Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/D17Apc45nv_tIoHn8mAThUPIUBA.roa
File:                     D17Apc45nv_tIoHn8mAThUPIUBA.roa (raw, json)
Hash identifier:          4oQro2cmqTZD9dHehQUZ5MOEAlKKdOEHHQk89UsgUYc=
Subject key identifier:   0F:5E:C0:A5:CE:39:9E:FF:ED:22:81:E7:F2:60:13:85:43:C8:50:10
Certificate issuer:       /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial:       18952045
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/D17Apc45nv_tIoHn8mAThUPIUBA.roa
Signing time:             Tue 14 Jun 2022 08:02:44 +0000
ROA not before:           Tue 14 Jun 2022 08:02:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     199735
IP address blocks:        46.243.179.0/24 maxlen: 24
                          178.170.249.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 412426309 (0x18952045)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
        Validity
            Not Before: Jun 14 08:02:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0f5ec0a5ce399effed2281e7f260138543c85010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:91:30:83:3a:b7:2b:a8:f9:10:a7:1f:51:b9:
                    cc:82:04:22:ed:9b:25:64:3d:99:3c:2a:19:07:7f:
                    85:54:6c:9f:e0:da:28:09:31:54:eb:b8:8a:01:0d:
                    25:6c:a8:72:c0:2d:f3:80:3c:a7:1c:2b:74:1a:fd:
                    b5:4b:0d:df:71:13:c4:f9:19:80:b7:e3:c2:a0:a6:
                    26:7b:5c:20:81:e4:75:6e:ea:e1:d2:8f:a0:b2:84:
                    00:5a:0d:f0:e8:e1:02:a5:82:d3:ba:17:da:45:ca:
                    73:ec:09:88:13:3e:54:09:ad:a6:8e:22:8f:9f:fc:
                    c9:f6:70:14:2d:35:a5:9d:34:81:78:5b:2e:4c:d7:
                    a8:b9:01:22:6a:58:29:ae:a5:1c:0d:d9:32:17:3d:
                    62:c9:c6:49:f2:41:bc:b7:9b:4d:7c:04:75:98:51:
                    a7:62:dc:71:34:1f:79:18:ee:2b:a2:d8:86:71:8e:
                    3a:0e:03:9e:01:8c:d0:cd:fc:c1:ff:a5:e1:b1:ed:
                    2e:44:66:8f:91:e3:b7:cf:e9:49:a9:dc:58:9a:71:
                    06:15:7d:6a:d1:cc:86:b4:1a:de:ea:b4:c7:d7:42:
                    fd:24:d0:11:01:59:29:3d:14:ed:85:72:e6:a4:01:
                    f2:8a:04:33:9b:09:3d:da:a0:11:f8:f4:64:12:30:
                    06:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:5E:C0:A5:CE:39:9E:FF:ED:22:81:E7:F2:60:13:85:43:C8:50:10
            X509v3 Authority Key Identifier:
                keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/D17Apc45nv_tIoHn8mAThUPIUBA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.243.179.0/24
                  178.170.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:44:59:15:4e:63:24:dd:ac:83:d4:b0:00:91:bb:0a:d9:f2:
         f2:8e:ad:70:78:83:a8:4e:b6:2d:a0:1a:43:9c:80:88:de:30:
         be:48:f2:28:3d:a7:8b:e6:a1:db:73:e5:e1:31:d3:91:28:c8:
         cb:71:a6:9e:8c:21:28:b4:54:7d:f4:ee:b0:af:20:de:8e:fa:
         f1:e5:8c:73:ec:5b:6c:aa:a7:fa:2c:0c:63:01:c9:17:f7:9c:
         78:ee:5e:81:56:4e:cb:16:ef:4f:42:12:b0:0a:67:9a:18:5c:
         05:2a:ae:31:f7:52:78:33:49:c2:61:3b:98:70:31:33:64:66:
         7f:d5:8a:20:e7:04:01:fb:33:68:56:d8:f3:dd:d4:4c:da:3a:
         f9:2e:15:13:7c:2b:28:6c:fa:25:c2:e0:93:2f:e3:82:cd:9d:
         50:64:59:dc:99:4a:9b:fa:d5:92:04:2c:c7:6d:9a:9a:1d:d8:
         23:d8:a8:3c:75:cc:0d:eb:4b:11:4a:89:e1:df:54:34:38:11:
         42:10:a4:91:75:d0:48:3b:78:d1:a4:11:25:4c:94:d0:a9:db:
         5c:09:06:41:3b:9d:2d:3b:d7:5b:bb:7c:22:5f:c3:ba:50:a3:
         5e:ac:1d:d6:2a:ca:f1:09:28:87:71:6f:c0:f1:9b:56:62:80:
         32:73:c3:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:33 2024 by rpki-client on console-ams.rpki-client.org