:18:5d:96:ea:cc:23:9c:b2:35:13:27:06:
                    b5:d0:f3:ea:72:59:bd:47:ef:90:d1:e3:8c:88:ff:
                    00:03:f4:d2:61:33:44:25:77:1a:fd:f0:9e:78:0f:
                    09:5a:95:13:68:f0:0d:5b:af:6e:a2:9f:e2:a6:0b:
                    26:9e:6c:af:56:31:a1:f0:98:e5:6c:98:0d:5d:9d:
                    a0:8d:af:9e:04:f5:d6:5e:99:a5:3e:c4:a5:4e:0e:
                    e0:ff:9e:3b:39:1e:ef:66:0c:ec:94:42:17:e3:53:
                    c3:86:bf:e1:72:97:32:ca:7c:08:1c:33:a0:5f:4b:
                    c5:1a:ca:ba:e6:0f:2f:e1:5e:15:cf:ce:25:c0:40:
                    ea:8f:bc:e9:8e:78:7b:3f:02:51:f3:dc:49:8b:74:
                    12:ac:48:87:f7:95:ce:7b:e1:91:a6:e4:f5:b2:c7:
                    7d:79:b6:ba:76:ba:63:cc:51:2b:1f:a0:a3:19:6b:
                    91:36:a8:79:7b:b2:4d:05:ac:00:40:b0:6d:e0:2c:
                    c3:cf:37:a6:d3:9d:2a:b7:a0:44:7a:db:88:c8:c4:
                    bd:f7:fe:e6:e6:58:43:2d:6d:f9:cd:f0:1f:00:96:
                    d3:e4:e1:3c:fd:82:ee:67:1c:5a:d4:87:40:7d:fe:
                    3c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:85:CA:E6:43:22:FA:A1:62:13:5D:35:93:BF:DE:13:0E:B9:D7:F2
            X509v3 Authority Key Identifier:
                keyid:F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/LIXK5kMi-qFiE101k7_eEw651_I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:5840:1f0::-2a12:5840:1f2:ffff:ffff:ffff:ffff:ffff
                  2a12:5840:2111::/48
                  2a12:5844:1111::/48
                  2a12:5844:1212::/48

    Signature Algorithm: sha256WithRSAEncryption
         b8:eb:e8:13:f3:ec:7a:62:77:9c:01:4a:fa:45:6d:8c:4a:e2:
         1d:2e:25:b5:90:a7:12:24:18:53:a6:dc:0a:2a:fc:7a:ad:2e:
         48:88:48:7e:2c:34:d4:ef:e1:83:c4:2d:64:a4:be:f0:9f:b7:
         ee:b0:9f:cf:95:d8:66:d9:e8:eb:1f:f3:97:ac:93:09:0d:77:
         33:28:5a:8b:14:aa:94:87:48:62:19:7f:40:b5:7a:b1:e7:5a:
         11:14:bf:c6:d9:d9:c7:61:e4:a4:0d:71:05:2b:c3:07:99:63:
         f5:1d:95:12:f6:98:71:fa:b1:77:7f:54:a9:30:31:5f:10:27:
         5b:8f:a9:0a:12:07:77:90:07:c5:30:a2:a2:ff:0d:53:44:32:
         a8:a4:69:8f:c7:06:55:d3:42:d1:5a:21:55:de:41:2c:f0:4f:
         19:a2:34:1d:37:eb:6a:b4:b2:e6:79:d0:9c:96:04:de:51:4a:
         5a:1a:f7:97:e0:41:af:95:94:d3:f6:06:21:a6:87:d3:65:71:
         02:eb:60:96:35:45:3c:c9:86:3c:88:58:3c:66:d2:01:a1:de:
         3d:a2:0a:7d:3f:51:bd:3d:3e:51:b0:7d:1f:8b:fa:6b:3e:3b:
         c8:c9:80:30:38:27:8d:16:75:14:53:7b:0d:1d:5c:9c:07:bc:
         b4:42:56:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:35 2024 by rpki-client on console-fra.rpki-client.org