Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/6RRFVyNEUsCTAdiBhYdhAkwDA64.roa
File:                     6RRFVyNEUsCTAdiBhYdhAkwDA64.roa (raw, json)
Hash identifier:          UviJSV9gYt4646TW1I7dTuBZ31WoP4YP1fpWSU/zupo=
Subject key identifier:   E9:14:45:57:23:44:52:C0:93:01:D8:81:85:87:61:02:4C:03:03:AE
Certificate issuer:       /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial:       01827E806DF7E3075667B15EE2BAAC50DBC4
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/6RRFVyNEUsCTAdiBhYdhAkwDA64.roa
Signing time:             Mon 08 Aug 2022 17:28:42 +0000
ROA not before:           Mon 08 Aug 2022 17:28:42 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     43260
IP address blocks:        195.178.140.0/24 maxlen: 24
                          195.178.141.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:7e:80:6d:f7:e3:07:56:67:b1:5e:e2:ba:ac:50:db:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19426325acb8ce609a686fa655b058968809b346
        Validity
            Not Before: Aug  8 17:28:42 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e9144557234452c09301d881858761024c0303ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ef:8b:9a:bc:1e:55:ef:a8:c2:c8:84:6f:e2:
                    59:07:bb:73:e0:19:ff:be:9a:34:98:11:ad:0a:14:
                    00:64:db:22:03:f1:e2:f4:a2:42:27:f5:de:f1:36:
                    e2:70:8f:cb:2b:f8:b1:db:c4:c9:01:97:67:fe:ad:
                    15:34:99:e1:d3:20:18:13:43:f0:37:d5:00:ab:70:
                    b0:00:32:df:67:ae:a8:2d:0e:d1:ca:83:b6:14:1b:
                    2e:35:81:da:a9:97:72:cb:52:be:72:e6:10:0c:21:
                    dc:16:eb:db:43:41:a5:72:96:28:ae:53:93:38:f9:
                    4a:98:77:8b:a8:b2:be:aa:70:ae:39:c7:32:a9:8f:
                    fa:87:d9:83:c2:11:8a:a1:c1:e2:19:12:42:6c:27:
                    fa:02:61:f4:d9:5e:43:79:6a:cd:25:64:e8:3e:fa:
                    a7:70:07:f8:14:d4:b6:2e:00:5b:dd:85:5e:58:06:
                    5d:40:53:c1:21:68:71:13:11:a6:0b:97:a0:b7:3c:
                    0b:cd:da:ef:07:71:e8:b3:52:c0:4b:b3:db:a0:d7:
                    d1:e6:31:c3:5d:db:43:aa:0e:6e:c3:47:e1:37:14:
                    a9:45:ae:7e:0b:58:2c:17:6c:e4:42:08:3e:43:99:
                    18:eb:90:da:71:57:fa:90:65:12:9b:e6:f8:16:ea:
                    0b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:14:45:57:23:44:52:C0:93:01:D8:81:85:87:61:02:4C:03:03:AE
            X509v3 Authority Key Identifier:
                keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/6RRFVyNEUsCTAdiBhYdhAkwDA64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.178.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ba:5b:74:c1:0e:46:89:be:ed:be:04:a2:d1:e8:0f:55:9d:5e:
         5b:d6:96:d4:51:80:4e:62:7d:24:45:47:33:09:56:c5:5c:72:
         6a:a2:ba:9d:04:52:41:d9:e6:40:be:1a:b8:ea:81:ff:a2:cc:
         09:60:d0:60:c3:ed:bb:ed:c8:9b:55:77:c3:d9:18:08:31:23:
         fa:05:f3:15:25:ab:b2:33:e7:ec:b7:5e:ab:35:0b:be:1b:67:
         c1:fd:66:22:3d:e3:37:8e:31:83:ce:73:f1:44:69:58:c0:92:
         6e:e8:f3:96:f4:d2:2a:2b:88:ef:ca:c7:9d:59:91:17:a3:30:
         4c:be:15:87:4e:bb:86:67:11:55:16:85:b6:8d:04:87:9b:7c:
         a0:62:10:00:37:a7:26:48:6d:e8:08:f6:ba:3f:e6:12:17:f7:
         69:b6:d4:68:58:86:b8:2e:28:c4:54:2d:5c:a8:9e:db:ba:c7:
         3f:b8:f5:0b:7f:bc:37:3d:52:b5:f4:6d:f8:2b:b7:b9:48:6f:
         f1:56:2a:01:71:df:74:c9:77:27:d7:f3:6d:71:d3:80:d0:e5:
         01:7c:c3:3f:9e:0b:57:f4:09:a1:74:f1:64:f9:ca:0d:84:d5:
         9a:9d:ab:ab:04:84:7f:06:8c:62:f1:4a:2e:5d:41:e2:12:31:
         7b:7d:79:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org