Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/e6TAMBDrQYNXcs_vmUCLab7by-A.roa
File:                     e6TAMBDrQYNXcs_vmUCLab7by-A.roa (raw, json)
Hash identifier:          lqGj535XQq8HdEabNoBzDpq/Yokrl7HDY1w8lkqmdTI=
Subject key identifier:   7B:A4:C0:30:10:EB:41:83:57:72:CF:EF:99:40:8B:69:BE:DB:CB:E0
Certificate issuer:       /CN=9e9e6887ea7572a6411306c87b0cc089397a6354
Certificate serial:       040F12C0
Authority key identifier: 9E:9E:68:87:EA:75:72:A6:41:13:06:C8:7B:0C:C0:89:39:7A:63:54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/np5oh-p1cqZBEwbIewzAiTl6Y1Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/e6TAMBDrQYNXcs_vmUCLab7by-A.roa
Signing time:             Fri 03 Jun 2022 06:31:20 +0000
ROA not before:           Fri 03 Jun 2022 06:31:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49632
IP address blocks:        188.125.175.0/24 maxlen: 24
                          188.125.173.0/24 maxlen: 24
                          188.125.172.0/24 maxlen: 24
                          188.125.171.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68096704 (0x40f12c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e9e6887ea7572a6411306c87b0cc089397a6354
        Validity
            Not Before: Jun  3 06:31:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7ba4c03010eb41835772cfef99408b69bedbcbe0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c6:78:7b:87:1a:cb:ed:d9:24:f4:a5:a2:f3:
                    17:a8:fe:b6:1e:b6:16:80:bc:0c:89:7f:3e:71:b3:
                    ab:b1:b6:9e:bb:a6:08:c4:48:7b:73:8f:c0:dc:aa:
                    bc:0b:8c:8b:7c:88:6c:30:fd:95:69:62:c5:e7:02:
                    9e:b2:60:23:28:68:38:92:98:3a:90:b1:24:0c:90:
                    ce:14:c5:37:73:f3:99:27:15:d3:d5:ed:75:24:ca:
                    fb:44:3b:63:8e:28:19:0f:34:c4:86:75:f8:38:43:
                    21:97:12:13:fd:0b:03:fe:f5:fd:d4:60:75:c9:44:
                    01:55:c9:61:91:50:17:0f:7e:06:ed:66:4a:6c:98:
                    17:4f:44:2c:ef:16:6c:c9:32:92:48:15:f7:36:a4:
                    7f:a1:8e:a1:e7:9d:fb:0f:8a:c1:e0:8d:73:eb:5d:
                    15:68:93:83:eb:39:46:e7:84:aa:7d:28:72:64:9a:
                    16:f3:d4:fb:43:9b:4e:bd:ba:d4:9b:19:8b:be:c3:
                    69:8c:d7:20:7b:3e:03:24:e8:88:f4:96:4f:8c:40:
                    dd:26:ce:8c:02:6e:f1:3d:ae:9b:80:6a:71:da:9b:
                    fd:38:bc:cf:88:0d:dd:df:00:0d:35:eb:b5:1d:27:
                    81:d8:10:98:35:cf:3c:d9:58:1d:5e:03:64:a0:6e:
                    27:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:A4:C0:30:10:EB:41:83:57:72:CF:EF:99:40:8B:69:BE:DB:CB:E0
            X509v3 Authority Key Identifier:
                keyid:9E:9E:68:87:EA:75:72:A6:41:13:06:C8:7B:0C:C0:89:39:7A:63:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/np5oh-p1cqZBEwbIewzAiTl6Y1Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/e6TAMBDrQYNXcs_vmUCLab7by-A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/np5oh-p1cqZBEwbIewzAiTl6Y1Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.125.171.0-188.125.173.255
                  188.125.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:79:c9:3c:0e:74:79:7d:a8:b4:74:5e:4a:9a:90:d7:96:6e:
         78:bf:5e:f1:d3:ed:6f:c8:ab:f7:09:22:50:38:ef:ff:fa:e6:
         f1:f6:65:70:ef:65:35:2e:f4:87:39:45:09:63:fc:ed:05:6f:
         6f:25:d8:cd:b4:57:30:e5:f6:2e:d6:71:35:28:c8:ad:fb:9a:
         41:e3:98:31:f9:fe:32:8a:76:29:19:77:3e:75:12:3b:f7:e0:
         7d:03:a0:b0:cf:d4:66:c8:b0:8a:4e:17:fc:6d:1d:4e:97:b5:
         df:86:69:ca:e1:98:1f:d3:e0:bc:72:7c:52:d6:e9:4d:20:7f:
         8c:88:76:34:77:bc:b6:f3:d5:56:d2:01:77:ac:49:5d:99:4c:
         f2:b6:6a:60:70:16:60:6d:fa:6f:24:79:26:77:e3:5a:92:0a:
         2a:fe:f5:69:7d:e4:9b:95:7a:76:15:dd:2d:eb:72:93:57:bf:
         1c:65:af:a6:b9:b5:3c:9e:0a:f5:ef:ad:62:9b:2d:4d:7a:00:
         d5:10:55:83:4a:97:6d:26:c1:2d:c7:18:56:8b:db:38:11:6d:
         62:2b:14:4f:8a:01:1a:0a:89:01:0b:fc:c9:db:ca:9a:1c:a2:
         b0:d3:94:54:88:d7:2a:b8:20:f2:4f:f3:e3:d3:c5:a0:f3:17:
         56:4e:3c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:01 2024 by rpki-client on console-fra.rpki-client.org