Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/eeb98f-cf11-449d-a9bb-8d44de54cfa7/1/RhsrM0ifM_H7RvBuHN8r97nmEUI.roa
File:                     RhsrM0ifM_H7RvBuHN8r97nmEUI.roa (raw, json)
Hash identifier:          3WKIKafMWz0VeXTYLHclZzRa4sup5RUwhViPpJz3zas=
Subject key identifier:   46:1B:2B:33:48:9F:33:F1:FB:46:F0:6E:1C:DF:2B:F7:B9:E6:11:42
Certificate issuer:       /CN=96545bad39625aea67903f8183f9fbbaeac6c88d
Certificate serial:       10483DDA
Authority key identifier: 96:54:5B:AD:39:62:5A:EA:67:90:3F:81:83:F9:FB:BA:EA:C6:C8:8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/llRbrTliWupnkD-Bg_n7uurGyI0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/eeb98f-cf11-449d-a9bb-8d44de54cfa7/1/RhsrM0ifM_H7RvBuHN8r97nmEUI.roa
Signing time:             Sat 01 Jan 2022 14:07:57 +0000
ROA not before:           Sat 01 Jan 2022 14:07:57 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     680
IP address blocks:        141.82.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 273169882 (0x10483dda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96545bad39625aea67903f8183f9fbbaeac6c88d
        Validity
            Not Before: Jan  1 14:07:57 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=461b2b33489f33f1fb46f06e1cdf2bf7b9e61142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:42:e4:a7:05:a0:89:77:02:75:c8:e0:bd:ab:
                    b8:17:36:03:8b:3c:1f:a9:95:e4:6d:4b:ff:ee:34:
                    5f:cd:1a:7a:6c:11:31:f5:af:27:ed:7a:21:d3:51:
                    0c:f4:2e:b8:b2:f4:b6:54:da:1c:79:5f:6e:6b:18:
                    2e:f5:4c:80:01:51:60:b6:27:45:3d:16:87:d0:46:
                    94:24:bb:1b:d5:79:96:6f:8d:e8:97:1b:e4:c2:8a:
                    c9:5d:46:e7:ff:75:b0:ae:25:af:ec:2e:e2:ae:3a:
                    65:80:8b:45:d8:9d:35:46:eb:85:37:37:b3:2f:d5:
                    ee:97:73:85:ff:b8:f8:0a:13:5b:6b:0b:2b:45:be:
                    04:28:2f:6b:23:b0:6b:3d:a6:43:c3:f0:5e:a8:af:
                    59:b5:75:dc:8d:39:fc:cf:fd:46:6f:03:a0:56:63:
                    09:28:f4:1c:82:8d:cf:94:e6:2a:0c:f6:ff:0e:7e:
                    c4:20:2d:0a:91:3f:61:31:a4:cc:d5:e8:df:5a:07:
                    10:d1:47:53:e3:27:7d:d0:44:a3:15:1d:1f:f6:90:
                    8c:49:6a:a7:af:18:5c:49:fd:a2:a4:38:57:ac:7b:
                    1d:24:df:00:e4:79:b4:f6:35:33:97:34:c6:9d:96:
                    14:c9:fa:e4:83:74:24:f1:43:bf:2e:58:89:9a:85:
                    f8:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:1B:2B:33:48:9F:33:F1:FB:46:F0:6E:1C:DF:2B:F7:B9:E6:11:42
            X509v3 Authority Key Identifier:
                keyid:96:54:5B:AD:39:62:5A:EA:67:90:3F:81:83:F9:FB:BA:EA:C6:C8:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llRbrTliWupnkD-Bg_n7uurGyI0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/eeb98f-cf11-449d-a9bb-8d44de54cfa7/1/RhsrM0ifM_H7RvBuHN8r97nmEUI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/eeb98f-cf11-449d-a9bb-8d44de54cfa7/1/llRbrTliWupnkD-Bg_n7uurGyI0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.82.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         33:70:2f:50:ef:d5:71:9d:6a:69:85:0e:5e:da:74:d5:ea:7d:
         f9:42:7e:c0:9d:b5:95:30:be:71:f8:3d:3b:d6:1d:63:fd:50:
         2e:8c:2a:ca:76:85:c9:18:81:9f:34:c7:ca:56:59:07:37:f4:
         65:3b:f7:7b:66:d3:4b:88:fb:3d:2e:bc:32:c5:ec:70:a0:83:
         42:90:76:d1:8b:f4:91:7c:0b:18:b6:96:8a:2d:d6:a3:ac:77:
         83:33:c5:2b:51:b8:85:84:92:4b:54:da:11:28:cf:4c:78:29:
         45:89:bd:5f:3d:d4:20:1e:eb:c0:e4:9b:05:53:65:f1:61:16:
         a3:bd:2c:8f:b6:5a:8e:7e:b3:e2:c2:e2:3c:91:cd:64:8d:28:
         83:4f:47:b1:b7:14:b8:a5:01:16:ea:6d:e3:78:b4:cb:3a:7d:
         cf:a1:65:4c:96:0c:ca:36:e7:43:10:22:3c:d1:b6:af:fb:96:
         5d:96:4a:ff:64:20:83:13:74:c3:19:4f:e8:c8:c7:dd:de:ad:
         98:14:27:34:1e:2d:e6:a0:a3:48:07:f0:8e:df:69:6b:c2:04:
         90:ba:dc:42:c0:df:8e:e0:80:9b:18:74:97:0b:73:88:c9:2c:
         37:1d:29:a8:81:74:24:36:5a:62:eb:cd:94:e9:29:6a:ea:1d:
         03:ca:be:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:16 2024 by rpki-client on console-ams.rpki-client.org