Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/pEioJzymxM4zJV6Yi89VzQy6lfU.roa
File:                     pEioJzymxM4zJV6Yi89VzQy6lfU.roa (raw, json)
Hash identifier:          d5Nf8p2V05j9bMNhfRIGO1+ObUEFima6za32YXhsRb8=
Subject key identifier:   A4:48:A8:27:3C:A6:C4:CE:33:25:5E:98:8B:CF:55:CD:0C:BA:95:F5
Certificate issuer:       /CN=8f3818554a51808eefb829ec7465a3222f270123
Certificate serial:       14F6B9D3
Authority key identifier: 8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/pEioJzymxM4zJV6Yi89VzQy6lfU.roa
Signing time:             Sat 01 Jan 2022 13:06:26 +0000
ROA not before:           Sat 01 Jan 2022 13:06:26 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     199145
IP address blocks:        84.47.173.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 351713747 (0x14f6b9d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f3818554a51808eefb829ec7465a3222f270123
        Validity
            Not Before: Jan  1 13:06:26 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a448a8273ca6c4ce33255e988bcf55cd0cba95f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:14:93:0b:1b:54:f4:fc:75:92:a0:a4:fc:02:
                    43:74:e0:ca:6a:e0:f9:5b:73:91:fa:fa:07:6c:e5:
                    70:7f:45:e0:c1:88:dc:2b:56:de:e3:55:d9:26:5c:
                    d1:f1:3e:5d:28:7e:cf:97:3a:7d:27:d6:85:20:0c:
                    e9:1e:23:4a:0b:ce:45:7d:b3:8c:3d:d8:0c:38:0d:
                    b7:71:cc:ef:55:9e:0d:16:59:a7:7a:f7:a8:a2:46:
                    0b:e1:95:72:8e:fb:41:0b:46:58:07:3b:f0:aa:29:
                    dd:04:5c:14:25:13:c3:0d:b9:04:fd:29:22:18:bc:
                    c9:f3:9e:2f:ea:c3:0e:8f:c3:0d:6c:c4:2e:11:0c:
                    61:9c:18:c8:d9:42:3d:6f:d9:25:36:fd:7a:d1:16:
                    64:5f:90:4f:bc:b9:5a:04:2a:37:2a:08:0d:1f:05:
                    9e:65:eb:df:a5:ae:ee:39:c1:bb:25:e8:3c:27:2d:
                    d0:fa:40:a1:1c:0a:28:01:60:aa:d5:86:5b:a2:31:
                    97:d2:d6:6b:23:8c:bf:8b:c8:24:ad:69:98:9a:ae:
                    e1:21:d6:f3:a3:b7:e8:93:d5:39:45:bc:eb:14:2f:
                    ed:db:bf:2e:8b:7f:0c:23:51:dd:7e:45:c5:ee:a5:
                    df:f9:21:e4:c6:a6:c7:ea:bf:d6:f5:1f:c5:34:eb:
                    08:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:48:A8:27:3C:A6:C4:CE:33:25:5E:98:8B:CF:55:CD:0C:BA:95:F5
            X509v3 Authority Key Identifier:
                keyid:8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/pEioJzymxM4zJV6Yi89VzQy6lfU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  84.47.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:f5:c4:5c:1a:90:27:75:66:1b:4d:e7:0d:32:3e:38:71:58:
         28:ed:e9:ac:dc:46:12:95:fe:c3:69:d5:08:f7:da:ce:46:b6:
         1b:64:6c:64:b3:8f:91:3f:7f:d1:63:01:0c:26:fa:da:bf:e5:
         8e:44:9d:06:25:f5:68:e9:0a:23:f9:5f:9a:a5:35:3a:33:4b:
         9b:4d:a8:75:3a:c8:1b:17:64:a9:6b:cf:e3:af:94:b6:c0:55:
         d9:cb:9b:4c:65:7b:e9:55:95:79:a6:31:cd:95:e7:2e:09:69:
         b6:53:be:2c:9b:89:40:4d:64:f4:b9:5f:81:cb:c8:0b:f0:44:
         52:d0:5a:de:e4:71:d4:ed:f7:f8:24:cc:c6:ef:44:f2:e4:c4:
         8c:65:08:88:c3:ac:4a:78:6f:be:26:4b:d9:01:76:8a:80:04:
         a3:fc:25:e1:41:33:fc:d8:8b:86:c8:93:af:e8:78:2f:48:8f:
         28:9d:03:31:03:56:2f:3a:58:6d:75:a9:9a:79:6e:a9:4f:42:
         79:8d:a5:5a:0c:1e:48:50:e5:b9:24:42:49:1f:97:cd:34:89:
         b9:12:e7:44:52:84:6b:17:52:27:a7:6f:07:36:5b:dc:f2:27:
         a7:4f:44:a2:02:5c:80:3d:d4:4c:8f:87:c8:32:de:40:9b:d1:
         07:97:95:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:36 2024 by rpki-client on console-fra.rpki-client.org