Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/MRPH-kUyU3LIklVvdVwrmCRCWQs.roa
File:                     MRPH-kUyU3LIklVvdVwrmCRCWQs.roa (raw, json)
Hash identifier:          8BihQKR6vc1oVqg3MgbqAxE7X2gUgntwK375rZxJrpA=
Subject key identifier:   31:13:C7:FA:45:32:53:72:C8:92:55:6F:75:5C:2B:98:24:42:59:0B
Certificate issuer:       /CN=ed6da9e41686d21c12799c8e84b274aa8241508c
Certificate serial:       38952801
Authority key identifier: ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/MRPH-kUyU3LIklVvdVwrmCRCWQs.roa
Signing time:             Sat 01 Jan 2022 10:05:25 +0000
ROA not before:           Sat 01 Jan 2022 10:05:25 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61248
IP address blocks:        46.143.212.0/22 maxlen: 22
                          46.143.248.0/22 maxlen: 22
                          109.122.252.0/23 maxlen: 23
                          109.122.254.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 949299201 (0x38952801)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed6da9e41686d21c12799c8e84b274aa8241508c
        Validity
            Not Before: Jan  1 10:05:25 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3113c7fa45325372c892556f755c2b982442590b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f5:89:c2:9f:c9:88:1d:fa:48:0e:62:ed:55:
                    c1:de:3e:e3:c9:6c:8d:2d:09:71:b2:d3:97:a6:c4:
                    98:42:95:d7:87:e8:60:ba:58:b5:fa:94:17:76:0d:
                    7c:87:7d:45:e3:da:b4:4d:80:d6:0c:8b:59:af:8a:
                    8b:ea:48:4f:54:98:6c:53:68:36:03:5a:7d:ed:c7:
                    d2:78:e9:48:39:35:41:fb:f6:d2:b0:4d:a4:9c:cc:
                    38:0c:12:fc:ed:54:5e:02:de:11:59:94:d6:11:a0:
                    ba:3b:09:e7:7e:94:31:d6:9a:24:38:bd:f8:71:af:
                    64:b4:d6:0b:c3:52:07:a1:07:96:5d:de:eb:81:d5:
                    cd:97:91:d0:2a:cd:88:50:bd:c9:d7:2b:51:97:23:
                    6a:b4:ec:14:9f:b4:44:9f:6e:76:63:d1:2d:0e:c7:
                    3c:16:37:58:04:cd:90:fe:bb:3b:49:d8:e5:85:9f:
                    b4:82:97:10:99:cd:52:0b:89:28:ea:85:39:ef:62:
                    e1:e9:73:89:0b:dc:bb:70:b1:7b:2c:26:d4:15:41:
                    48:04:48:31:5d:9c:f3:d5:06:12:ab:3c:2d:63:bb:
                    c3:6c:48:cf:00:50:d4:53:d5:de:32:03:8f:62:dd:
                    e1:f4:1d:4c:49:72:8a:29:ca:2a:45:8b:f0:94:e7:
                    6b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:13:C7:FA:45:32:53:72:C8:92:55:6F:75:5C:2B:98:24:42:59:0B
            X509v3 Authority Key Identifier:
                keyid:ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/MRPH-kUyU3LIklVvdVwrmCRCWQs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.143.212.0/22
                  46.143.248.0/22
                  109.122.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:c1:02:4e:85:16:14:b5:ef:21:40:04:ad:38:5c:fc:d0:05:
         c4:19:71:12:ee:d2:86:31:53:a9:90:d7:f4:53:21:d1:38:93:
         4f:ac:cb:3f:3e:d0:78:8c:31:be:c9:75:fb:52:8d:53:d1:a5:
         71:d8:19:e7:f9:b7:67:24:f4:36:cf:18:1a:c9:8e:d6:94:1f:
         c1:ed:6b:18:2e:f4:6e:63:75:23:09:70:58:a2:6d:17:b6:f4:
         ef:77:ba:14:37:46:df:4c:63:95:52:7c:13:54:81:ba:d0:9a:
         ce:43:3c:11:88:fe:bd:cb:9f:99:3d:8e:fd:3f:27:ef:ae:c2:
         f6:99:b4:c6:a3:e9:2d:1c:ec:2b:dd:d4:b4:bf:70:7b:bd:ad:
         67:98:99:c9:08:aa:d8:a1:d3:75:b3:43:3f:38:03:c8:18:d4:
         f4:c2:a2:7e:aa:8f:e3:5c:7a:92:ae:3c:e5:39:f4:41:2a:e4:
         e8:f9:f7:68:84:63:81:5d:ef:6a:e4:00:9e:9c:9b:6f:e0:39:
         5b:ab:df:25:a3:72:63:1b:28:07:a1:2f:2d:ee:cf:ee:bd:fb:
         d6:76:87:05:20:01:8f:40:2f:d9:69:22:ff:95:b2:27:ac:25:
         ea:11:c5:c8:42:0f:01:08:91:97:81:e0:4f:f5:cd:25:99:5b:
         91:4d:13:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:46 2024 by rpki-client on console-fra.rpki-client.org