Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/eUJvc4ms_1Y0RxPCPPn4XzkLRYw.roa
File:                     eUJvc4ms_1Y0RxPCPPn4XzkLRYw.roa (raw, json)
Hash identifier:          6g6eliI3jJiGsigSxvDtTdO74+9J7YpqrI2tVKHcrAQ=
Subject key identifier:   79:42:6F:73:89:AC:FF:56:34:47:13:C2:3C:F9:F8:5F:39:0B:45:8C
Certificate issuer:       /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial:       0A763252
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/eUJvc4ms_1Y0RxPCPPn4XzkLRYw.roa
Signing time:             Sat 16 Apr 2022 07:00:20 +0000
ROA not before:           Sat 16 Apr 2022 07:00:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     205794
IP address blocks:        2a0e:aa07:e039::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 175518290 (0xa763252)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
        Validity
            Not Before: Apr 16 07:00:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=79426f7389acff56344713c23cf9f85f390b458c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:43:18:4c:04:85:73:bf:fe:1e:4c:b6:be:96:
                    a0:dc:20:c0:70:65:67:24:7a:79:4d:73:9e:1a:19:
                    a1:1d:9e:62:09:47:89:2e:3a:bf:78:de:72:e8:2f:
                    b6:c5:03:25:85:d8:cd:d6:97:c7:1d:76:2c:e4:b2:
                    36:27:f1:5c:ef:6b:4e:1a:5f:42:e0:c6:3c:52:b3:
                    55:09:05:38:45:fe:24:34:62:39:f2:63:57:4a:4b:
                    74:27:5e:6b:b2:76:da:f2:3b:3f:aa:b6:9e:25:ba:
                    59:e4:5d:c7:a3:36:8c:df:12:ae:bb:da:8f:80:77:
                    87:1c:8e:88:12:a3:52:23:4d:96:a1:99:b7:4b:07:
                    07:21:2f:c4:09:d6:6f:81:08:30:e3:f8:33:66:d6:
                    fb:83:0a:34:5c:4b:e1:c9:7b:34:0f:9b:9f:83:64:
                    5a:65:f1:44:24:b3:47:bb:13:9b:ee:6a:9d:7e:76:
                    56:a7:3b:69:f4:7d:35:52:db:e3:54:28:79:cc:c2:
                    8e:a5:a6:a5:ae:37:e3:34:4c:17:ba:b4:18:b7:80:
                    4e:00:f9:c1:9b:06:ed:fa:0d:ad:14:6d:30:d7:dc:
                    9a:8d:5b:2d:84:db:fe:55:37:1c:ae:8f:8d:7b:4e:
                    0f:2a:b6:c7:8e:76:8f:86:f8:d2:a6:76:69:72:7f:
                    d9:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:42:6F:73:89:AC:FF:56:34:47:13:C2:3C:F9:F8:5F:39:0B:45:8C
            X509v3 Authority Key Identifier:
                keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/eUJvc4ms_1Y0RxPCPPn4XzkLRYw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:aa07:e039::/48

    Signature Algorithm: sha256WithRSAEncryption
         8a:35:15:1d:88:c1:4b:3e:d6:d0:5a:93:7d:29:46:12:8a:63:
         32:f9:84:0e:63:a9:13:2c:ad:26:99:42:d0:b6:38:df:58:56:
         64:5a:1b:ea:b5:3d:de:c0:38:2f:00:a3:a1:5a:8e:59:3e:47:
         71:76:b4:21:f5:b5:73:7d:19:89:15:e5:17:89:2d:f7:73:8e:
         f6:0e:af:d8:77:cb:6c:51:11:6c:11:75:6c:b2:95:89:6d:d2:
         69:ca:7b:04:f9:a9:6f:f8:b1:ba:f8:5d:e7:aa:db:df:04:26:
         42:93:34:11:e7:bc:e4:98:04:02:34:db:bc:36:13:43:15:e9:
         f8:e9:25:37:61:c6:c0:14:36:19:87:85:02:4d:27:33:22:76:
         70:7d:a8:aa:9d:2e:40:a9:e1:55:9f:8e:00:a7:fe:75:21:c1:
         f3:38:89:c6:92:5e:c6:0d:c7:16:db:ab:43:44:36:6e:b2:9f:
         f1:65:06:8d:01:bd:c0:dc:05:6a:e4:6e:5f:02:5d:26:33:3e:
         98:1d:47:45:1b:d4:0d:d7:6d:5e:11:9b:27:5e:53:b2:fc:ab:
         8d:57:c0:9e:57:f2:19:56:6b:b7:b9:6b:8d:6f:69:bf:03:df:
         49:d4:98:c9:31:d5:61:4d:4f:a6:47:b4:44:f1:09:04:67:2a:
         73:88:f4:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:37 2024 by rpki-client on console-fra.rpki-client.org