Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/tAd-oP2wJobrM_rniceJqs0Gu_Q.roa
File:                     tAd-oP2wJobrM_rniceJqs0Gu_Q.roa (raw, json)
Hash identifier:          zQYUY0auN2viJoeyigVx48ckuTcTtJlhTkd19JW448o=
Subject key identifier:   B4:07:7E:A0:FD:B0:26:86:EB:33:FA:E7:89:C7:89:AA:CD:06:BB:F4
Certificate issuer:       /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial:       18AEC3B5
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/tAd-oP2wJobrM_rniceJqs0Gu_Q.roa
Signing time:             Tue 21 Jun 2022 12:41:45 +0000
ROA not before:           Tue 21 Jun 2022 12:41:45 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207676
IP address blocks:        46.243.179.0/24 maxlen: 24
                          178.170.251.0/24 maxlen: 24
                          141.101.249.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 414106549 (0x18aec3b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
        Validity
            Not Before: Jun 21 12:41:45 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b4077ea0fdb02686eb33fae789c789aacd06bbf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:26:e8:3b:3d:27:8a:ab:4f:d2:38:fe:3c:c6:
                    ca:5e:e5:e1:cd:33:d2:b1:af:09:cb:13:c1:ad:09:
                    f0:91:cc:88:01:8e:8d:1f:20:15:e3:01:97:b3:17:
                    21:61:5d:e6:61:60:60:51:37:f1:96:03:1e:ec:c8:
                    2a:3e:f2:25:58:28:6f:10:3c:95:91:43:a8:ee:c3:
                    ab:b9:63:e2:eb:2b:83:73:80:f2:0d:cd:95:e4:ed:
                    7d:59:7d:91:e5:c9:a2:30:7d:69:b0:51:2a:1f:1d:
                    06:d3:06:72:29:e4:a3:6b:45:4b:3f:ba:92:a3:30:
                    36:0d:a7:2f:ac:b8:f9:c9:59:5a:b2:4e:46:ac:22:
                    0c:7e:42:66:5e:3c:e9:0c:23:0b:e9:9e:ec:f8:23:
                    2c:46:34:35:64:81:f6:63:fe:12:9e:b9:f6:81:ff:
                    ae:b6:c8:ca:9f:3d:a1:ae:a8:1e:e0:7b:19:c4:03:
                    a4:d3:d7:dd:cd:3b:af:43:6a:f2:77:9e:21:3e:83:
                    d7:1b:76:a3:a1:a6:ed:63:ee:31:3d:13:ff:19:5e:
                    43:9c:76:3b:40:b4:63:8d:bb:7f:9e:2d:3e:07:7a:
                    26:90:c6:07:e1:63:34:7f:3f:c8:29:68:1c:d9:28:
                    b2:a3:4a:5e:72:3a:2f:73:39:ac:ed:d9:18:48:76:
                    4c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:07:7E:A0:FD:B0:26:86:EB:33:FA:E7:89:C7:89:AA:CD:06:BB:F4
            X509v3 Authority Key Identifier:
                keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/tAd-oP2wJobrM_rniceJqs0Gu_Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.243.179.0/24
                  141.101.249.0/24
                  178.170.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:e6:3d:89:0a:ab:36:2c:be:73:df:3a:fc:bc:35:55:e5:db:
         54:95:b0:02:02:ff:3b:cd:ed:7b:31:1b:54:7b:f6:1e:97:e9:
         09:62:e3:9c:33:46:20:84:db:85:2f:b8:46:5f:df:3c:4f:79:
         e5:67:88:7f:fe:d4:fa:7c:11:29:62:9e:ea:f9:3e:f1:ba:17:
         6d:f3:75:fd:5d:1d:50:e7:9c:80:67:c7:fe:c7:74:99:ad:1a:
         a4:35:4c:90:68:d7:97:0f:71:c0:d3:cf:5e:cf:7c:17:c9:75:
         43:c2:5e:43:5f:80:2a:2e:68:79:a9:b9:c7:5d:b6:e0:23:69:
         c8:4c:4b:6d:92:1e:2b:d0:9e:65:4e:5b:27:9d:76:9d:c4:3c:
         15:dd:05:a5:b1:54:6d:fc:17:a1:15:4a:f5:95:91:a5:20:b4:
         84:da:d6:bc:fd:10:4d:0d:0e:0a:c4:b4:ce:1f:6c:bf:9b:cd:
         40:bf:b1:f9:dc:a9:1b:99:4d:5a:22:d6:d4:66:ab:62:cd:07:
         0d:dc:78:dc:0a:8f:0b:e9:8c:dd:7c:a1:62:de:84:01:7d:a6:
         12:8b:86:d9:9f:a8:6f:c4:35:19:f1:bb:32:7d:5d:ad:64:a8:
         ba:7b:5c:7c:cb:10:58:ad:5b:02:ee:c0:03:47:93:2d:d4:21:
         3e:13:55:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:38 2024 by rpki-client on console-fra.rpki-client.org