Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/7478dc-c96d-4be5-8086-253b8b41a75c/1/EQrnix-S-CtEQwQ4-JdYBW-If88.roa
File:                     EQrnix-S-CtEQwQ4-JdYBW-If88.roa (raw, json)
Hash identifier:          fHozRsxmanGYY7kyFq82N18mWqhJD8hmvevABgUY9NQ=
Subject key identifier:   11:0A:E7:8B:1F:92:F8:2B:44:43:04:38:F8:97:58:05:6F:88:7F:CF
Certificate issuer:       /CN=a721082c80abaf95fad7ea60f3c5ec0e05e28edc
Certificate serial:       01ADD1
Authority key identifier: A7:21:08:2C:80:AB:AF:95:FA:D7:EA:60:F3:C5:EC:0E:05:E2:8E:DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pyEILICrr5X61-pg88XsDgXijtw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/7478dc-c96d-4be5-8086-253b8b41a75c/1/EQrnix-S-CtEQwQ4-JdYBW-If88.roa
Signing time:             Wed 27 Apr 2022 07:33:19 +0000
ROA not before:           Wed 27 Apr 2022 07:33:19 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3268
IP address blocks:        82.116.192.0/19 maxlen: 19
                          82.116.208.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110033 (0x1add1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a721082c80abaf95fad7ea60f3c5ec0e05e28edc
        Validity
            Not Before: Apr 27 07:33:19 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=110ae78b1f92f82b44430438f89758056f887fcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:47:56:b3:c1:79:da:33:62:fb:2c:f6:be:13:
                    2d:7c:55:16:71:5b:5f:47:a9:d0:db:7d:ab:a2:1e:
                    9f:4c:28:f5:41:4b:c7:94:1d:9b:49:27:8f:52:fe:
                    1b:5b:42:2a:28:89:f0:4c:d8:01:f3:45:92:93:21:
                    0f:d8:22:ef:6e:66:7f:2a:b1:d1:4d:0f:73:48:d7:
                    8f:38:af:31:46:cb:b5:c9:d8:68:45:47:98:6c:28:
                    ba:2c:31:fb:f2:db:99:9a:c4:c2:84:6f:4e:cc:90:
                    27:9c:a9:7d:5c:42:6e:c9:bc:48:5c:a5:3f:a4:dd:
                    09:d2:e5:18:93:13:24:7f:ce:c8:c7:53:f5:e8:81:
                    c3:b6:34:e4:39:6d:55:2b:1f:72:7d:fb:67:0a:e1:
                    2a:e2:00:21:d9:0a:cb:64:19:9c:a9:14:4a:16:32:
                    61:31:b5:2b:01:00:b4:19:1e:ea:3e:41:65:38:77:
                    13:87:56:08:8f:a9:91:89:1f:d3:8f:b2:4d:1d:cb:
                    eb:31:2f:2b:fb:b9:f0:63:30:64:6f:7e:c6:e4:67:
                    9c:e2:24:41:95:74:27:f9:c5:e9:6e:37:8c:fd:c5:
                    12:c6:ff:02:99:49:76:85:70:bb:3a:f7:c8:07:ac:
                    bc:23:ef:f8:05:2f:2e:52:3a:07:fe:59:19:51:7f:
                    cf:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:0A:E7:8B:1F:92:F8:2B:44:43:04:38:F8:97:58:05:6F:88:7F:CF
            X509v3 Authority Key Identifier:
                keyid:A7:21:08:2C:80:AB:AF:95:FA:D7:EA:60:F3:C5:EC:0E:05:E2:8E:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pyEILICrr5X61-pg88XsDgXijtw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7478dc-c96d-4be5-8086-253b8b41a75c/1/EQrnix-S-CtEQwQ4-JdYBW-If88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7478dc-c96d-4be5-8086-253b8b41a75c/1/pyEILICrr5X61-pg88XsDgXijtw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.116.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         6b:81:c8:e3:4e:b1:36:ab:08:9b:a2:3b:28:f9:83:a5:73:2b:
         9a:f3:31:b9:78:fe:08:fd:4e:5a:a6:1f:71:6f:c0:d0:75:07:
         aa:26:b4:3b:24:96:aa:08:fe:4e:ea:04:69:17:b3:4c:a6:54:
         d3:f4:51:8a:66:39:2c:1c:21:89:ed:1a:df:b3:29:fa:2c:61:
         fc:f6:2a:5e:5f:a1:ab:01:60:f0:80:02:e0:d3:56:36:4a:20:
         82:cb:54:f4:88:41:e9:03:42:be:06:8a:d1:07:95:e2:8f:4e:
         c4:f2:c8:d3:69:62:64:e6:b4:ce:46:b4:e6:58:83:55:1c:a5:
         dc:9f:ad:d7:97:95:a6:2b:94:bf:01:5c:42:9f:4c:86:e7:9c:
         36:d9:86:73:c2:24:b6:05:0c:c9:83:b9:65:f9:0f:84:70:bb:
         e3:74:bb:7f:3d:5c:5d:bf:c6:5c:c0:63:3f:8b:24:69:ad:11:
         b3:44:47:08:b4:3c:ae:77:84:c3:0a:39:04:05:17:34:1e:e6:
         e3:ba:85:4d:bd:ea:d3:04:dc:b7:98:52:c0:0f:d7:3f:7d:41:
         fe:87:ed:65:ca:2e:91:ca:0b:d4:10:03:2e:91:54:fc:e0:a3:
         2b:9d:50:14:66:02:51:63:94:06:1c:8e:27:90:55:da:34:ee:
         1d:b9:55:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:08:31 2025 by rpki-client