Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/18b690-c5ae-4fb4-8bf8-63a0be6a8e5f/1/ss6VA2VXTDTqtSHrK0MRqLQyIxA.roa
File:                     ss6VA2VXTDTqtSHrK0MRqLQyIxA.roa (raw, json)
Hash identifier:          jUnEsYf38VDQDBzKZYx04myBc2S39tkv/1yOc3OQnPs=
Subject key identifier:   B2:CE:95:03:65:57:4C:34:EA:B5:21:EB:2B:43:11:A8:B4:32:23:10
Certificate issuer:       /CN=aee8e5dfec683ae5f1a0ebe0fb96fa256b304762
Certificate serial:       6241AE
Authority key identifier: AE:E8:E5:DF:EC:68:3A:E5:F1:A0:EB:E0:FB:96:FA:25:6B:30:47:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rujl3-xoOuXxoOvg-5b6JWswR2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/18b690-c5ae-4fb4-8bf8-63a0be6a8e5f/1/ss6VA2VXTDTqtSHrK0MRqLQyIxA.roa
Signing time:             Sat 01 Jan 2022 02:00:34 +0000
ROA not before:           Sat 01 Jan 2022 02:00:34 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210458
IP address blocks:        146.19.141.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6439342 (0x6241ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aee8e5dfec683ae5f1a0ebe0fb96fa256b304762
        Validity
            Not Before: Jan  1 02:00:34 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b2ce950365574c34eab521eb2b4311a8b4322310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:11:08:b4:87:55:f8:04:13:d1:2d:96:d9:af:
                    9f:f5:90:4a:f5:3e:81:73:a4:19:ac:d2:94:b7:8d:
                    8a:49:5b:f4:bc:af:65:cd:c1:7b:b2:17:0c:a7:b7:
                    b2:23:4d:94:7e:e3:90:70:7b:e7:e6:6e:42:30:a4:
                    5e:34:41:02:ca:88:1e:ef:a1:f4:35:75:93:16:eb:
                    29:e7:59:6c:61:46:93:14:b2:33:6b:d0:35:19:e9:
                    41:d5:0d:4b:06:cc:7e:0f:4d:22:6e:57:23:c7:6d:
                    28:20:ec:cd:e4:e0:77:a3:1e:32:81:54:15:6c:76:
                    39:60:17:e1:97:fe:9e:cb:19:5c:8e:d2:33:07:08:
                    7e:90:a4:e7:b7:95:d7:b7:31:e4:c0:55:33:a2:dc:
                    67:ef:8b:26:e0:a2:2e:6d:61:82:4d:69:4e:70:88:
                    a7:be:de:59:5d:2f:2c:04:d7:9e:5b:18:33:d6:1a:
                    34:a3:b4:41:75:68:ec:1c:51:50:31:55:40:63:d8:
                    07:b9:9b:50:ac:e6:da:9a:b7:3b:90:ac:2a:b2:42:
                    b9:25:04:d9:d7:70:79:b0:c6:96:30:85:b9:92:bb:
                    30:37:b7:96:c1:5a:6b:29:43:83:4d:9a:d6:b5:c9:
                    59:c9:bb:d7:2d:d1:77:41:d6:0c:53:2f:4d:62:3b:
                    ba:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:CE:95:03:65:57:4C:34:EA:B5:21:EB:2B:43:11:A8:B4:32:23:10
            X509v3 Authority Key Identifier:
                keyid:AE:E8:E5:DF:EC:68:3A:E5:F1:A0:EB:E0:FB:96:FA:25:6B:30:47:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rujl3-xoOuXxoOvg-5b6JWswR2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/18b690-c5ae-4fb4-8bf8-63a0be6a8e5f/1/ss6VA2VXTDTqtSHrK0MRqLQyIxA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/18b690-c5ae-4fb4-8bf8-63a0be6a8e5f/1/rujl3-xoOuXxoOvg-5b6JWswR2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:8d:b1:82:67:54:21:b2:e9:ae:44:06:4c:f3:d7:1d:b4:d6:
         03:c8:a6:a4:ab:aa:30:da:8a:25:fb:05:c9:b2:82:ee:87:19:
         6a:ea:8e:00:15:fe:0e:6d:80:ac:3d:2d:79:7f:5c:5c:4e:c0:
         4d:76:10:22:ae:02:dc:6c:9c:4d:20:25:8c:3b:ba:4b:e4:49:
         ab:dd:3b:ee:e1:de:65:e7:27:85:3e:54:30:02:47:54:92:0a:
         9f:43:83:2b:71:2a:c7:bc:27:84:f3:d6:48:d1:9c:f5:a1:29:
         18:fa:12:1c:8b:66:97:9c:61:73:41:09:b7:25:a5:10:56:33:
         81:08:0a:0a:f3:e5:bf:87:f7:30:f9:08:6b:ba:8f:32:2b:69:
         71:2a:eb:09:19:eb:b5:e3:29:83:c2:35:dc:67:6f:9b:65:e9:
         1b:35:2b:de:b8:f3:34:c8:e6:99:11:a5:2a:50:e9:04:b5:d1:
         99:b4:8e:5d:86:53:73:50:31:a1:5a:95:a8:ed:99:80:6e:fb:
         7a:f8:f5:ae:d4:63:9d:58:74:60:2b:4d:c9:27:47:70:d3:2a:
         df:34:7d:87:b6:75:46:a9:f3:22:a6:dd:c6:76:6c:4a:22:9b:
         f2:3d:ab:cc:2a:cc:cb:16:7a:35:67:cd:db:4d:04:6d:95:aa:
         23:5f:a5:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:08 2024 by rpki-client on console-fra.rpki-client.org