Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/6sYGJ_MDo8DWqm6Kfle1qLtp2Cw.roa
File:                     6sYGJ_MDo8DWqm6Kfle1qLtp2Cw.roa (raw, json)
Hash identifier:          QZwp8qlH9fOdSgL/dUk/7RurXQbfiJy1NXhsGiELL04=
Subject key identifier:   EA:C6:06:27:F3:03:A3:C0:D6:AA:6E:8A:7E:57:B5:A8:BB:69:D8:2C
Certificate issuer:       /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial:       16E9A4C0
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/6sYGJ_MDo8DWqm6Kfle1qLtp2Cw.roa
Signing time:             Sat 01 Jan 2022 12:01:43 +0000
ROA not before:           Sat 01 Jan 2022 12:01:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207935
IP address blocks:        141.101.221.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 384410816 (0x16e9a4c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
        Validity
            Not Before: Jan  1 12:01:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=eac60627f303a3c0d6aa6e8a7e57b5a8bb69d82c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:5e:04:28:70:53:0b:24:d4:8d:9b:64:bc:1b:
                    30:04:a2:27:79:b7:67:b6:cd:5e:ff:9c:70:7b:40:
                    60:0d:9d:15:21:51:dd:74:68:ef:76:80:b2:6b:51:
                    fd:b6:a3:b9:43:06:d4:66:e1:69:69:4e:b5:3e:8e:
                    9c:56:c0:06:3f:60:e1:a2:02:a8:67:aa:14:ba:09:
                    0e:6c:d2:0b:ad:85:9c:64:f0:69:e4:5b:d0:89:45:
                    cf:61:b3:bc:00:16:f0:1d:e1:ea:7b:11:8c:41:7d:
                    d4:76:b6:5a:a2:31:7b:f0:84:7e:33:c1:4d:f0:5b:
                    ae:c0:b5:63:e8:41:e8:dc:8c:96:57:29:d3:0d:60:
                    6f:e6:69:73:fa:af:fe:cd:65:0d:b0:58:a7:38:a1:
                    ab:35:b9:d6:74:31:a2:e8:ae:23:45:b0:66:b2:5d:
                    ec:92:1e:4d:71:f7:4c:63:d8:cd:eb:3a:56:a6:36:
                    b1:f1:79:ae:2a:0e:4d:fa:8a:e1:26:f0:63:c2:05:
                    d3:72:13:22:62:7e:3d:c5:8d:10:9a:ea:5a:f1:08:
                    09:74:b9:d0:3e:aa:e4:69:ac:ac:03:6f:21:df:9f:
                    28:f2:ed:45:8c:4a:be:3b:04:c9:45:a5:a3:e9:82:
                    a1:80:08:25:82:55:01:a7:e1:46:24:71:d3:0b:4d:
                    c7:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:C6:06:27:F3:03:A3:C0:D6:AA:6E:8A:7E:57:B5:A8:BB:69:D8:2C
            X509v3 Authority Key Identifier:
                keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/6sYGJ_MDo8DWqm6Kfle1qLtp2Cw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.101.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:3c:f0:49:ea:24:fb:c5:50:4e:d1:19:13:68:87:39:27:3f:
         9a:e0:aa:60:c5:89:e8:03:08:2c:ec:fd:33:8d:3a:c1:d4:6a:
         6d:77:ae:8b:b2:28:37:c4:d9:92:33:6b:57:a5:1f:77:d0:15:
         a3:d7:61:01:dc:32:13:25:aa:28:64:1e:7c:6c:a3:2b:a0:75:
         37:d7:4d:7e:ca:10:85:f4:ed:e7:a5:fe:b6:b2:54:38:db:24:
         8b:eb:1f:66:e2:ed:4e:ca:3d:1a:26:2a:c5:6f:1e:dd:a0:13:
         23:05:6b:11:b6:54:54:7a:9f:ea:fe:2d:e8:25:0a:3a:e7:0d:
         cf:5e:8d:46:93:e3:60:09:f2:82:86:b4:6c:1d:1c:5a:46:26:
         f2:6c:66:6c:29:b0:40:d6:ad:13:e2:7a:73:ab:88:b0:91:9e:
         c9:10:c7:12:7a:13:84:dd:bf:6b:c7:5d:c2:4f:80:50:c5:66:
         2b:6f:e0:2a:d5:1d:38:c3:7e:a6:11:f0:d9:ca:20:26:b3:7d:
         ed:c4:e6:1a:2e:af:8d:9c:ab:a6:e7:32:fd:51:51:79:46:4e:
         6d:19:26:90:17:26:95:6e:b8:fc:23:b6:25:34:4e:81:1a:42:
         de:71:27:77:1f:31:a0:73:9a:08:b4:24:99:1b:bb:20:a8:33:
         a3:5c:5e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:32 2023 by rpki-client on console-ams.rpki-client.org