Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/eE1eOGaII7_TIEb3pti4AZIFglI.roa
File:                     eE1eOGaII7_TIEb3pti4AZIFglI.roa (raw, json)
Hash identifier:          o5cViXykRO2qa/jpwWB5r6gox79/9UH0Ov1qHXJRltU=
Subject key identifier:   78:4D:5E:38:66:88:23:BF:D3:20:46:F7:A6:D8:B8:01:92:05:82:52
Certificate issuer:       /CN=9076f77da841b7b94215b6fac2d41a71c2151601
Certificate serial:       02A6AF62
Authority key identifier: 90:76:F7:7D:A8:41:B7:B9:42:15:B6:FA:C2:D4:1A:71:C2:15:16:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kHb3fahBt7lCFbb6wtQaccIVFgE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/eE1eOGaII7_TIEb3pti4AZIFglI.roa
Signing time:             Fri 24 Jun 2022 09:32:47 +0000
ROA not before:           Fri 24 Jun 2022 09:32:47 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210776
IP address blocks:        2a13:1200:10::/44 maxlen: 44
                          2a13:1200::/44 maxlen: 44
                          2a13:1200:20::/44 maxlen: 44

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44478306 (0x2a6af62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9076f77da841b7b94215b6fac2d41a71c2151601
        Validity
            Not Before: Jun 24 09:32:47 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=784d5e38668823bfd32046f7a6d8b80192058252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:43:96:c4:c3:93:f5:6b:7e:f2:69:10:ce:83:
                    22:8d:26:0a:1b:b4:aa:8d:23:cd:11:2f:c1:19:76:
                    e2:43:1a:f0:53:1b:30:a6:ea:7b:06:2b:a5:cf:85:
                    c6:bb:78:89:c7:d3:52:c6:d1:0f:42:e8:98:a5:1f:
                    92:24:8e:db:c5:0f:de:9d:77:73:f5:69:63:52:b8:
                    84:7d:9f:07:3a:0b:fb:79:7b:78:fb:fe:38:41:90:
                    e0:b5:02:d0:fb:f3:94:6f:ec:6b:81:32:b7:02:56:
                    90:f6:d8:36:f4:04:23:21:7e:b4:fa:f3:53:22:65:
                    08:57:e7:1f:46:fe:18:7e:39:bf:06:0a:66:a7:f5:
                    4f:54:b6:a6:b0:7c:68:ec:7a:00:db:5a:1c:42:70:
                    4b:45:0e:6a:d5:bc:5f:cd:27:20:47:fe:d2:14:0f:
                    7e:9d:db:40:b2:67:7b:02:c3:96:e9:80:5e:ec:0e:
                    bf:4d:6d:83:6b:ec:4a:26:b8:b0:da:9c:a1:3a:47:
                    c6:82:9e:d0:14:2a:cd:66:23:e3:d3:fd:7b:e4:16:
                    87:70:0b:00:3b:f0:61:7d:92:ec:6e:64:91:b5:b9:
                    5f:bb:ec:4d:41:d3:ca:9f:cd:7d:85:c4:7e:2a:42:
                    d1:6a:0e:27:8f:2f:79:c3:9e:eb:b9:2f:cb:8e:fc:
                    eb:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:4D:5E:38:66:88:23:BF:D3:20:46:F7:A6:D8:B8:01:92:05:82:52
            X509v3 Authority Key Identifier:
                keyid:90:76:F7:7D:A8:41:B7:B9:42:15:B6:FA:C2:D4:1A:71:C2:15:16:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kHb3fahBt7lCFbb6wtQaccIVFgE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/eE1eOGaII7_TIEb3pti4AZIFglI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:1200::-2a13:1200:2f:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         85:f0:09:99:f2:0e:c7:1c:d0:6d:9e:ef:f4:99:22:8b:21:45:
         65:ee:1f:95:0d:eb:bf:48:6e:dc:91:24:60:85:e7:02:d6:51:
         ba:66:a1:e3:71:0e:b2:98:ae:90:d3:75:7a:89:0b:cb:17:d3:
         89:e6:f4:0a:48:41:d2:e2:f9:ee:80:27:75:15:79:52:df:93:
         8f:b7:07:f7:4f:d4:64:73:0a:d1:29:07:4b:02:e8:87:0a:da:
         9e:7a:77:59:42:25:8a:7a:20:b0:fe:a3:46:e7:1a:90:d0:8e:
         93:17:f5:a9:0d:0f:5d:ac:5c:8c:5c:84:c3:63:60:6f:22:b8:
         bb:db:03:aa:94:57:a6:fd:c9:7f:ef:51:6d:b4:ef:a0:a3:c8:
         ef:71:c5:e4:b7:80:eb:f3:b4:2f:95:8c:e1:45:19:3a:9c:25:
         fc:01:b3:ec:14:14:6f:4b:e7:6b:4e:c9:36:62:9d:05:64:d2:
         6c:09:91:f2:63:35:5e:72:c2:2e:89:d3:5d:c7:a0:40:93:a0:
         e2:f9:25:46:2d:d7:e6:bb:e2:9b:e3:4d:04:f1:dc:f5:40:9f:
         65:f4:6d:02:84:b7:a2:e2:cc:8e:4c:b8:73:4a:ab:8a:f6:c1:
         b6:09:83:ce:d2:c4:19:26:27:d8:7d:c6:03:2f:47:52:2f:d5:
         47:f8:d6:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:59 2024 by rpki-client on console-fra.rpki-client.org