Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/Ow14Sen-FBzoPbZmDv-dz0fZ0F4.roa
File:                     Ow14Sen-FBzoPbZmDv-dz0fZ0F4.roa (raw, json)
Hash identifier:          ZuVraD6gnr3P5KeLPcGv0z5+WJy0UJPMOTNWRNibpuU=
Subject key identifier:   3B:0D:78:49:E9:FE:14:1C:E8:3D:B6:66:0E:FF:9D:CF:47:D9:D0:5E
Certificate issuer:       /CN=bca0ec59564324237420d506b9b498d752ee2168
Certificate serial:       01856F021E7C86DC5B4381D06C7AE60C8696
Authority key identifier: BC:A0:EC:59:56:43:24:23:74:20:D5:06:B9:B4:98:D7:52:EE:21:68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vKDsWVZDJCN0INUGubSY11LuIWg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/Ow14Sen-FBzoPbZmDv-dz0fZ0F4.roa
Signing time:             Sun 01 Jan 2023 20:24:47 +0000
ROA not before:           Sun 01 Jan 2023 20:24:47 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     203476
IP address blocks:        46.226.104.0/22 maxlen: 22
                          95.142.160.0/20 maxlen: 20
                          217.70.188.0/22 maxlen: 22
                          92.243.0.0/19 maxlen: 20
                          2001:4b98:dc6::/48 maxlen: 48
                          2001:4b98:dc4::/48 maxlen: 48
                          2001:4b98:dc5::/48 maxlen: 48
                          2001:4b99:1::/48 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:02:1e:7c:86:dc:5b:43:81:d0:6c:7a:e6:0c:86:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca0ec59564324237420d506b9b498d752ee2168
        Validity
            Not Before: Jan  1 20:24:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=3b0d7849e9fe141ce83db6660eff9dcf47d9d05e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:8b:da:d5:83:05:f2:24:6e:2a:6a:72:4a:01:
                    fa:ec:27:9f:65:0e:55:25:98:07:ba:f8:30:b3:bd:
                    3b:28:17:5e:16:0a:08:3e:50:c7:25:a8:22:42:fa:
                    d2:0e:96:88:ed:7b:af:50:7c:ed:7d:fd:ae:71:eb:
                    33:26:64:71:78:bf:4f:98:ab:2f:61:59:5b:a2:2c:
                    7b:a0:9a:8f:c3:9a:82:40:bc:10:ed:53:c0:97:48:
                    fa:47:00:ac:b1:31:21:39:3d:c7:42:7f:93:f8:9b:
                    c1:b7:74:6e:1a:09:af:41:87:47:3c:01:d7:83:ef:
                    89:c0:a0:51:6c:81:9e:d9:21:b1:20:17:9c:08:78:
                    d2:e8:04:a1:b1:52:29:e4:06:d3:db:9d:be:05:a5:
                    af:11:dd:44:38:2a:7d:38:54:80:a4:2d:50:2a:2d:
                    e3:31:93:4d:99:b8:0a:89:c3:ed:5a:f6:af:21:8f:
                    66:b3:ca:b6:e7:f8:92:ec:40:37:b1:71:ae:16:97:
                    ef:f3:80:c0:8f:10:d0:31:e8:4a:96:ee:36:39:23:
                    9f:b7:14:2d:b5:a4:73:6b:da:0d:24:2b:9c:e2:e5:
                    42:2b:cd:4d:6b:57:1d:7b:99:16:45:54:53:8f:aa:
                    88:71:0f:b1:35:20:b5:5f:a3:65:2b:f6:55:90:f2:
                    c7:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:0D:78:49:E9:FE:14:1C:E8:3D:B6:66:0E:FF:9D:CF:47:D9:D0:5E
            X509v3 Authority Key Identifier:
                keyid:BC:A0:EC:59:56:43:24:23:74:20:D5:06:B9:B4:98:D7:52:EE:21:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vKDsWVZDJCN0INUGubSY11LuIWg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/Ow14Sen-FBzoPbZmDv-dz0fZ0F4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.226.104.0/22
                  92.243.0.0/19
                  95.142.160.0/20
                  217.70.188.0/22
                IPv6:
                  2001:4b98:dc4::-2001:4b98:dc6:ffff:ffff:ffff:ffff:ffff
                  2001:4b99:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         52:97:78:fa:0f:55:e0:86:cb:2e:d2:d8:28:f2:af:f6:3f:c8:
         25:f6:e0:7b:de:d7:1e:0c:78:e5:29:1b:82:93:54:89:0b:c1:
         88:13:64:17:65:b7:29:b6:06:99:56:94:f1:ea:dc:5b:e2:7a:
         00:7e:bb:67:74:39:4d:c1:4a:02:73:0a:1d:30:3b:25:a0:99:
         fe:af:73:89:54:48:a7:ed:3b:0d:e9:cb:83:b1:be:4b:f4:40:
         d7:c1:3c:93:bb:f7:d6:b5:95:0e:3b:a5:d8:3c:bd:a1:86:3d:
         5c:b4:26:08:69:ce:14:fe:da:34:d3:70:f7:12:d9:0c:95:65:
         e7:df:6a:54:12:f2:41:1e:ad:e1:3d:5d:54:22:57:47:ab:5e:
         22:48:50:21:0c:f2:af:9c:9b:e1:99:20:69:c1:0f:9d:62:c0:
         d8:3f:22:94:66:31:0c:1a:29:e8:76:c2:a5:0d:e5:8d:17:cd:
         37:ca:4c:bc:af:42:60:73:67:38:93:80:63:4f:ca:9b:8f:24:
         d2:23:1b:ef:51:75:35:c4:9c:1f:d9:16:00:dc:f1:e9:5a:d2:
         d8:3c:46:4e:ef:dd:14:b4:b0:ea:32:9b:5c:19:c2:e4:cb:9e:
         8c:70:f0:66:9a:8c:8b:34:70:fd:fe:bb:24:53:d4:73:01:9d:
         5c:64:c0:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:49:10 2025 by rpki-client