Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/HpzAVeO1TpvEPBXy6hHNKu3U9To.roa
File:                     HpzAVeO1TpvEPBXy6hHNKu3U9To.roa (raw, json)
Hash identifier:          OPTFAVBZJi4BjMHhkEAo2JtqlcGRjzb/ejOKElPSuZI=
Subject key identifier:   1E:9C:C0:55:E3:B5:4E:9B:C4:3C:15:F2:EA:11:CD:2A:ED:D4:F5:3A
Certificate issuer:       /CN=6ff362c0765afb7b9804b6d819470007b01f262e
Certificate serial:       035DA4B1
Authority key identifier: 6F:F3:62:C0:76:5A:FB:7B:98:04:B6:D8:19:47:00:07:B0:1F:26:2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b_NiwHZa-3uYBLbYGUcAB7AfJi4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/HpzAVeO1TpvEPBXy6hHNKu3U9To.roa
Signing time:             Sat 01 Jan 2022 10:57:54 +0000
ROA not before:           Sat 01 Jan 2022 10:57:54 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     141760
IP address blocks:        141.113.128.0/21 maxlen: 21
                          141.113.136.0/21 maxlen: 21
                          2a03:9e43::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56468657 (0x35da4b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ff362c0765afb7b9804b6d819470007b01f262e
        Validity
            Not Before: Jan  1 10:57:54 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1e9cc055e3b54e9bc43c15f2ea11cd2aedd4f53a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d1:6e:18:3f:14:27:d4:ea:95:d5:81:d9:ac:
                    c7:99:b9:4e:2f:57:13:5c:9c:05:32:78:bb:7c:f4:
                    2b:68:f9:41:09:8b:04:08:3e:08:4a:47:42:0d:77:
                    47:1c:2b:17:8f:1f:03:85:73:2a:cf:4b:ee:d9:0d:
                    a3:cc:49:57:a7:d5:94:03:e9:09:61:cf:39:82:a3:
                    c4:9b:2e:6c:2a:e4:83:c2:1a:c6:03:6c:1b:23:f0:
                    b8:d0:c4:de:32:1f:ea:cc:cc:62:af:32:e1:66:f3:
                    dd:b5:f3:b9:89:e1:c8:ce:7d:a5:ec:a5:0e:82:ca:
                    98:5a:9e:01:e6:36:9c:ad:03:60:c7:3b:7e:4a:f3:
                    74:85:64:2f:13:54:c8:18:ec:dd:cb:fb:72:29:72:
                    80:58:80:ec:a7:f6:6a:f3:c7:e3:14:9f:2b:ce:db:
                    d0:2b:4a:7a:ff:3c:8c:8f:27:41:07:0f:9c:cb:aa:
                    0d:29:75:ea:26:2c:67:80:69:e0:af:2f:2e:41:97:
                    89:a2:60:87:1d:53:5e:83:8b:69:59:c3:df:af:44:
                    df:86:95:1e:a3:c6:a8:f7:16:b5:09:b7:e3:3a:be:
                    58:74:1d:bb:af:db:f3:46:4a:21:c2:34:18:b1:67:
                    c1:ef:cf:77:55:c7:1f:82:e9:09:b4:24:19:f4:ec:
                    98:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:9C:C0:55:E3:B5:4E:9B:C4:3C:15:F2:EA:11:CD:2A:ED:D4:F5:3A
            X509v3 Authority Key Identifier:
                keyid:6F:F3:62:C0:76:5A:FB:7B:98:04:B6:D8:19:47:00:07:B0:1F:26:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_NiwHZa-3uYBLbYGUcAB7AfJi4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/HpzAVeO1TpvEPBXy6hHNKu3U9To.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/b_NiwHZa-3uYBLbYGUcAB7AfJi4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.113.128.0/20
                IPv6:
                  2a03:9e43::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:58:59:37:54:f5:63:16:08:c8:53:ee:ff:15:f1:d1:a4:20:
         14:f0:08:5c:17:ad:d5:14:a0:82:46:f2:b3:2e:69:1b:f6:64:
         83:0b:07:f6:0d:6b:1b:ae:ef:cd:97:a2:5e:51:08:16:ca:88:
         a1:c1:67:b5:c4:ad:fa:b8:a1:03:3a:dd:35:9b:0f:54:3b:35:
         8f:bc:bd:95:a1:b2:f6:9b:13:69:d1:a3:36:27:d4:74:e0:fb:
         64:a7:4a:80:e5:61:64:e8:14:90:ee:65:aa:b0:d7:bb:2e:56:
         88:62:51:d7:99:af:4f:aa:4f:4c:5b:1d:44:bf:d0:c6:c8:7a:
         bf:2d:af:09:2b:93:70:e8:25:ab:1c:06:70:29:9c:48:62:c0:
         62:28:38:45:40:61:98:f1:c0:74:0c:ce:3b:dd:c6:f4:bb:28:
         4b:4d:0d:02:f3:c3:6f:a1:49:c2:83:a4:87:57:71:25:53:2a:
         83:2f:13:14:35:ca:f9:74:81:c5:26:79:4d:88:54:ac:62:80:
         1e:3d:34:f7:d7:95:ea:24:ed:4e:b8:b7:81:d5:2f:56:e3:fb:
         8c:e8:3e:be:f7:01:82:26:a9:fe:01:f5:36:9e:70:5f:5f:29:
         b8:78:2a:b4:2f:ba:87:e9:be:8e:fc:2d:ee:63:0d:a5:de:ea:
         93:db:6e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:14 2024 by rpki-client on console-ams.rpki-client.org