Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/6bc-flHUyagkVAuKVWs_1Ve22Nc.roa
File:                     6bc-flHUyagkVAuKVWs_1Ve22Nc.roa (raw, json)
Hash identifier:          2JsB0k8kUaIqeNOtAPDGpznCyXIwqpyhDmahjOYjVDA=
Subject key identifier:   E9:B7:3E:7E:51:D4:C9:A8:24:54:0B:8A:55:6B:3F:D5:57:B6:D8:D7
Certificate issuer:       /CN=1f68138d4ec2ea51cacef09ff1058a370a5be190
Certificate serial:       3EF9A7CE
Authority key identifier: 1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/6bc-flHUyagkVAuKVWs_1Ve22Nc.roa
Signing time:             Mon 09 May 2022 08:03:55 +0000
ROA not before:           Mon 09 May 2022 08:03:55 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206977
IP address blocks:        192.150.82.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1056548814 (0x3ef9a7ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f68138d4ec2ea51cacef09ff1058a370a5be190
        Validity
            Not Before: May  9 08:03:55 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e9b73e7e51d4c9a824540b8a556b3fd557b6d8d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:81:c4:dd:60:90:96:57:41:7f:f5:93:a7:e8:
                    69:b7:e0:d1:86:4e:e2:7b:2c:e2:3c:d1:23:21:b2:
                    4e:fd:66:98:b3:8f:fa:51:a7:ff:0e:30:25:3e:e2:
                    67:22:79:f3:5d:d1:d3:00:3e:91:b0:ce:b1:e3:93:
                    3f:95:6c:c7:b6:e2:b3:3d:a9:35:1e:e6:80:16:7d:
                    c9:92:5b:b1:ea:ab:93:cc:dd:f1:0c:7a:70:40:e1:
                    30:a5:85:9c:bc:e0:12:e1:b7:5e:53:04:5b:f8:c2:
                    22:bf:e4:b2:68:cf:c2:cb:8e:fb:3c:f8:8d:a5:4b:
                    dd:52:54:9e:3c:a3:8f:ad:34:14:b4:c3:5d:96:59:
                    ec:a8:7e:1c:f3:e5:16:c1:c5:77:e1:f5:8c:e0:36:
                    36:79:b1:1c:b2:35:4f:95:29:d1:25:6d:5b:ae:fb:
                    67:32:bf:af:cc:c2:01:2e:11:bc:90:a4:5a:45:5c:
                    57:50:0a:66:41:cc:0d:86:e8:0d:a0:9c:1b:62:41:
                    96:2b:3c:df:ce:d6:37:e4:c7:ed:6f:d7:9a:30:41:
                    52:03:87:e1:01:7f:0c:72:27:50:cc:22:35:b9:a8:
                    26:2c:ed:a2:8d:44:d5:0c:1f:04:f0:27:26:22:e8:
                    32:08:b3:17:82:98:15:23:42:50:95:0c:44:d5:8a:
                    46:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:B7:3E:7E:51:D4:C9:A8:24:54:0B:8A:55:6B:3F:D5:57:B6:D8:D7
            X509v3 Authority Key Identifier:
                keyid:1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/6bc-flHUyagkVAuKVWs_1Ve22Nc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.150.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:3e:69:97:3a:41:91:2f:5d:6c:d2:55:b5:ab:61:45:8b:6b:
         a0:52:75:ca:8c:4d:46:d5:b5:12:ff:d4:78:b9:12:eb:1f:a0:
         91:d3:30:06:bf:04:ec:2d:4d:8e:53:c9:f6:dc:d6:63:ac:ea:
         71:52:97:c1:7c:46:8b:a1:fe:03:02:4a:96:c5:cb:00:fd:bc:
         37:f6:ff:c5:4c:7f:f7:59:d0:39:0e:ba:41:a4:6e:0b:10:9f:
         42:ea:53:47:e5:8d:25:52:79:a4:59:d9:f0:12:49:11:0b:ad:
         27:1f:b2:8a:29:e2:f2:ec:1d:02:c1:40:e3:4a:38:3c:0a:5b:
         91:45:ae:ad:13:d2:9e:ae:01:15:f8:f5:6d:ba:23:dd:24:d1:
         00:11:46:15:ec:1a:08:2f:74:45:43:ed:3e:95:cd:f2:d5:76:
         40:e3:89:dc:27:cb:f6:18:d0:50:17:35:06:1e:de:92:42:0b:
         da:fa:06:c8:9c:16:43:5a:50:c7:26:13:5d:76:d5:22:b3:82:
         c0:ff:4a:fb:ed:13:4e:d3:c7:22:02:af:c1:7f:eb:83:98:03:
         9a:c7:b8:a0:d1:09:7b:a2:a0:10:f0:7a:e7:d7:c3:22:28:06:
         2e:00:ba:40:1a:ff:65:5f:45:15:a6:1e:29:b1:64:97:80:cf:
         ff:ba:4e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:23 2025 by rpki-client