Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/6PATxNbmnQFQxPfNoyQNh34YDkA.roa
File:                     6PATxNbmnQFQxPfNoyQNh34YDkA.roa (raw, json)
Hash identifier:          4yX9bomjgqkLVujuN7va1FDCq4KbzUxrjpCBNxpT+p4=
Subject key identifier:   E8:F0:13:C4:D6:E6:9D:01:50:C4:F7:CD:A3:24:0D:87:7E:18:0E:40
Certificate issuer:       /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial:       018243AD8CBBECAAD421A65C985F519C9907
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/6PATxNbmnQFQxPfNoyQNh34YDkA.roa
Signing time:             Thu 28 Jul 2022 07:20:23 +0000
ROA not before:           Thu 28 Jul 2022 07:20:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1885
IP address blocks:        91.93.185.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:43:ad:8c:bb:ec:aa:d4:21:a6:5c:98:5f:51:9c:99:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
        Validity
            Not Before: Jul 28 07:20:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e8f013c4d6e69d0150c4f7cda3240d877e180e40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:80:9f:28:8f:4a:1b:dc:5d:af:43:13:f1:8f:
                    01:8a:78:52:79:74:98:7a:f7:2a:1a:8b:b9:dc:5c:
                    1c:9f:0f:7e:8f:57:44:99:5d:a1:6e:22:78:fa:34:
                    fa:3d:80:de:c6:f3:70:c4:ba:77:1c:39:80:87:4c:
                    2b:89:6e:48:99:b6:2e:2a:57:93:6f:77:99:f1:2c:
                    01:35:a9:5a:fc:ad:e4:2f:c2:f1:1a:27:94:73:85:
                    7c:79:bf:3d:34:ac:3f:7e:f4:0c:2f:7c:4a:05:91:
                    20:e9:b5:9b:69:13:6f:60:54:89:de:94:33:88:5b:
                    2e:22:30:ab:6d:47:79:37:28:94:de:aa:35:28:ad:
                    3b:e9:fb:6b:2b:10:df:35:5c:66:f8:1b:65:ee:0a:
                    97:3d:de:a5:e4:9d:fe:96:8a:7a:e0:71:50:8f:5d:
                    bb:18:5d:f6:b0:4e:48:94:32:6e:2a:98:9a:24:fd:
                    dc:0d:fc:37:96:27:c9:73:e5:13:7d:3b:2d:05:c5:
                    ed:a4:71:4f:b7:a5:52:1e:d7:bc:0e:59:65:96:11:
                    18:d4:d0:f1:e6:ee:de:bc:05:be:8a:b5:33:f9:9a:
                    7f:03:b2:82:36:d0:1f:63:27:29:3e:d5:d7:34:49:
                    eb:f5:1c:6a:6c:b2:56:08:14:b1:7e:9d:93:a3:f3:
                    f1:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:F0:13:C4:D6:E6:9D:01:50:C4:F7:CD:A3:24:0D:87:7E:18:0E:40
            X509v3 Authority Key Identifier:
                keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/6PATxNbmnQFQxPfNoyQNh34YDkA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.93.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:7d:69:ed:5d:5d:4e:62:82:fc:d7:38:c6:cc:a5:87:c8:90:
         7b:b7:f1:83:9b:d9:ff:09:da:9f:ff:c0:4c:93:47:0f:1a:e8:
         e0:13:2d:e7:49:69:74:e0:a5:24:84:f3:bc:58:22:56:19:3a:
         dc:40:af:7a:9e:87:f6:90:6e:c0:30:77:e1:9f:ff:e9:fc:68:
         0c:92:0d:5c:21:57:3a:69:2a:d9:6c:cf:37:68:ed:8b:85:e6:
         49:34:8d:af:cc:55:6c:3f:ac:bc:03:3f:f7:cd:a9:91:1d:a6:
         b6:4d:53:95:41:09:c3:30:71:3c:73:d0:98:10:80:60:f6:2b:
         fc:c5:7c:c4:45:19:38:b9:10:ee:be:34:e7:b4:c6:2f:ec:c7:
         6f:c9:0d:3d:4a:68:9b:bc:19:96:e3:18:25:25:1b:51:fb:cb:
         06:c7:f1:88:47:c4:f2:1c:46:81:aa:18:44:6b:00:ad:be:d1:
         cd:5b:09:94:04:61:0c:b5:b7:88:2d:b5:15:e3:32:64:50:ba:
         ed:1e:95:93:35:61:e6:01:19:fb:a2:ee:5a:20:02:7b:85:8d:
         b5:ac:f2:5b:ff:0b:75:19:a4:9b:c0:2a:f0:5d:b1:dc:26:fa:
         e6:23:4c:02:25:00:36:b1:39:b4:08:70:03:5a:1a:0a:71:4d:
         43:b4:54:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:22 2024 by rpki-client on console-ams.rpki-client.org