Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/5eecf3-637f-450c-8489-34ba0738a341/1/GK6cFEl9sNr_amDiQTb5aBswfUI.roa
File:                     GK6cFEl9sNr_amDiQTb5aBswfUI.roa (raw, json)
Hash identifier:          LxJOa6z1R2uDAZd9eYuX/hd8xbCWBNQFR5lF2+DQerA=
Subject key identifier:   18:AE:9C:14:49:7D:B0:DA:FF:6A:60:E2:41:36:F9:68:1B:30:7D:42
Certificate issuer:       /CN=932e8078ea420afc1a78bf922a9a2f274679c8a8
Certificate serial:       0916A0E8
Authority key identifier: 93:2E:80:78:EA:42:0A:FC:1A:78:BF:92:2A:9A:2F:27:46:79:C8:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/5eecf3-637f-450c-8489-34ba0738a341/1/GK6cFEl9sNr_amDiQTb5aBswfUI.roa
Signing time:             Sat 01 Jan 2022 06:58:08 +0000
ROA not before:           Sat 01 Jan 2022 06:58:08 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     35657
IP address blocks:        185.231.6.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 152477928 (0x916a0e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=932e8078ea420afc1a78bf922a9a2f274679c8a8
        Validity
            Not Before: Jan  1 06:58:08 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=18ae9c14497db0daff6a60e24136f9681b307d42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9c:f5:bd:d1:e1:ea:56:d6:b5:68:63:28:af:
                    d5:3c:a0:82:f4:71:1d:ca:99:0e:c5:f4:14:43:ae:
                    cc:96:7e:a6:de:68:d9:02:53:07:da:08:53:2d:7c:
                    19:51:c8:c2:c3:84:4c:c6:8e:39:75:d2:4b:d1:20:
                    ec:55:42:21:d5:10:4c:69:1a:a4:96:54:5a:61:9e:
                    f1:75:2b:26:c7:4f:e5:e7:6d:d2:43:0e:76:58:a8:
                    f0:6c:7e:f3:72:80:0f:d4:47:0e:22:91:2a:31:02:
                    8a:2c:14:f7:fe:66:20:ad:25:11:82:b7:5e:e7:8f:
                    de:a1:3b:36:66:6d:c9:d1:91:4b:e6:ae:3a:4f:34:
                    dd:4e:8b:f0:70:5d:ba:f1:63:db:90:d1:6b:2e:b4:
                    ed:c0:d9:d0:af:65:57:8a:82:c3:42:2b:47:e1:54:
                    5c:dc:12:30:ed:0b:64:24:b9:27:07:e8:ec:89:3e:
                    39:af:0e:82:42:89:6f:6a:e7:07:60:38:c8:99:c6:
                    8a:c7:af:20:ec:ab:1c:e9:82:96:14:1c:f6:64:15:
                    7b:32:cf:c5:de:fd:10:bf:d6:ce:a3:31:80:78:73:
                    a8:ee:05:ec:f3:5a:1c:8a:1c:5a:86:7c:55:fb:43:
                    09:3e:dd:8b:81:76:f8:b1:65:1d:36:49:87:f7:9e:
                    53:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:AE:9C:14:49:7D:B0:DA:FF:6A:60:E2:41:36:F9:68:1B:30:7D:42
            X509v3 Authority Key Identifier:
                keyid:93:2E:80:78:EA:42:0A:FC:1A:78:BF:92:2A:9A:2F:27:46:79:C8:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/5eecf3-637f-450c-8489-34ba0738a341/1/GK6cFEl9sNr_amDiQTb5aBswfUI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/5eecf3-637f-450c-8489-34ba0738a341/1/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.231.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c9:e3:04:83:e2:5e:fc:d3:26:1a:b0:fd:d7:a0:e1:f3:9d:21:
         fe:3d:25:4b:f6:20:51:b8:02:62:8c:c7:40:1d:52:15:17:5a:
         c7:77:63:c5:ec:14:dc:b6:67:48:4d:65:b9:e5:14:fd:ee:38:
         3b:a5:50:a1:04:98:b1:c9:35:24:b0:19:d4:40:b5:2e:01:9e:
         f9:81:bc:92:27:02:32:2d:eb:1d:ff:2c:a6:6b:4d:ea:6f:40:
         60:d8:26:06:71:48:15:75:36:e0:86:5f:e1:04:d2:4b:50:66:
         72:e1:dc:53:71:72:7c:b9:15:36:9d:36:c9:25:d2:05:65:d8:
         31:dd:41:1d:0a:5f:94:59:50:d8:cd:65:e1:21:79:27:10:92:
         db:15:cb:b8:82:2b:cb:4a:21:4a:5b:e1:f4:8a:89:83:50:30:
         2c:52:ff:6a:18:98:53:ba:4b:b3:79:be:67:32:45:20:c6:86:
         10:83:6b:4d:22:98:af:f7:ad:c6:01:38:fc:18:d5:22:4b:83:
         1b:d9:6c:5d:85:eb:ca:13:12:24:bf:24:e9:35:f3:ea:69:16:
         d8:f9:80:c1:ba:1b:8d:88:f9:b4:07:ec:e5:a5:1a:9b:87:31:
         35:ea:9b:d6:32:c1:f7:07:88:4f:97:19:2a:6e:a9:77:87:31:
         9a:70:ec:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:36 2024 by rpki-client on console-fra.rpki-client.org