Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/n6rx3nbWDQ7mAeFt-Rzf_rxFyoE.roa
File:                     n6rx3nbWDQ7mAeFt-Rzf_rxFyoE.roa (raw, json)
Hash identifier:          6ICXss590ZEY8HRmBgangr+FQmmm4vOJnUJcAIJmlOg=
Subject key identifier:   9F:AA:F1:DE:76:D6:0D:0E:E6:01:E1:6D:F9:1C:DF:FE:BC:45:CA:81
Certificate issuer:       /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Certificate serial:       136A412B
Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/n6rx3nbWDQ7mAeFt-Rzf_rxFyoE.roa
Signing time:             Sat 01 Jan 2022 05:58:23 +0000
ROA not before:           Sat 01 Jan 2022 05:58:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     46436
IP address blocks:        83.126.54.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 325730603 (0x136a412b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
        Validity
            Not Before: Jan  1 05:58:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9faaf1de76d60d0ee601e16df91cdffebc45ca81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d1:d6:f7:24:1b:a9:e0:b0:ee:dc:40:a8:f3:
                    26:62:08:b2:9f:86:d1:a6:87:d0:f5:d9:e8:fa:fd:
                    0c:6c:6e:07:d7:d5:1e:9f:4f:2a:4a:b1:62:f1:2d:
                    ae:7b:55:84:3b:ef:05:c6:0e:7e:4f:5b:8a:e5:6a:
                    09:6c:0f:09:58:8f:60:ea:7a:ce:38:96:c0:80:55:
                    ed:98:0a:c9:a0:70:b7:84:c3:3e:e5:5c:96:a5:27:
                    7a:95:a7:fd:f5:75:21:45:d7:e2:e8:b9:48:21:43:
                    6b:51:18:49:bb:bb:3a:25:29:07:fc:ff:2f:2b:2d:
                    cf:4e:35:65:3c:40:3c:66:ab:d7:bf:c0:6d:9f:33:
                    b7:51:f7:b5:e8:39:d1:58:ef:09:80:4e:87:a2:4c:
                    55:c5:36:4c:fc:37:f3:9b:f4:25:2e:ff:8b:a4:7d:
                    b0:06:f2:66:53:6a:36:22:ec:c0:2e:25:3b:fb:18:
                    fa:5f:94:09:1d:7f:bc:02:3c:f5:b6:c8:60:04:45:
                    85:b1:bb:a8:1a:35:5d:43:6a:e1:bf:98:59:94:ba:
                    da:c0:30:7e:86:c3:93:57:57:36:92:fb:22:20:a1:
                    a0:27:83:10:30:c9:ae:4f:05:95:af:14:0c:64:3d:
                    ea:82:fd:fd:bd:a0:a4:19:1f:35:4a:20:e9:42:44:
                    20:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:AA:F1:DE:76:D6:0D:0E:E6:01:E1:6D:F9:1C:DF:FE:BC:45:CA:81
            X509v3 Authority Key Identifier:
                keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/n6rx3nbWDQ7mAeFt-Rzf_rxFyoE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.126.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:59:03:a7:bf:bf:49:23:68:fb:cf:28:c5:4b:6f:7b:e8:d9:
         52:52:9c:7b:85:90:cf:68:4f:f9:f1:0f:35:93:5b:72:c5:e7:
         f6:c5:24:ef:37:c7:71:2e:ee:22:3f:de:a8:a0:39:ae:06:b1:
         5e:0d:35:29:27:3b:66:25:60:56:f5:b7:4a:dc:64:55:dd:43:
         c2:93:06:c7:42:1a:24:36:0e:c5:ff:87:76:34:a2:53:a9:30:
         d6:ec:37:8e:fa:8f:44:45:38:22:dc:45:e3:5e:20:85:59:87:
         ae:30:81:92:99:31:7e:a2:f7:e4:ec:df:78:21:01:58:fc:76:
         94:69:fa:5e:bb:e3:bf:cc:85:33:47:28:65:a5:bc:a7:fe:98:
         8b:21:48:f4:a3:b5:58:2d:71:fe:02:ee:90:73:bb:50:13:b5:
         8a:cc:bd:ec:d5:b0:36:db:82:54:08:f4:51:11:fd:16:87:60:
         44:15:3b:80:81:31:26:a3:ad:2d:1f:b7:3d:e4:c2:97:5a:23:
         f8:23:20:a6:45:4e:ac:84:2b:44:2d:ba:e7:f3:7f:17:a6:6f:
         43:f4:85:fa:c8:65:13:bb:44:82:fc:31:4e:27:ee:00:9e:88:
         a8:98:04:b2:f2:ea:16:17:f8:f0:e2:5a:c5:7c:ab:98:60:30:
         ec:e5:ef:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:06 2024 by rpki-client on console-fra.rpki-client.org