Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/EtArBlTqpuwlpEnIVRKqyEdIemc.roa
File:                     EtArBlTqpuwlpEnIVRKqyEdIemc.roa (raw, json)
Hash identifier:          1W1zZT2NdcxNTfnPDpIZPD91oX/hr/azOotPKDPc6l0=
Subject key identifier:   12:D0:2B:06:54:EA:A6:EC:25:A4:49:C8:55:12:AA:C8:47:48:7A:67
Certificate issuer:       /CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14
Certificate serial:       018B02EE
Authority key identifier: EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/EtArBlTqpuwlpEnIVRKqyEdIemc.roa
Signing time:             Sat 01 Jan 2022 12:03:43 +0000
ROA not before:           Sat 01 Jan 2022 12:03:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     59588
IP address blocks:        185.254.12.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25887470 (0x18b02ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14
        Validity
            Not Before: Jan  1 12:03:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=12d02b0654eaa6ec25a449c85512aac847487a67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:7a:aa:5a:c7:6a:0c:bb:45:9a:fa:d0:70:17:
                    30:99:8c:9c:bd:b8:1c:23:1d:1c:b3:48:29:4c:27:
                    35:36:95:b9:01:7d:71:20:7d:10:b7:9c:7d:16:91:
                    52:f5:bf:85:c2:59:bf:00:67:67:68:f2:8d:f0:65:
                    2b:60:90:6c:5b:78:f1:65:20:df:8b:ed:87:41:64:
                    ce:77:9c:b1:61:2d:ab:50:8a:85:83:eb:db:44:db:
                    0c:ab:cf:b8:c8:3a:02:4c:3f:0c:b2:8f:2f:5c:e3:
                    d8:9f:da:ee:7e:fe:e9:b2:75:78:52:78:2c:24:39:
                    9c:29:52:61:02:79:a1:ba:08:27:a7:a1:2e:68:5b:
                    a1:d7:f5:d1:7d:d3:57:d5:d1:56:74:d5:d4:6a:98:
                    06:88:d9:8c:5f:5d:77:ee:84:0e:82:48:af:4f:62:
                    5a:de:ed:3a:83:2e:d6:65:ac:2f:19:9b:32:25:ad:
                    a8:ea:75:e5:7b:0e:d3:b6:58:11:5b:db:08:64:e9:
                    2b:d6:67:05:f5:47:be:38:3e:3e:29:28:3c:91:be:
                    e0:6b:8b:b4:83:ea:33:c3:30:c2:0e:d2:51:e1:98:
                    13:1a:7b:9f:a2:bc:c6:55:8a:91:f1:ae:32:12:cf:
                    4f:42:48:15:57:f4:15:71:b2:08:4a:b1:03:ba:52:
                    65:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:D0:2B:06:54:EA:A6:EC:25:A4:49:C8:55:12:AA:C8:47:48:7A:67
            X509v3 Authority Key Identifier:
                keyid:EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/EtArBlTqpuwlpEnIVRKqyEdIemc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.254.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:6e:a4:88:a3:d4:67:c6:a1:ec:c1:04:3e:a7:d5:6b:4c:0b:
         f6:b0:99:60:11:94:83:74:0d:5d:23:c0:e5:89:78:e9:ba:55:
         d1:14:91:9c:7a:1a:4c:73:be:61:c5:2e:a3:38:80:7c:c9:28:
         4d:6d:fb:fb:5c:18:b8:e4:71:7d:b9:b8:0b:7f:5d:f9:e7:11:
         84:2b:5a:61:4b:4a:f6:d9:85:90:f4:32:5b:c3:71:cc:2a:8c:
         d9:6f:15:03:fe:1e:7a:40:c7:9a:a4:d1:07:b8:66:f4:6f:33:
         9e:63:6a:14:8f:7a:81:65:ef:cf:1f:d4:47:4d:85:50:09:94:
         6f:53:25:1e:da:5c:6e:b2:04:e2:f5:8e:01:1e:a2:83:11:47:
         47:8a:5c:72:69:ca:16:a4:5d:bd:20:44:dd:dd:39:b7:34:f6:
         9b:98:f0:33:e3:af:0c:4b:41:5b:05:84:7e:25:df:a0:80:eb:
         4f:92:be:a3:89:87:c7:4e:2b:05:d2:0b:c3:ed:d8:22:a1:f8:
         4e:eb:4f:69:de:eb:db:c9:c3:c2:7b:c8:1f:9a:eb:fb:a3:46:
         cc:b3:3b:a7:2e:8f:4f:25:6a:77:25:c5:9e:00:2d:ad:f3:61:
         cd:4c:9f:bf:c3:33:c6:0b:6b:b1:32:18:05:89:31:b6:9e:d5:
         4a:dc:6f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:27 2024 by rpki-client on console-ams.rpki-client.org