Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/hgr6I8CqYiMMNhCw_fOm9KXZ8gQ.roa
File:                     hgr6I8CqYiMMNhCw_fOm9KXZ8gQ.roa (raw, json)
Hash identifier:          F/zhDNTqYUyq3YI1eqa8dNtpiipkg6KTlITEce2EU3E=
Subject key identifier:   86:0A:FA:23:C0:AA:62:23:0C:36:10:B0:FD:F3:A6:F4:A5:D9:F2:04
Certificate issuer:       /CN=6e831066ea8fe20b067a136006b7af906633843b
Certificate serial:       1845EF50
Authority key identifier: 6E:83:10:66:EA:8F:E2:0B:06:7A:13:60:06:B7:AF:90:66:33:84:3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/boMQZuqP4gsGehNgBrevkGYzhDs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/hgr6I8CqYiMMNhCw_fOm9KXZ8gQ.roa
Signing time:             Sat 01 Jan 2022 15:59:21 +0000
ROA not before:           Sat 01 Jan 2022 15:59:21 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49923
IP address blocks:        193.104.48.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 407236432 (0x1845ef50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e831066ea8fe20b067a136006b7af906633843b
        Validity
            Not Before: Jan  1 15:59:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=860afa23c0aa62230c3610b0fdf3a6f4a5d9f204
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:57:01:d0:aa:89:7c:47:2b:97:e2:b3:35:d8:
                    58:a6:97:06:44:95:ff:67:aa:54:fe:0e:8b:fb:cb:
                    0a:30:1d:8a:0f:2c:cd:2b:46:9a:b0:38:51:c6:b1:
                    d6:07:9a:33:e8:b1:70:cf:44:80:a4:39:a0:4c:f8:
                    f4:51:c2:ac:7f:61:eb:a8:bd:49:34:97:5e:41:fa:
                    87:dc:98:ff:f7:c9:43:e2:20:2e:73:58:ad:ac:e7:
                    b4:3a:6e:2c:1e:b1:98:d2:77:46:2b:69:18:01:db:
                    3a:13:51:3c:e6:6d:52:eb:00:3f:e2:28:c3:dd:1e:
                    92:c2:0d:8b:48:8e:22:a6:17:9e:ab:fd:a9:17:3c:
                    c9:db:0f:01:11:2b:01:3d:c4:13:17:ad:9e:9e:98:
                    87:8b:b6:b3:8e:3b:d3:e0:a7:cd:05:52:32:c7:eb:
                    4f:2a:24:ed:30:1f:e4:1c:91:bb:b3:3c:40:51:ba:
                    df:e7:0a:96:ab:9e:c7:dd:86:25:40:15:85:0e:01:
                    a9:48:4f:ae:82:de:1e:69:a2:2a:27:21:16:e5:ce:
                    4d:31:bc:1c:0a:84:b6:94:5c:fa:8d:40:c5:5d:5a:
                    6f:9a:a3:66:12:8b:1b:6c:ea:f2:ea:44:08:a2:65:
                    bf:49:f9:56:c9:c8:1a:5b:de:c0:d7:29:19:6c:77:
                    cd:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:0A:FA:23:C0:AA:62:23:0C:36:10:B0:FD:F3:A6:F4:A5:D9:F2:04
            X509v3 Authority Key Identifier:
                keyid:6E:83:10:66:EA:8F:E2:0B:06:7A:13:60:06:B7:AF:90:66:33:84:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/boMQZuqP4gsGehNgBrevkGYzhDs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/hgr6I8CqYiMMNhCw_fOm9KXZ8gQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/boMQZuqP4gsGehNgBrevkGYzhDs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.104.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c8:24:a9:bf:09:7d:8d:ec:72:74:ad:23:fe:84:ee:ff:fe:59:
         06:45:6f:b9:19:bb:e4:8a:a2:e4:bf:6e:1b:dc:97:db:2a:e7:
         e8:ee:88:70:2b:72:00:98:07:f1:a0:4d:e2:cb:a8:ab:68:75:
         03:40:2a:5f:e3:ea:b2:ec:98:f7:cc:a1:4a:eb:39:30:e3:1b:
         f1:9e:be:cd:23:09:c6:f0:4d:b7:c8:51:5e:b2:2b:89:b0:af:
         ce:58:8e:89:36:e4:a1:59:bb:d5:4c:d9:1e:e7:b9:09:b5:30:
         05:08:58:de:22:d0:2e:4e:96:83:5b:eb:24:85:8e:ee:83:d5:
         3c:5e:74:9e:ef:95:c4:53:3a:06:73:c1:45:86:10:a7:eb:de:
         88:25:58:ab:3e:70:fe:a7:f5:56:39:8d:28:81:ce:76:f8:90:
         7e:3e:ea:d2:a7:bd:d8:78:c3:47:a2:04:ac:e5:43:ce:f7:90:
         76:48:fb:76:46:43:02:c5:71:93:31:e1:d4:23:67:81:c9:c7:
         a0:03:93:38:98:3d:88:c0:49:72:a4:a4:fb:a9:f7:0f:2a:43:
         03:fc:02:9e:1d:3e:f6:c6:f9:37:2b:6f:35:ef:72:9e:67:20:
         e7:f6:e3:8b:33:45:66:5d:7f:6d:4c:da:62:b8:81:62:95:26:
         ce:4f:66:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:10 2024 by rpki-client on console-ams.rpki-client.org