Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/2Eo0U8NoMNvf5tA1wVsRpUDFpVg.roa
File:                     2Eo0U8NoMNvf5tA1wVsRpUDFpVg.roa (raw, json)
Hash identifier:          zxc8xSF0pcY14+x4qOXhXNkcuEanQDikAuJPHlPt+VY=
Subject key identifier:   D8:4A:34:53:C3:68:30:DB:DF:E6:D0:35:C1:5B:11:A5:40:C5:A5:58
Certificate issuer:       /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial:       16E82960
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/2Eo0U8NoMNvf5tA1wVsRpUDFpVg.roa
Signing time:             Sat 01 Jan 2022 12:01:42 +0000
ROA not before:           Sat 01 Jan 2022 12:01:42 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207288
IP address blocks:        141.101.223.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 384313696 (0x16e82960)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
        Validity
            Not Before: Jan  1 12:01:42 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d84a3453c36830dbdfe6d035c15b11a540c5a558
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:90:f1:1f:84:60:a2:22:43:f7:32:d6:36:1b:
                    38:4f:4e:c1:bd:5a:b9:24:cc:e4:36:fc:c7:dd:c3:
                    4a:0f:48:dd:71:e9:14:ed:eb:70:3f:92:0f:15:5b:
                    97:03:08:30:04:b8:5c:11:b7:ee:f6:06:18:0d:ba:
                    da:8b:17:c9:8f:58:f4:82:30:20:83:06:f1:55:05:
                    b9:94:95:1d:d6:2e:c0:e9:42:96:f9:c3:67:29:16:
                    98:b7:28:0b:2c:6b:7d:3a:b4:ba:f6:15:5c:db:7f:
                    f4:95:bf:51:32:61:da:12:7d:f7:dc:3a:29:80:6a:
                    ca:ae:cd:cd:19:e6:e2:df:e8:67:fe:44:6b:a4:ab:
                    1e:90:47:09:39:c8:e8:ec:7c:9b:9b:80:5e:43:74:
                    b3:ec:de:0d:a3:9a:a5:85:81:e5:b7:a7:86:a6:ca:
                    9c:a8:c9:5f:2c:84:8a:33:e1:97:6c:28:8e:40:95:
                    5f:3c:f8:de:6e:b4:02:1f:1d:b8:b3:18:87:d4:b4:
                    8f:d2:ef:5e:9a:18:bc:42:54:4f:ca:a2:8a:2f:84:
                    1d:7d:d7:91:09:28:df:a6:23:a5:d8:c8:6c:9f:8e:
                    00:4f:b9:42:c2:6e:f4:22:b4:44:58:86:ff:73:13:
                    ec:e6:92:41:bc:c7:01:e8:fe:82:58:9f:85:10:66:
                    5e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:4A:34:53:C3:68:30:DB:DF:E6:D0:35:C1:5B:11:A5:40:C5:A5:58
            X509v3 Authority Key Identifier:
                keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/2Eo0U8NoMNvf5tA1wVsRpUDFpVg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.101.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:e6:25:97:c5:30:1b:f1:61:34:93:52:31:60:12:95:68:e2:
         16:df:b7:55:5e:7d:d0:6c:c3:65:a1:59:08:44:68:7d:16:b5:
         4f:6c:dc:e7:9d:87:7c:48:70:dd:4b:17:a5:3d:7e:cc:9d:98:
         73:59:ea:ec:18:8f:90:72:bd:74:50:d9:76:9b:c3:9a:9b:95:
         93:8e:e1:67:06:fd:1a:d1:ab:a7:d6:5a:82:6a:fe:db:6a:62:
         b8:25:23:5d:46:7e:35:23:21:f6:b0:35:81:5f:e8:94:78:b6:
         16:05:18:a1:de:95:df:04:82:c1:45:e6:67:37:49:9a:c5:f1:
         85:6e:ea:0b:52:5c:ce:1d:f0:05:b5:ad:23:82:09:5e:9b:c8:
         af:b9:4e:83:23:31:08:de:0c:c6:44:37:1e:4e:57:b0:63:49:
         d1:bd:ca:5e:87:5b:40:ff:7e:bf:f0:26:5c:ed:4f:6a:52:54:
         05:be:eb:2c:55:02:8a:a5:51:f4:27:c2:9d:ca:97:36:0c:0a:
         75:93:f9:95:31:73:79:75:5c:ca:cf:33:96:6e:1f:c0:07:ca:
         4d:ee:db:c6:91:ea:4e:df:32:5b:bc:98:d9:d1:5b:b1:de:7d:
         f0:58:06:62:83:87:7a:cd:97:17:0e:86:4a:84:85:0d:65:1b:
         98:b9:75:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:33 2024 by rpki-client on console-ams.rpki-client.org