Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/SKn_ntApjx1MFosg7IFD3Y2Yuio.roa
File:                     SKn_ntApjx1MFosg7IFD3Y2Yuio.roa (raw, json)
Hash identifier:          CGN7xxVCdkX1gAenLRIYuEfIdb6j28GJJDpWX3lHFfQ=
Subject key identifier:   48:A9:FF:9E:D0:29:8F:1D:4C:16:8B:20:EC:81:43:DD:8D:98:BA:2A
Certificate issuer:       /CN=adac830ccaa74783dd961fab241a228d7cc6f808
Certificate serial:       0BF612B9
Authority key identifier: AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/SKn_ntApjx1MFosg7IFD3Y2Yuio.roa
Signing time:             Fri 20 May 2022 12:29:29 +0000
ROA not before:           Fri 20 May 2022 12:29:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     8427
IP address blocks:        31.47.112.0/20 maxlen: 20
                          212.21.16.0/20 maxlen: 20
                          79.134.0.0/19 maxlen: 19
                          79.134.0.0/24 maxlen: 24
                          79.134.24.0/21 maxlen: 21
                          178.18.96.0/20 maxlen: 20
                          178.18.96.0/21 maxlen: 21
                          178.18.104.0/21 maxlen: 21
                          212.21.0.0/19 maxlen: 19
                          109.201.192.0/20 maxlen: 20
                          109.201.192.0/19 maxlen: 19
                          46.167.64.0/18 maxlen: 18
                          109.201.208.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 200676025 (0xbf612b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adac830ccaa74783dd961fab241a228d7cc6f808
        Validity
            Not Before: May 20 12:29:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=48a9ff9ed0298f1d4c168b20ec8143dd8d98ba2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a8:fb:ae:91:c0:82:34:f1:96:ba:83:46:22:
                    02:fc:d3:52:d4:1c:f9:5e:f7:6b:69:6f:39:e7:7b:
                    4c:b4:20:ec:20:ad:1e:db:ce:e3:26:3e:d5:cb:7b:
                    d4:80:cc:12:13:b9:43:b7:10:88:b5:55:d4:1b:54:
                    23:15:0a:a2:54:2e:1b:25:37:30:fa:bf:25:af:35:
                    98:9e:ea:72:da:59:e8:2f:38:c8:25:aa:f9:d7:d0:
                    e8:87:1f:c0:2c:05:b7:88:77:e5:5e:fc:ce:93:69:
                    cc:d4:9c:03:06:f1:91:dd:2d:fd:99:a7:94:dd:82:
                    85:c2:69:3d:bb:03:a1:42:f2:2b:b1:44:a7:da:1a:
                    ed:92:50:42:9e:af:b5:2a:64:cd:98:2f:b1:46:0b:
                    c3:23:98:ff:67:7c:46:8b:e9:41:b3:47:91:2b:52:
                    a0:79:4e:71:5e:45:11:27:7e:e4:8a:c7:42:41:9f:
                    04:10:22:e0:68:15:54:48:95:2b:d8:0d:df:44:e1:
                    92:22:9b:03:d9:d3:f5:9e:16:af:a2:3d:32:d5:44:
                    be:6c:50:fb:a7:6e:8f:a1:ed:84:a8:30:fd:33:04:
                    63:db:b5:8c:6a:f5:01:50:f1:b2:c5:f3:b0:d1:1f:
                    ca:eb:05:b0:e7:6e:25:10:38:7f:7e:e1:63:6f:22:
                    5a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:A9:FF:9E:D0:29:8F:1D:4C:16:8B:20:EC:81:43:DD:8D:98:BA:2A
            X509v3 Authority Key Identifier:
                keyid:AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/SKn_ntApjx1MFosg7IFD3Y2Yuio.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.47.112.0/20
                  46.167.64.0/18
                  79.134.0.0/19
                  109.201.192.0/19
                  178.18.96.0/20
                  212.21.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         39:69:07:f5:73:a7:11:4d:d3:85:8d:a6:28:10:29:05:3b:b2:
         3c:56:fc:ef:d7:4e:3c:93:05:17:17:dc:15:9f:09:3f:22:77:
         59:dc:01:76:e0:9d:3d:3d:14:86:26:bd:70:26:78:e5:3b:43:
         23:47:84:ce:5d:cd:5a:de:24:f4:50:04:2e:ff:da:e5:fc:8f:
         c9:59:9a:ab:67:d3:d0:1c:a6:22:9c:90:f3:28:4f:7c:bb:bd:
         64:c5:a9:77:3d:cf:91:74:59:57:a8:22:09:bb:00:06:84:7b:
         a0:86:ce:cc:f0:8a:4d:d8:1d:dc:e2:6f:6f:fc:95:17:d8:2b:
         e7:1b:67:3e:5c:fa:2f:2c:7b:c5:a3:9c:4b:78:11:b9:c2:3f:
         50:39:94:d7:66:98:c1:bf:4d:27:fb:19:f6:87:44:bb:88:e3:
         9f:4f:a7:ea:e0:21:29:fb:17:3a:9e:c9:8d:97:69:00:00:02:
         ed:3a:ce:d7:62:2f:9d:b2:36:8c:c9:55:fb:66:27:27:fc:02:
         64:87:01:c0:e9:aa:79:bd:16:4f:b4:4b:f9:4b:24:c0:0c:22:
         34:58:f7:40:07:6e:d6:9e:49:0b:7e:43:82:39:a5:45:ee:5d:
         d0:b2:b4:e0:90:9c:c6:18:cb:8d:b7:78:3b:1f:23:aa:3e:c8:
         77:e5:31:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:51 2024 by rpki-client on console-ams.rpki-client.org