Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/Yt9uIHu_wExMSyd9kQr29HCoecI.roa
File:                     Yt9uIHu_wExMSyd9kQr29HCoecI.roa (raw, json)
Hash identifier:          8B3VeecmV+i76deGu/xzAgH+JT+qXLD/zkRqpNH6ZDI=
Subject key identifier:   62:DF:6E:20:7B:BF:C0:4C:4C:4B:27:7D:91:0A:F6:F4:70:A8:79:C2
Certificate issuer:       /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial:       1D6B4512
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/Yt9uIHu_wExMSyd9kQr29HCoecI.roa
Signing time:             Wed 30 Mar 2022 17:00:55 +0000
ROA not before:           Wed 30 Mar 2022 17:00:55 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209371
IP address blocks:        212.111.200.0/24 maxlen: 24
                          195.178.146.0/24 maxlen: 24
                          195.178.147.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 493569298 (0x1d6b4512)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19426325acb8ce609a686fa655b058968809b346
        Validity
            Not Before: Mar 30 17:00:55 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=62df6e207bbfc04c4c4b277d910af6f470a879c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:eb:b0:6f:e6:0d:80:4a:e5:32:ea:c5:26:41:
                    5c:b2:82:6c:1a:76:00:11:d5:87:11:1a:e5:7e:c2:
                    5f:8f:9d:0b:a0:4c:32:a7:8b:31:00:60:fb:32:f5:
                    44:9b:16:c3:95:fa:b1:4c:12:f2:2b:cc:ae:71:61:
                    ea:9b:5e:a5:97:de:39:c0:94:98:cc:72:66:23:a0:
                    3d:68:56:d7:b1:4e:ea:e9:02:8e:d6:e8:eb:b5:3b:
                    79:f1:a4:75:8d:46:ef:c2:97:51:9b:a2:b3:5b:0f:
                    fa:9e:f6:7a:ac:b1:85:3c:7d:41:43:8a:57:dc:9b:
                    c5:7f:7c:52:9f:57:fd:8e:c4:de:9d:86:ca:ee:17:
                    37:ab:3c:fc:fa:2b:ea:7b:11:78:05:61:a8:0f:f6:
                    f0:90:63:8c:dd:11:cd:03:1d:9f:fc:31:2a:9e:82:
                    84:a9:22:29:65:86:bf:8f:73:71:21:3c:21:54:6d:
                    c6:6a:f9:71:b3:ee:d8:22:8d:02:89:ac:db:2a:f4:
                    d6:c6:ef:54:e6:87:8c:2d:12:8f:30:ad:d5:e1:8c:
                    a4:f4:9c:d1:99:0f:50:fe:a7:7b:e3:87:c2:02:9a:
                    cc:88:62:39:c0:2a:22:14:fa:44:3f:df:96:b7:72:
                    ca:de:45:aa:92:a1:8f:38:79:9d:f3:9d:9f:80:11:
                    5a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:DF:6E:20:7B:BF:C0:4C:4C:4B:27:7D:91:0A:F6:F4:70:A8:79:C2
            X509v3 Authority Key Identifier:
                keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/Yt9uIHu_wExMSyd9kQr29HCoecI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.178.146.0/23
                  212.111.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:71:55:fa:6a:71:e5:c0:8c:75:34:e8:1f:92:d6:ad:f8:99:
         7f:5b:37:4d:b4:f0:8f:08:dc:cd:03:8d:41:68:7b:c8:50:b4:
         10:3c:33:f2:b3:0a:cf:2d:f7:4a:49:9a:49:08:e5:cc:a8:4b:
         78:14:ef:c4:2a:6a:0d:f2:39:3e:13:50:29:c9:83:51:10:70:
         51:d5:53:79:76:77:41:a8:8a:38:36:da:95:74:c6:45:20:4b:
         43:99:84:f7:9d:25:cd:fa:49:d1:d9:d8:ff:92:b0:05:e5:12:
         fb:9c:3c:f0:5d:f4:89:e5:b7:9b:bf:98:69:74:50:5d:5d:9a:
         7d:8f:77:98:f0:51:ac:9f:af:2d:de:99:38:f7:51:22:7d:ec:
         34:e9:43:ba:7a:00:f8:ee:f4:c5:36:6e:81:06:7c:e4:78:de:
         36:b3:06:43:b6:03:04:4b:36:34:48:b0:8d:31:39:86:bc:50:
         ca:d4:4e:7d:c5:30:d7:cf:9c:7c:c0:4c:a1:63:67:52:4d:f1:
         f5:aa:f9:a6:60:5f:42:5c:ce:b7:2c:c1:97:08:24:31:7c:75:
         12:36:3a:63:f8:30:ab:9f:cc:ef:34:8b:65:70:eb:fa:71:b2:
         97:09:2f:44:69:ee:f0:fa:3d:04:29:57:76:bf:20:b8:10:fc:
         2f:f7:ba:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:42 2024 by rpki-client on console-fra.rpki-client.org