Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/euYclZUHAICh5StKSXVSt3L_g8w.roa
File:                     euYclZUHAICh5StKSXVSt3L_g8w.roa (raw, json)
Hash identifier:          pho0uK90nDFHS5lNPCXniln2sCgcwMYzjqVOAPCOZhw=
Subject key identifier:   7A:E6:1C:95:95:07:00:80:A1:E5:2B:4A:49:75:52:B7:72:FF:83:CC
Certificate issuer:       /CN=2631166de785a3531bdc8361f1190a8369a7ed6a
Certificate serial:       38072F50
Authority key identifier: 26:31:16:6D:E7:85:A3:53:1B:DC:83:61:F1:19:0A:83:69:A7:ED:6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/euYclZUHAICh5StKSXVSt3L_g8w.roa
Signing time:             Sat 01 Jan 2022 04:04:06 +0000
ROA not before:           Sat 01 Jan 2022 04:04:06 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     57043
IP address blocks:        46.249.38.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 939994960 (0x38072f50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2631166de785a3531bdc8361f1190a8369a7ed6a
        Validity
            Not Before: Jan  1 04:04:06 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7ae61c9595070080a1e52b4a497552b772ff83cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:28:3c:70:c8:49:09:d2:86:33:5e:e0:c1:05:
                    fa:72:77:60:f1:c9:37:b6:3e:f1:92:7b:15:6c:0c:
                    a1:bb:91:95:d6:97:44:5e:a5:81:61:12:0f:23:63:
                    ee:e7:07:e1:5d:68:27:da:9b:93:5f:b9:97:15:f7:
                    5b:49:67:dd:6b:96:15:a4:d0:b9:33:0a:dc:d0:17:
                    7b:c7:09:c1:21:89:a7:a4:f8:1e:88:98:5d:d6:06:
                    2e:f9:b0:2b:94:48:16:f7:da:65:b8:c7:ab:8c:c1:
                    11:35:02:1e:0b:2a:44:ab:9b:71:b3:c7:0b:7c:8e:
                    a0:51:25:2b:7a:09:bf:b0:9e:54:e4:00:a7:7f:37:
                    92:4c:26:fe:6c:f0:0f:73:27:2e:c0:b8:7c:63:eb:
                    85:b7:bc:79:69:32:a3:8d:eb:96:bd:67:73:dc:56:
                    c3:ff:9a:d8:a7:eb:9f:f2:0c:68:c0:e9:97:1d:b3:
                    f7:d8:e9:50:d0:92:d4:f0:bb:8b:38:4d:9e:2f:6c:
                    99:d7:ab:9d:0d:d1:f2:32:8c:78:58:d3:50:2b:38:
                    4e:48:92:1d:28:6b:93:15:cf:5f:af:a2:67:07:8a:
                    55:09:52:46:be:d0:bb:ba:b2:50:c5:86:78:ff:2b:
                    c5:e1:59:f9:72:3d:7e:54:39:2d:a0:1a:37:cf:bf:
                    21:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:E6:1C:95:95:07:00:80:A1:E5:2B:4A:49:75:52:B7:72:FF:83:CC
            X509v3 Authority Key Identifier:
                keyid:26:31:16:6D:E7:85:A3:53:1B:DC:83:61:F1:19:0A:83:69:A7:ED:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/euYclZUHAICh5StKSXVSt3L_g8w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.249.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:a3:1a:7f:33:3c:6a:9c:9f:0b:2b:53:85:a7:2b:83:3c:5c:
         96:57:e2:f9:b6:94:60:f5:cb:44:dd:e8:79:be:c1:f9:30:1a:
         6b:1b:d7:65:f0:71:e4:2f:78:44:96:02:e2:34:f4:16:7e:43:
         da:cd:dc:ff:d5:ec:ea:16:ac:34:c0:bc:b0:e2:28:c4:0a:9a:
         cb:da:2d:58:77:20:b4:e1:fe:19:5e:db:18:6c:87:b7:2d:d5:
         e9:e4:40:03:ed:b7:e8:23:f6:7e:6b:09:0a:b8:42:e4:82:3e:
         72:26:d6:93:5b:cb:e6:3c:7b:84:be:10:3f:98:84:47:9d:ca:
         05:05:5a:78:7b:67:06:19:44:4c:a8:b4:a3:af:0e:75:c3:2c:
         5e:a3:27:fd:19:a0:3a:de:c7:d6:d7:9e:0a:d0:5a:96:4a:b3:
         5b:09:34:6c:11:4d:d5:7b:98:d0:51:1f:be:41:07:5c:87:21:
         8b:9a:1a:1d:1d:22:0c:c4:a9:00:79:96:b4:99:e9:c6:23:89:
         44:27:c0:02:19:78:28:59:53:68:34:64:3f:b5:3e:fa:dc:f1:
         c6:15:17:04:2c:fa:3b:e3:f4:a7:e1:26:c6:26:18:6a:b8:21:
         b0:28:0f:01:e3:bb:ed:69:b8:c1:4b:4d:6c:2a:2b:77:f4:2e:
         de:59:01:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:26 2024 by rpki-client on console-ams.rpki-client.org