Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/xu52e6HpHndzZMChyT86INyzK0U.roa
File:                     xu52e6HpHndzZMChyT86INyzK0U.roa (raw, json)
Hash identifier:          3+bUeovScBfyr/qmYQ4h1bbwOvEBScDr+ElE0XD/4sQ=
Subject key identifier:   C6:EE:76:7B:A1:E9:1E:77:73:64:C0:A1:C9:3F:3A:20:DC:B3:2B:45
Certificate issuer:       /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial:       37B252CC
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/xu52e6HpHndzZMChyT86INyzK0U.roa
Signing time:             Mon 14 Mar 2022 09:09:18 +0000
ROA not before:           Mon 14 Mar 2022 09:09:18 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60144
IP address blocks:        46.8.184.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 934433484 (0x37b252cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
        Validity
            Not Before: Mar 14 09:09:18 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c6ee767ba1e91e777364c0a1c93f3a20dcb32b45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:22:7d:12:04:eb:a8:ef:ee:26:b3:b2:a1:dd:
                    22:3e:76:3f:83:4e:8c:35:04:59:cb:18:c6:3b:9c:
                    07:6b:c0:a9:bc:80:f7:28:16:f9:4b:ff:97:84:1b:
                    d7:b2:32:db:ab:69:47:99:53:33:0d:44:f0:e8:f2:
                    23:4c:7e:b1:25:3e:64:b1:68:7d:32:86:52:0d:4b:
                    74:50:64:7e:7f:53:fd:eb:81:aa:12:f1:17:1d:82:
                    04:63:9b:36:67:32:45:89:e6:a8:9e:5c:1e:c5:92:
                    6e:6d:8a:12:39:7b:49:2c:b9:f3:8b:95:2f:cc:db:
                    5a:39:30:c8:3f:a2:59:7b:60:44:d7:5a:8d:f0:6d:
                    e9:6a:15:71:4b:08:6d:d6:0a:c2:6e:0f:a9:3a:c1:
                    33:3d:96:b0:c1:49:87:50:b0:cb:41:ce:89:cf:3e:
                    56:a8:be:e5:37:81:e1:4d:7b:7c:b1:1f:05:06:bd:
                    60:f1:de:65:2e:8a:a8:de:d7:0d:d5:6a:ba:d7:d6:
                    0e:15:f4:57:5b:ca:f2:d9:76:7b:40:c3:81:9e:80:
                    ec:af:e3:78:92:f5:1a:06:f2:bb:60:68:ac:59:80:
                    35:b0:98:b7:1d:df:07:e3:27:3f:18:04:d5:b1:d1:
                    9f:d6:c4:1a:6f:d6:40:2c:e5:8e:72:96:fc:d5:7c:
                    1d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:EE:76:7B:A1:E9:1E:77:73:64:C0:A1:C9:3F:3A:20:DC:B3:2B:45
            X509v3 Authority Key Identifier:
                keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/xu52e6HpHndzZMChyT86INyzK0U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.8.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:0f:95:54:be:3c:63:30:bf:65:b8:78:8e:21:41:13:9d:6d:
         1f:f1:91:aa:b2:93:06:07:bb:dd:db:85:8a:91:0c:ae:f1:25:
         16:a8:e6:4e:f5:42:12:ba:c6:42:dc:af:49:c6:09:04:ce:64:
         f4:e3:8a:6f:e7:a0:9b:18:86:35:7e:c8:f8:1c:71:3f:c6:9b:
         6b:22:91:83:9c:f5:fe:6a:cc:ab:2b:57:88:74:6e:d8:05:d4:
         45:0e:42:4d:7d:24:f0:9c:8e:4f:39:6f:5a:95:ee:64:a3:93:
         e6:d9:de:96:76:22:54:97:da:2d:70:32:9e:52:db:53:34:d2:
         25:dc:27:a6:cc:db:da:9a:bc:dc:b1:32:12:e1:15:c2:b2:4c:
         94:bb:31:93:af:1b:3d:bc:66:90:0d:e5:39:53:0c:29:97:50:
         71:51:b1:ad:72:44:8a:4d:07:88:f3:aa:2a:02:9d:10:63:b7:
         48:99:ac:e5:70:0d:a3:87:9f:38:28:2b:c1:6a:6b:f1:26:2d:
         a5:43:ba:47:d3:77:46:5d:7c:cc:7c:46:47:76:ef:d7:61:10:
         7d:59:6b:d8:95:3d:0c:64:50:f1:e6:67:35:48:10:2b:69:94:
         89:de:4d:e9:5f:d1:2f:4b:7f:88:69:10:0a:18:bc:f0:53:dd:
         ad:39:84:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:00 2024 by rpki-client on console-ams.rpki-client.org