Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/9Mg1qbRIVpzVnUvfcwtLq8UOaWM.roa
File:                     9Mg1qbRIVpzVnUvfcwtLq8UOaWM.roa (raw, json)
Hash identifier:          p1QUZEVm9rmFsMXRqEwW8lIO14wtHmvUjr9cDJ7HlOs=
Subject key identifier:   F4:C8:35:A9:B4:48:56:9C:D5:9D:4B:DF:73:0B:4B:AB:C5:0E:69:63
Certificate issuer:       /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial:       189772AE
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/9Mg1qbRIVpzVnUvfcwtLq8UOaWM.roa
Signing time:             Tue 14 Jun 2022 08:04:45 +0000
ROA not before:           Tue 14 Jun 2022 08:04:45 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49200
IP address blocks:        46.243.213.0/24 maxlen: 24
                          46.243.208.0/24 maxlen: 24
                          46.243.207.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 412578478 (0x189772ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
        Validity
            Not Before: Jun 14 08:04:45 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f4c835a9b448569cd59d4bdf730b4babc50e6963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d1:02:f2:27:6d:f3:36:09:1d:c0:21:da:9b:
                    1c:ed:38:93:0d:b7:41:26:70:97:7b:4e:7a:2c:bb:
                    c2:08:74:33:0b:60:84:6d:55:6d:fd:ba:27:82:7f:
                    42:50:c0:2d:19:05:39:2b:55:c1:24:5f:24:bd:09:
                    22:f8:fb:33:9f:51:ec:d3:b1:09:1c:65:82:37:72:
                    4c:34:b1:97:26:9b:50:3c:35:f8:8b:0f:5c:ee:53:
                    5c:00:f9:b3:e5:1d:93:55:ef:a6:9c:a6:b3:4e:84:
                    12:00:ce:4c:8b:88:db:3f:5c:ea:c4:37:52:8d:f1:
                    79:8f:c0:31:3e:1d:94:0e:5a:5a:82:61:1b:76:ea:
                    a7:bb:c1:14:30:a5:27:1f:59:42:58:5b:56:bf:b0:
                    1c:1a:7b:20:96:89:1d:76:80:1e:d4:74:55:05:e7:
                    0a:4d:79:e2:c5:80:13:72:36:9c:1e:f9:cf:b0:6f:
                    92:28:e2:3e:25:e8:25:a6:fe:2c:e7:77:a9:c9:c9:
                    de:12:a3:e7:6b:cb:37:52:d3:0c:33:b4:d5:67:b6:
                    4f:e3:72:c3:73:aa:c4:d0:0a:68:ba:b4:ed:26:52:
                    62:80:f4:72:38:d3:6c:9a:45:50:82:a7:25:c3:72:
                    c8:c5:e3:ee:82:b9:27:60:26:91:12:46:86:c7:98:
                    64:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:C8:35:A9:B4:48:56:9C:D5:9D:4B:DF:73:0B:4B:AB:C5:0E:69:63
            X509v3 Authority Key Identifier:
                keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/9Mg1qbRIVpzVnUvfcwtLq8UOaWM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.243.207.0-46.243.208.255
                  46.243.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:07:99:9d:f6:41:23:89:7c:52:56:89:e6:95:0d:f7:72:a0:
         68:52:71:ba:3e:1e:8b:15:53:16:e7:2b:97:e3:b2:3a:f0:41:
         d0:45:f7:05:6b:0b:00:91:f9:29:8a:2d:70:2f:9d:0c:8b:c9:
         0f:b5:c5:ba:95:4a:ef:2b:c2:fb:fa:3a:68:ba:26:36:99:40:
         c8:79:bf:40:f0:ec:e4:b1:6e:f6:cd:86:ce:4d:09:a9:ad:3f:
         e9:f1:92:d4:33:9b:1b:ab:47:38:d1:ab:b8:af:fb:06:62:18:
         be:bf:23:d2:c7:6f:7e:8b:4b:66:23:90:a0:1c:f6:d2:3e:a1:
         0d:fc:84:1e:71:32:14:94:4d:b6:4c:dd:14:75:2d:eb:2f:52:
         87:b8:ad:e1:e3:d5:b6:f0:56:e3:40:a3:52:b9:4a:ae:95:fc:
         86:71:2c:81:88:21:3a:46:f3:9d:2a:80:d6:57:ee:c0:3b:33:
         55:9c:97:1d:6b:22:c3:ce:ab:e9:a4:e3:ec:31:97:23:19:77:
         fd:3b:61:37:57:5c:06:89:c1:a2:d1:7e:a2:1a:84:21:9f:2b:
         84:61:e0:bc:7e:93:e0:c0:0b:34:c6:5b:62:6c:6b:72:64:39:
         f4:84:0e:cd:16:bd:c6:f2:94:1c:a3:39:63:7f:48:d4:1b:f2:
         be:f5:86:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:38 2024 by rpki-client on console-fra.rpki-client.org