Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/il_6sNW-XcIG96IoOWJ_YOW4MV8.roa
File:                     il_6sNW-XcIG96IoOWJ_YOW4MV8.roa (raw, json)
Hash identifier:          DJXuCo7lyH7occIaImo2nVLGWTFvAV2seKYd6FmnKHk=
Subject key identifier:   8A:5F:FA:B0:D5:BE:5D:C2:06:F7:A2:28:39:62:7F:60:E5:B8:31:5F
Certificate issuer:       /CN=a633725cd5dd91cf190ab3a99526e898357856ef
Certificate serial:       1FCB95D8
Authority key identifier: A6:33:72:5C:D5:DD:91:CF:19:0A:B3:A9:95:26:E8:98:35:78:56:EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pjNyXNXdkc8ZCrOplSbomDV4Vu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/il_6sNW-XcIG96IoOWJ_YOW4MV8.roa
Signing time:             Sat 01 Jan 2022 03:55:41 +0000
ROA not before:           Sat 01 Jan 2022 03:55:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209781
IP address blocks:        141.6.0.0/16 maxlen: 24
                          128.246.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 533435864 (0x1fcb95d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a633725cd5dd91cf190ab3a99526e898357856ef
        Validity
            Not Before: Jan  1 03:55:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8a5ffab0d5be5dc206f7a22839627f60e5b8315f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:cf:3e:d9:4d:05:1f:1f:a2:66:da:de:01:52:
                    3f:9f:82:91:75:6b:68:72:f2:c0:3c:f6:1c:16:65:
                    de:25:74:6a:1a:56:1f:b8:54:76:7d:c4:52:ca:06:
                    f1:fc:c3:2b:60:cd:67:c3:e3:bf:c5:e5:6b:5e:49:
                    f6:6b:96:43:a2:28:e7:1e:48:72:a5:c6:ab:db:54:
                    3a:e9:5a:3c:bb:d5:58:92:7a:60:41:cf:36:f3:36:
                    b3:7d:c5:9a:74:08:84:d1:2c:98:ae:3f:cc:61:e4:
                    60:04:9c:f4:fb:4e:f9:b2:4a:50:1c:dc:7b:99:b1:
                    db:f8:92:bb:f1:f9:f2:9d:2d:85:fe:9d:79:eb:7c:
                    51:86:33:96:dc:e4:b4:81:1b:e3:f1:75:05:4c:f1:
                    fe:72:b8:9e:8f:49:96:00:33:f7:fd:cd:d2:c7:2b:
                    78:67:fa:4c:ab:27:74:6f:10:7d:e8:cb:52:e1:29:
                    81:93:85:c2:88:13:7f:34:ff:1e:2e:6a:2e:a7:80:
                    1a:66:12:3c:57:ea:33:7b:31:1e:a7:cf:f1:e7:a3:
                    af:84:be:5d:e1:0a:c8:30:a0:b1:13:06:4d:b8:f8:
                    a6:c4:c0:a9:aa:cf:a6:ae:63:cf:d0:84:d2:86:9a:
                    f4:60:f3:02:db:c1:5e:21:09:27:b7:d2:61:88:9a:
                    d8:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:5F:FA:B0:D5:BE:5D:C2:06:F7:A2:28:39:62:7F:60:E5:B8:31:5F
            X509v3 Authority Key Identifier:
                keyid:A6:33:72:5C:D5:DD:91:CF:19:0A:B3:A9:95:26:E8:98:35:78:56:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjNyXNXdkc8ZCrOplSbomDV4Vu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/il_6sNW-XcIG96IoOWJ_YOW4MV8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.246.0.0/16
                  141.6.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         3d:0d:56:fe:a1:fd:1c:37:e0:a5:0c:67:10:d8:c6:3c:ec:0a:
         7a:f8:b8:b9:65:1c:b2:4d:0c:b8:f6:2b:09:dc:4b:39:1f:37:
         3d:c7:57:b6:5c:5e:e2:64:ae:c1:1c:cb:16:16:61:2e:6b:22:
         a8:e6:89:64:b8:ad:96:90:e7:45:e1:3e:1b:ae:fe:02:d9:ed:
         f4:58:a7:57:1f:42:9f:33:e6:c4:8d:5f:5f:85:80:e4:98:c9:
         6c:c0:b5:da:18:c9:f1:2d:98:84:68:8b:67:20:21:70:c6:7a:
         10:88:3a:a7:f0:6c:5f:8a:48:18:d4:30:6c:82:e8:cd:fc:68:
         14:33:89:1c:23:bc:b1:f9:88:aa:1e:9a:39:f4:b2:f0:fd:ea:
         4e:72:1f:fc:60:22:d3:2a:a9:0b:60:8f:6f:35:14:a9:00:f4:
         f8:cc:9d:ae:81:05:80:ba:6c:f3:dc:c7:9c:d0:de:73:fc:79:
         20:bc:0a:68:d4:6b:7f:de:9b:fe:3f:bb:3b:b5:82:42:ac:dc:
         0a:32:f0:78:5f:27:21:2d:3f:e2:e4:09:eb:12:57:fe:c4:63:
         ca:5e:88:f5:dc:66:0b:84:9a:35:81:e0:6a:76:b2:1b:b2:a6:
         1b:92:21:df:c9:9c:03:8c:68:56:d9:9b:76:ea:98:6b:4c:4e:
         b3:a5:15:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:41 2024 by rpki-client on console-fra.rpki-client.org