Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/853ee3-3a4f-4d95-9bdb-b03c2fbdc644/1/eEywmvGelYVP4TyG0MRwD-GG2Ik.roa
File:                     eEywmvGelYVP4TyG0MRwD-GG2Ik.roa (raw, json)
Hash identifier:          LZOxN6QOF4PsOSR9CvBD/WrX+tKtqWh3+Pj3HWPmvGs=
Subject key identifier:   78:4C:B0:9A:F1:9E:95:85:4F:E1:3C:86:D0:C4:70:0F:E1:86:D8:89
Certificate issuer:       /CN=ee0739d0528dcb4fce578d11f7ec34b0e37452cf
Certificate serial:       0334ED65
Authority key identifier: EE:07:39:D0:52:8D:CB:4F:CE:57:8D:11:F7:EC:34:B0:E3:74:52:CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7gc50FKNy0_OV40R9-w0sON0Us8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/853ee3-3a4f-4d95-9bdb-b03c2fbdc644/1/eEywmvGelYVP4TyG0MRwD-GG2Ik.roa
Signing time:             Sat 01 Jan 2022 15:03:11 +0000
ROA not before:           Sat 01 Jan 2022 15:03:11 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212024
IP address blocks:        2001:67c:17fc::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53800293 (0x334ed65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee0739d0528dcb4fce578d11f7ec34b0e37452cf
        Validity
            Not Before: Jan  1 15:03:11 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=784cb09af19e95854fe13c86d0c4700fe186d889
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:bf:e9:25:d7:23:4a:12:17:fd:ed:bb:db:c6:
                    31:ed:7d:68:12:ef:46:26:28:11:26:4a:3e:39:d2:
                    40:34:9e:65:67:f3:a6:5d:21:7c:42:e9:c8:94:61:
                    55:09:ef:1a:28:4a:19:6c:6a:f1:34:43:26:60:d6:
                    46:92:68:2b:c0:5e:6c:45:3e:9f:b6:07:b5:18:01:
                    5e:dd:db:9b:6e:9f:1e:51:24:43:22:f2:aa:73:5a:
                    f0:67:9d:38:d8:70:66:c3:1b:fd:36:0d:1b:33:a9:
                    00:5b:d9:5a:4a:35:e6:7f:0d:1d:ca:cc:c4:ee:c4:
                    71:1c:34:ce:a6:e7:ac:fe:a2:9d:8f:be:cc:5b:a9:
                    41:8a:10:67:2f:da:2c:81:79:9e:e8:c1:5f:90:09:
                    7b:dc:63:fd:3a:b9:d1:1f:94:14:0b:67:1e:3c:ba:
                    5c:ed:7b:de:0f:61:47:2c:59:d8:6f:fb:44:7c:03:
                    13:c3:bd:41:0a:94:9c:f6:51:8e:58:0d:f8:9f:c4:
                    00:89:2d:d3:a1:96:0c:d0:dc:a9:d1:e1:3f:90:78:
                    cb:e8:1c:98:71:23:cc:62:ad:ff:84:d5:a3:25:c6:
                    71:df:79:d3:3b:57:a5:26:64:a2:d2:08:40:60:00:
                    18:27:90:5d:3f:f9:ab:94:b1:d9:a4:2a:06:8f:f5:
                    b4:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:4C:B0:9A:F1:9E:95:85:4F:E1:3C:86:D0:C4:70:0F:E1:86:D8:89
            X509v3 Authority Key Identifier:
                keyid:EE:07:39:D0:52:8D:CB:4F:CE:57:8D:11:F7:EC:34:B0:E3:74:52:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gc50FKNy0_OV40R9-w0sON0Us8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/853ee3-3a4f-4d95-9bdb-b03c2fbdc644/1/eEywmvGelYVP4TyG0MRwD-GG2Ik.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/853ee3-3a4f-4d95-9bdb-b03c2fbdc644/1/7gc50FKNy0_OV40R9-w0sON0Us8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:17fc::/48

    Signature Algorithm: sha256WithRSAEncryption
         a7:cd:2d:e4:81:53:dd:6c:50:d0:7f:73:f9:4c:17:b7:1d:3b:
         50:b7:71:44:c6:63:5e:32:bb:44:91:51:d4:9c:4f:b3:9d:f0:
         2e:48:29:d1:0a:f5:c2:e8:1a:b4:10:4b:df:72:3a:d1:dd:1f:
         a5:7c:53:06:5f:d9:6f:0b:c2:42:a1:0b:79:2a:0b:e9:97:46:
         f0:6b:cb:59:89:50:c0:8f:60:a2:ba:b4:f7:d6:26:b5:47:5f:
         63:75:79:27:24:9c:e0:ae:72:e6:51:6d:6c:1f:62:79:68:ab:
         6a:3a:fc:ee:e1:68:92:cb:5e:04:fa:16:42:9d:6a:ea:cd:72:
         84:80:dc:e1:3d:af:63:07:0c:c4:50:36:1b:0a:78:4c:5d:c8:
         71:ca:cd:5d:0e:59:9a:88:99:49:c7:e0:7e:d3:b5:15:5a:fa:
         aa:57:d3:05:b0:b1:90:44:65:67:87:b7:c1:dd:73:f5:9d:b4:
         02:0a:2e:ea:69:79:95:f9:37:1c:36:fe:ee:8e:6f:d1:3b:33:
         e3:3e:ba:dc:67:f1:56:02:ed:8a:b3:53:c2:ee:d9:ba:33:5a:
         3e:e4:d3:9b:2d:41:9c:a9:a8:fc:a6:7d:3b:4c:4d:08:02:07:
         9e:8e:ac:66:58:51:27:60:d2:cf:7c:bf:55:70:39:38:4d:c9:
         0c:d2:06:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:12 2024 by rpki-client on console-fra.rpki-client.org