Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/gsvaDfdUmFnjezses9Erfm3sb6s.roa
File:                     gsvaDfdUmFnjezses9Erfm3sb6s.roa (raw, json)
Hash identifier:          zMaq7BUwm6bFMrdD2QK3yI8R69l+grHM0STxG7xrDTM=
Subject key identifier:   82:CB:DA:0D:F7:54:98:59:E3:7B:3B:1E:B3:D1:2B:7E:6D:EC:6F:AB
Certificate issuer:       /CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6
Certificate serial:       37E51084
Authority key identifier: A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/gsvaDfdUmFnjezses9Erfm3sb6s.roa
Signing time:             Sat 01 Jan 2022 14:56:05 +0000
ROA not before:           Sat 01 Jan 2022 14:56:05 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212187
IP address blocks:        46.229.54.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 937758852 (0x37e51084)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6
        Validity
            Not Before: Jan  1 14:56:05 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=82cbda0df7549859e37b3b1eb3d12b7e6dec6fab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:19:40:fc:01:dc:50:e0:0f:22:80:47:16:38:
                    4d:4c:79:bf:87:9c:41:40:ef:7e:d5:16:fb:cd:bc:
                    58:19:37:57:ef:1f:d2:90:35:ae:66:10:0d:28:c6:
                    f3:7d:83:4f:a7:05:9d:50:24:fe:1b:c5:17:1d:2e:
                    97:c1:9e:6e:42:9e:78:29:93:7c:02:03:aa:4e:26:
                    4a:af:f0:1f:21:9d:3c:5f:ac:b0:12:87:ff:4c:69:
                    9a:61:d3:b4:28:bc:0c:1a:e6:27:df:53:a5:cb:c0:
                    46:b3:96:37:eb:21:cc:3f:28:97:4d:bb:dd:6f:b8:
                    a8:1f:9f:3e:d0:8e:3a:2c:40:14:d1:ac:d6:63:c6:
                    c2:52:d5:c8:2e:cb:62:ca:70:61:71:16:58:0e:c0:
                    38:de:d1:de:e1:aa:c0:1b:f7:2b:cb:d7:b8:11:92:
                    ea:e4:cb:80:a6:f4:db:48:fd:c6:19:c2:79:0f:b0:
                    67:de:a3:f4:89:b2:cc:0a:1c:31:24:13:5c:fa:9c:
                    c9:6d:9a:5a:0c:ea:4d:9b:8d:2f:6f:39:0b:ad:7d:
                    63:59:bb:b3:da:74:8e:51:5d:54:48:1c:8b:f1:46:
                    8e:b7:ee:39:61:5f:9f:35:79:dd:c9:df:a1:7c:06:
                    6d:3e:f0:d0:ce:b3:f6:f3:f2:0d:fd:0b:fe:03:ef:
                    ce:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:CB:DA:0D:F7:54:98:59:E3:7B:3B:1E:B3:D1:2B:7E:6D:EC:6F:AB
            X509v3 Authority Key Identifier:
                keyid:A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/gsvaDfdUmFnjezses9Erfm3sb6s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.229.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:5d:9f:78:93:74:1d:c4:6b:48:41:7f:32:0f:b3:31:62:63:
         ae:cf:e5:79:fe:6c:1b:47:4b:49:7d:de:4e:87:2c:d4:47:ad:
         1e:61:1e:57:f4:06:0e:c8:9f:55:b6:14:15:30:ab:58:38:31:
         fa:93:36:30:f6:48:1b:2c:03:65:ad:c2:c5:95:01:db:14:aa:
         58:98:50:84:9b:fa:58:34:2a:f5:ff:14:35:11:0b:d8:6d:ba:
         10:da:a9:9d:0d:6c:f0:25:59:82:60:80:8e:b7:64:f2:f7:a3:
         63:a3:4b:9c:76:0d:b6:77:df:7d:2d:1a:63:38:c8:79:9c:aa:
         7e:37:a3:f4:c9:3b:10:19:06:3d:6d:fb:24:96:ce:ad:2a:24:
         9e:f8:41:54:b7:4f:e9:75:21:cf:49:a9:7d:d8:df:fa:e5:b0:
         24:dd:40:ed:f3:f8:20:a1:a6:14:39:4c:d5:e6:40:12:bd:92:
         c8:5d:09:c0:56:d6:b1:44:a7:82:a1:29:16:aa:31:1f:22:fb:
         ed:6e:2d:50:ef:12:8e:66:cd:05:a1:6d:04:f2:23:b7:17:13:
         6f:53:96:d6:82:34:92:6f:1e:d2:e8:75:62:17:72:26:1d:c5:
         95:9d:df:60:fa:c2:d4:0c:a5:fb:6a:d1:1d:eb:b9:7f:95:5f:
         ca:11:fc:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:07 2024 by rpki-client on console-fra.rpki-client.org