Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/2W82h-J1bsWuXnX1tq4tIcrLGbA.roa
File:                     2W82h-J1bsWuXnX1tq4tIcrLGbA.roa (raw, json)
Hash identifier:          WdXsSlCsrpJ43F1qaKDVpmFIiIGmwDzCkESbSkOVNEg=
Subject key identifier:   D9:6F:36:87:E2:75:6E:C5:AE:5E:75:F5:B6:AE:2D:21:CA:CB:19:B0
Certificate issuer:       /CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Certificate serial:       19115D3E
Authority key identifier: 9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/2W82h-J1bsWuXnX1tq4tIcrLGbA.roa
Signing time:             Sat 01 Jan 2022 03:55:46 +0000
ROA not before:           Sat 01 Jan 2022 03:55:46 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     12310
IP address blocks:        2a02:2a00::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 420568382 (0x19115d3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e459aa4602bffa2d2650ba66818458c89fc4582
        Validity
            Not Before: Jan  1 03:55:46 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d96f3687e2756ec5ae5e75f5b6ae2d21cacb19b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:01:90:89:56:c2:75:b6:87:56:97:45:d3:ef:
                    60:ad:ab:88:24:7a:52:3c:19:61:56:c2:61:1b:ca:
                    b4:3f:c6:47:33:ef:de:8c:06:86:e5:ed:f3:cf:bd:
                    fc:88:94:25:cf:ea:9c:80:a7:a5:1d:30:cc:24:fd:
                    05:48:23:83:50:4e:fd:4a:75:27:fe:28:20:dd:9e:
                    e4:e6:be:41:4e:1a:2a:64:76:e9:5f:26:31:21:00:
                    f5:47:7a:f0:c4:6f:17:07:e7:55:5c:ec:74:8e:7c:
                    7d:98:75:b8:fc:fe:7a:a4:98:3f:71:2c:1c:c8:a8:
                    a9:68:28:93:90:bc:01:1b:00:3a:cb:a8:2c:a8:1a:
                    23:7e:14:2b:a6:b0:d1:47:9d:cd:50:51:5c:20:b6:
                    a3:bc:61:c4:3f:d6:ab:81:07:81:0e:e8:43:b0:58:
                    42:ed:35:e2:c4:03:44:91:94:d1:86:29:d7:7e:9b:
                    53:08:be:30:87:77:29:f7:3f:b7:19:b0:ad:df:46:
                    3e:cf:de:71:7f:32:6b:b8:e9:cb:a7:a2:d8:45:d5:
                    34:9d:75:5f:84:51:b2:ec:c4:27:6d:12:62:6a:8a:
                    43:b8:b4:65:9f:85:d2:c0:03:15:ab:d0:d2:20:ed:
                    03:a3:34:96:32:7d:e0:89:a7:a6:e8:17:65:c6:8c:
                    67:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:6F:36:87:E2:75:6E:C5:AE:5E:75:F5:B6:AE:2D:21:CA:CB:19:B0
            X509v3 Authority Key Identifier:
                keyid:9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/2W82h-J1bsWuXnX1tq4tIcrLGbA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a02:2a00::/32

    Signature Algorithm: sha256WithRSAEncryption
         56:f5:ba:ce:89:5a:f2:0d:9a:3d:95:f2:e1:62:9c:38:9f:46:
         48:24:11:86:3e:47:82:ae:0c:9d:a9:f2:c3:9e:51:e7:9f:dc:
         c2:2e:43:58:5b:44:3a:cd:f3:1b:7b:8b:62:4d:40:f1:52:d0:
         81:c4:47:66:6e:42:71:88:17:b9:39:38:83:b3:fd:02:0f:b0:
         df:f9:16:b9:1a:34:52:b3:94:8e:7e:fb:cd:68:7c:5f:9a:c0:
         c5:44:fb:e4:87:45:0c:38:01:04:eb:08:d9:d1:c9:cc:84:58:
         ea:2b:07:38:08:b3:0b:ff:61:42:20:99:dc:f0:ca:23:3b:3c:
         ef:12:45:4d:2d:ab:46:8a:c5:e4:24:36:e3:3d:a3:a9:71:70:
         af:bb:88:8f:45:1b:53:99:0c:81:11:6b:cd:2d:aa:4d:52:63:
         4e:c4:c6:ab:74:73:19:33:a2:b6:4a:97:e5:93:34:07:08:40:
         c7:f0:ea:fd:a7:b2:61:db:d6:b5:48:52:de:77:7c:69:fb:eb:
         95:ab:6b:ce:11:e6:c6:59:b3:d5:3a:76:1d:d8:ba:47:c5:df:
         10:88:98:a6:b2:51:09:56:df:c1:7c:ec:b2:28:22:26:bb:a6:
         68:14:50:a7:bc:9e:4b:69:a0:1d:b9:cc:ee:14:3c:53:fe:5c:
         98:61:72:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:47 2024 by rpki-client on console-ams.rpki-client.org