Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/Z2eyqcyPprFbKoB8Ax6chuJ7iWc.roa
File:                     Z2eyqcyPprFbKoB8Ax6chuJ7iWc.roa (raw, json)
Hash identifier:          JXPLVjFEbBwRsBD14SQbCl+UjCIbZlDcY0GuLFqJbVw=
Subject key identifier:   67:67:B2:A9:CC:8F:A6:B1:5B:2A:80:7C:03:1E:9C:86:E2:7B:89:67
Certificate issuer:       /CN=11b69b59d19f2987e49f1852d60bb1777f80a301
Certificate serial:       38423BA3
Authority key identifier: 11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/Z2eyqcyPprFbKoB8Ax6chuJ7iWc.roa
Signing time:             Fri 18 Mar 2022 09:40:53 +0000
ROA not before:           Fri 18 Mar 2022 09:40:53 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     50149
IP address blocks:        62.122.216.0/22 maxlen: 22
                          94.154.128.0/22 maxlen: 22
                          89.104.107.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 943864739 (0x38423ba3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11b69b59d19f2987e49f1852d60bb1777f80a301
        Validity
            Not Before: Mar 18 09:40:53 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6767b2a9cc8fa6b15b2a807c031e9c86e27b8967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:6a:c5:ed:be:37:2e:78:1a:f1:cf:6a:f0:81:
                    08:b8:2c:0b:3e:3f:21:80:fd:c2:60:60:6c:c6:4e:
                    02:19:b1:1e:cb:79:d2:1d:9b:ed:59:a5:52:ee:47:
                    31:4b:34:cc:ec:1c:7d:76:0f:80:4d:42:bc:c7:7c:
                    c8:0b:2d:d4:6e:43:c8:7c:83:0e:44:6e:b1:45:ad:
                    88:d3:d3:2b:bd:95:87:ad:45:10:59:78:7f:45:2f:
                    46:8c:9c:8a:30:88:a4:67:29:b6:db:c8:23:b4:44:
                    26:ca:67:a4:7f:60:88:80:78:5d:03:41:ee:7d:2c:
                    76:e2:2a:d9:c4:a3:0c:01:20:78:72:f3:cc:4d:8e:
                    e7:c2:5b:9f:2b:81:1a:51:fe:b6:0a:49:b2:c7:d5:
                    47:da:dd:50:67:97:16:49:72:4e:d7:82:f5:d1:0c:
                    77:d2:7b:3a:68:4a:dc:d2:33:33:0d:a2:83:e9:2a:
                    4c:88:2b:a7:16:65:e9:db:4f:6f:94:eb:e4:81:f4:
                    ee:0d:30:4a:01:59:9c:81:a2:ae:9d:16:f7:99:80:
                    f9:3a:3a:15:5d:94:63:56:15:cd:7c:fe:65:4f:4c:
                    aa:06:52:61:18:75:97:43:aa:20:a5:bd:c8:ef:5a:
                    aa:ab:35:89:cc:cb:b0:cc:31:eb:8d:90:e5:8f:23:
                    bb:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:67:B2:A9:CC:8F:A6:B1:5B:2A:80:7C:03:1E:9C:86:E2:7B:89:67
            X509v3 Authority Key Identifier:
                keyid:11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/Z2eyqcyPprFbKoB8Ax6chuJ7iWc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.122.216.0/22
                  89.104.107.0/24
                  94.154.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         97:16:d9:c9:24:94:f2:0d:1a:ea:6c:23:67:e5:51:ff:6f:24:
         0d:0c:ac:af:c1:84:3e:66:23:76:ba:4a:06:02:eb:c0:9b:fb:
         f7:07:e2:1d:fa:99:85:17:6f:c6:40:0b:59:dd:d3:de:07:b7:
         a3:32:91:b8:8a:2b:d4:0e:2d:d7:7d:52:83:e0:77:e6:ee:8f:
         04:64:cf:68:ef:38:48:7e:18:ff:c2:90:df:a6:50:15:38:34:
         69:50:c9:e5:1a:71:f7:3a:be:62:c5:0a:8e:b1:5b:a2:84:22:
         da:99:99:c9:0f:36:fb:c5:70:8a:d9:58:1f:43:f6:b3:8c:e4:
         1f:9f:f5:de:6c:c8:a6:78:6c:3c:d6:22:ab:99:c0:31:40:7e:
         19:53:8f:ad:68:b9:c1:3f:15:45:3b:7e:84:2c:4e:41:3a:fb:
         b2:f4:42:e5:c2:03:70:46:3f:c8:f7:00:fa:93:4c:e5:a1:e1:
         c9:9a:70:c0:64:15:13:54:1b:c0:b1:65:8f:a0:f4:db:2d:d5:
         49:be:9c:90:9d:89:7d:49:86:9a:e8:e7:de:05:f5:da:0c:39:
         ab:37:ab:ec:c8:fb:93:51:ba:47:7c:f6:59:59:40:11:38:bd:
         b2:8d:65:5e:3f:7a:17:28:9f:2c:da:be:32:cc:16:67:38:62:
         39:2c:cf:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:36 2024 by rpki-client on console-fra.rpki-client.org