Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/JWiAQWOT83Ub469b4YS8JRlihso.roa
File:                     JWiAQWOT83Ub469b4YS8JRlihso.roa (raw, json)
Hash identifier:          V4GFogWxsiQWBGl8Dq5q+NsScL18OBinM5pQiczYjK0=
Subject key identifier:   25:68:80:41:63:93:F3:75:1B:E3:AF:5B:E1:84:BC:25:19:62:86:CA
Certificate issuer:       /CN=b3b6d9026372cfce8fde823c3ef9c9f790aae14f
Certificate serial:       07131EF9
Authority key identifier: B3:B6:D9:02:63:72:CF:CE:8F:DE:82:3C:3E:F9:C9:F7:90:AA:E1:4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s7bZAmNyz86P3oI8PvnJ95Cq4U8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/JWiAQWOT83Ub469b4YS8JRlihso.roa
Signing time:             Sat 01 Jan 2022 11:54:01 +0000
ROA not before:           Sat 01 Jan 2022 11:54:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206706
IP address blocks:        92.119.60.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118693625 (0x7131ef9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3b6d9026372cfce8fde823c3ef9c9f790aae14f
        Validity
            Not Before: Jan  1 11:54:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=256880416393f3751be3af5be184bc25196286ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:11:55:79:32:a9:62:34:36:cd:c9:e0:ec:7d:
                    e8:87:e0:2a:81:a8:be:1d:23:a7:9e:7f:31:f0:50:
                    61:fc:c7:79:f6:dc:2a:88:48:52:07:74:90:f7:18:
                    9a:1f:20:3b:53:e7:b8:e8:e1:a3:ff:e2:38:10:56:
                    66:da:8f:45:4c:a4:8b:57:22:24:5f:34:cc:21:e4:
                    ff:3f:0d:e2:c2:12:0a:86:b3:20:32:fa:6a:6f:b7:
                    78:a3:ad:65:b8:d3:8b:2e:d5:3d:00:25:b9:e5:0c:
                    4d:3d:e1:37:3a:8d:69:a3:01:d0:fe:4b:5a:be:58:
                    c6:22:22:4d:f0:56:e0:29:fc:7c:d4:8c:65:ae:bc:
                    a4:d7:10:18:d5:c7:07:5f:12:b2:5b:a9:0e:29:3c:
                    c2:e2:aa:b0:ed:0c:0f:5f:36:b1:b9:59:fd:81:a0:
                    89:3d:30:85:03:76:80:45:80:41:a1:6c:9b:13:34:
                    0e:09:d9:0f:47:b4:6d:47:f4:c3:8b:f6:88:31:0b:
                    c3:dc:f7:48:6a:ca:c7:16:f5:a2:19:c9:3c:4d:cb:
                    30:25:84:93:f4:1f:98:43:24:d0:49:f3:d6:4b:9f:
                    a8:bd:7e:75:85:1f:9e:3a:20:fe:07:9e:67:a4:a8:
                    42:28:99:41:77:5a:cb:27:db:d8:f5:b7:20:5b:29:
                    4b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:68:80:41:63:93:F3:75:1B:E3:AF:5B:E1:84:BC:25:19:62:86:CA
            X509v3 Authority Key Identifier:
                keyid:B3:B6:D9:02:63:72:CF:CE:8F:DE:82:3C:3E:F9:C9:F7:90:AA:E1:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7bZAmNyz86P3oI8PvnJ95Cq4U8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/JWiAQWOT83Ub469b4YS8JRlihso.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.119.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:79:67:b5:4e:a4:ee:9b:1b:ff:b4:6d:7b:e8:84:a7:2f:0e:
         ea:4a:db:44:10:bd:e9:47:35:77:f9:01:28:74:2d:17:d4:ae:
         c5:31:fa:77:c3:1f:16:68:fc:c8:5d:a2:59:83:09:85:8d:e3:
         3a:98:c6:9e:ce:30:a9:f5:ad:ea:0f:de:4b:a1:bd:28:30:a3:
         3f:82:d6:ba:4d:8e:18:f9:37:6e:d7:19:90:71:8b:ab:c4:3a:
         ac:fb:bd:02:a6:73:e4:59:e8:c1:59:d7:b9:23:c1:1d:4c:b7:
         07:02:ba:fe:b3:52:c6:f5:dc:9b:4e:3e:a8:e4:26:14:34:e0:
         6e:f6:3d:df:71:cc:83:1b:bc:af:6a:23:ff:7c:61:b0:4b:c6:
         cf:2c:e5:28:b0:f3:1d:ac:4e:f0:a1:99:59:99:59:92:95:b8:
         2f:67:e8:f3:17:63:e6:a5:34:3e:22:c6:17:5f:30:1f:4c:ad:
         0f:59:5b:91:18:7b:74:c6:7a:79:c0:4f:73:87:96:56:0d:69:
         6b:0f:31:a3:ca:6b:d4:54:92:8c:0a:19:73:b4:c7:d3:f6:52:
         95:9c:58:44:f0:3f:f7:8a:de:77:53:84:09:4d:aa:12:de:b1:
         37:76:84:6f:56:35:aa:0e:30:8f:c4:63:b9:ee:23:54:e2:cb:
         40:13:28:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:40 2024 by rpki-client on console-ams.rpki-client.org