Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/EtbvbYS4_fEnTjHdjNB0JOCDZmU.roa
File:                     EtbvbYS4_fEnTjHdjNB0JOCDZmU.roa (raw, json)
Hash identifier:          yMXvxk4ZkhRRL2OvQtXCje27Nc0aShlq9hZ1Sr2DJC4=
Subject key identifier:   12:D6:EF:6D:84:B8:FD:F1:27:4E:31:DD:8C:D0:74:24:E0:83:66:65
Certificate issuer:       /CN=b03c302c2f52277e3d0ab6842f68aa5f8d0d7787
Certificate serial:       14193F
Authority key identifier: B0:3C:30:2C:2F:52:27:7E:3D:0A:B6:84:2F:68:AA:5F:8D:0D:77:87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sDwwLC9SJ349CraEL2iqX40Nd4c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/EtbvbYS4_fEnTjHdjNB0JOCDZmU.roa
Signing time:             Tue 07 Jun 2022 08:05:20 +0000
ROA not before:           Tue 07 Jun 2022 08:05:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     62232
IP address blocks:        91.250.245.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1317183 (0x14193f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b03c302c2f52277e3d0ab6842f68aa5f8d0d7787
        Validity
            Not Before: Jun  7 08:05:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=12d6ef6d84b8fdf1274e31dd8cd07424e0836665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:90:b1:29:3a:69:75:2d:25:b1:dc:e1:1a:16:
                    ad:a2:2b:1d:7f:fb:62:c6:04:70:b4:b7:ae:b9:c1:
                    91:98:e6:50:10:98:fd:9c:84:02:69:7c:18:82:1d:
                    e9:f3:74:61:80:3d:9f:ee:35:88:dc:96:11:88:ad:
                    4c:1f:46:8b:6a:7e:e8:1a:94:d9:9c:c1:a2:00:82:
                    d8:7c:6a:3a:34:7e:e7:61:44:88:a5:af:c6:57:61:
                    4f:87:50:7d:fc:50:8e:74:94:cc:e8:4d:f1:7c:63:
                    ed:a4:fd:ce:01:9c:35:c0:b5:af:90:79:b9:58:96:
                    5f:37:f5:3e:55:de:6b:10:9f:81:87:a3:1f:c3:00:
                    01:a4:ee:0c:a6:47:43:35:45:a0:ac:66:aa:48:18:
                    44:b3:90:f5:cd:16:07:f7:1d:f9:6b:e5:82:c4:02:
                    a2:70:f3:ea:f7:90:ac:2b:d1:8f:bc:9a:00:0f:20:
                    54:1e:21:7e:de:52:45:b2:95:be:4e:54:d8:d8:f7:
                    4c:8f:70:ea:07:29:61:c3:5b:2a:eb:6c:3c:b1:5b:
                    a3:5a:8a:6b:58:29:a3:35:8d:16:6b:e0:a3:3a:ac:
                    53:d1:50:57:b1:ad:90:d5:fd:84:2b:a2:9d:17:62:
                    d7:58:32:00:bb:9d:95:ae:35:19:fb:2a:3f:d4:75:
                    9c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:D6:EF:6D:84:B8:FD:F1:27:4E:31:DD:8C:D0:74:24:E0:83:66:65
            X509v3 Authority Key Identifier:
                keyid:B0:3C:30:2C:2F:52:27:7E:3D:0A:B6:84:2F:68:AA:5F:8D:0D:77:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDwwLC9SJ349CraEL2iqX40Nd4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/EtbvbYS4_fEnTjHdjNB0JOCDZmU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.250.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:51:0b:20:1b:dc:56:7f:8b:a0:8a:3a:5a:8f:eb:3d:fc:f5:
         8f:67:af:89:ef:f1:70:71:75:bf:d2:f2:e3:f0:08:28:92:14:
         67:d3:56:a2:e9:f1:50:56:9f:85:2c:79:66:76:2b:2d:57:58:
         a9:a2:36:a7:a9:19:ce:2c:74:5d:f6:22:98:85:23:e8:f3:78:
         ee:98:ea:f8:b4:9b:32:3d:59:88:75:79:a5:a4:f6:24:4e:1a:
         5b:80:71:83:37:3e:27:8a:79:ac:7b:ff:15:a5:2f:65:5a:70:
         d4:83:c3:94:7e:27:97:36:64:fa:69:88:f3:ca:08:f5:1c:c9:
         0f:6e:0a:cf:8f:13:4a:8e:cc:44:b2:6c:bd:bb:e1:fe:10:c5:
         20:73:82:93:a1:53:90:6b:fd:fb:ea:d8:c4:bc:d1:72:05:2d:
         61:e6:29:c7:d6:14:2a:0b:fd:77:d3:ec:52:96:61:1b:cb:45:
         ec:da:a2:7c:e1:04:36:a8:6d:4c:e4:59:f4:d2:d0:05:18:3a:
         7e:08:04:dd:52:81:1c:a5:d1:c1:36:6a:5d:55:26:ba:3c:5c:
         ce:1d:38:06:48:d7:39:2d:93:d2:89:50:29:31:57:72:47:fa:
         bb:89:10:a9:18:b9:e5:93:f4:73:24:37:10:cb:83:cd:d5:e9:
         7d:1a:05:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:41 2024 by rpki-client on console-fra.rpki-client.org