Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/V2SRBZskY-qzKIj9bOlmqPjVVAQ.roa
File:                     V2SRBZskY-qzKIj9bOlmqPjVVAQ.roa (raw, json)
Hash identifier:          WUxV5yDl9QHuOZZFwSy+nLgOyWQW0jwAGzbAhPQarW8=
Subject key identifier:   57:64:91:05:9B:24:63:EA:B3:28:88:FD:6C:E9:66:A8:F8:D5:54:04
Certificate issuer:       /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial:       0603B6F7
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/V2SRBZskY-qzKIj9bOlmqPjVVAQ.roa
Signing time:             Sat 01 Jan 2022 16:01:21 +0000
ROA not before:           Sat 01 Jan 2022 16:01:21 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209699
IP address blocks:        2a0d:f407:1010::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100906743 (0x603b6f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
        Validity
            Not Before: Jan  1 16:01:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=576491059b2463eab32888fd6ce966a8f8d55404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d9:fd:17:87:13:8c:0d:a7:b6:e9:45:bb:46:
                    8a:21:83:e3:7f:06:ac:58:a0:61:c5:7d:47:36:4c:
                    61:a1:8e:ca:09:20:a7:b7:67:58:9e:c2:0c:83:0b:
                    6d:fd:39:a7:2d:74:20:ee:16:ac:d8:a7:59:77:bc:
                    db:cd:92:f3:db:ca:dd:19:4c:4f:13:f9:26:6c:9c:
                    51:d3:61:62:03:23:f6:f5:7b:81:e5:88:81:b7:d5:
                    c5:36:a8:f0:77:f7:d8:9b:3e:b3:3c:a2:12:09:99:
                    d1:f8:03:7c:7a:5c:fb:5a:0a:2d:ac:b8:d4:aa:ad:
                    d3:93:f5:0a:80:0a:1b:00:c4:31:71:02:ea:f5:aa:
                    c3:ed:65:0a:e8:ce:db:00:6a:46:e5:9b:04:e4:4c:
                    75:e9:1d:6f:2e:5c:86:be:72:3f:01:44:23:c4:6c:
                    f6:e8:5a:b4:d6:a2:90:79:28:14:0d:9c:61:d8:fb:
                    10:63:e8:06:ae:c8:92:65:93:06:a7:df:19:b5:d2:
                    69:f2:63:f7:9a:31:ba:c6:70:85:04:63:a6:31:86:
                    32:aa:a4:a6:c8:73:62:9c:21:b3:d1:21:53:a5:66:
                    af:47:45:57:17:c9:b6:8f:7f:a1:89:6f:c1:ae:c1:
                    b5:02:de:18:60:49:af:30:cb:8e:20:17:33:19:b6:
                    90:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:64:91:05:9B:24:63:EA:B3:28:88:FD:6C:E9:66:A8:F8:D5:54:04
            X509v3 Authority Key Identifier:
                keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/V2SRBZskY-qzKIj9bOlmqPjVVAQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0d:f407:1010::/48

    Signature Algorithm: sha256WithRSAEncryption
         46:43:4b:36:7e:62:52:25:cb:31:83:66:6b:fc:14:1c:97:a6:
         25:c1:ba:70:e6:2c:66:76:a2:a9:d6:47:61:a6:93:7a:55:57:
         be:b6:b2:2e:50:bf:56:01:65:65:d2:c1:0b:2b:5a:a1:04:06:
         bd:1e:f4:3d:b7:44:bd:aa:64:2d:ff:f7:8c:70:a8:5a:53:05:
         ed:d4:ee:15:84:39:8d:a7:a3:2d:73:2c:d4:1a:54:7a:48:aa:
         5b:6f:7a:ac:5f:24:df:02:5a:8c:f5:d0:87:ac:d8:85:9f:25:
         93:9b:cb:39:2d:af:82:1d:6e:e6:0c:41:3e:6c:27:89:54:4f:
         5d:6d:83:fa:7c:18:58:06:f5:22:5b:c6:31:05:62:cf:c6:0e:
         51:e3:33:5b:38:54:2f:4f:8f:75:51:c6:67:3c:ac:6d:9d:31:
         92:fc:ea:f0:3e:58:1a:63:f9:de:ce:f4:95:37:af:c7:18:88:
         bb:69:32:86:d6:a1:ea:2e:2a:e8:7c:d2:c2:9d:72:cc:da:1b:
         fb:31:9c:45:bf:81:92:17:60:47:70:dc:53:8e:4e:e1:3c:64:
         26:03:b4:1d:9f:94:e4:73:e6:f7:1a:92:62:61:59:f7:a3:4f:
         43:0f:36:1c:4a:1a:ee:30:2f:c4:d8:ae:2b:fb:ff:cc:8a:f3:
         c0:e4:42:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:25 2024 by rpki-client on console-fra.rpki-client.org