Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/3c2efb-2292-4c6a-914b-55eb820fd596/1/0MXP-6IklqOrfLS7x6ShMTWo7GU.roa
File:                     0MXP-6IklqOrfLS7x6ShMTWo7GU.roa (raw, json)
Hash identifier:          enjsSHnly39dN5L6a49tBgrWfwvBQZHamnSqiZcjgb0=
Subject key identifier:   D0:C5:CF:FB:A2:24:96:A3:AB:7C:B4:BB:C7:A4:A1:31:35:A8:EC:65
Certificate issuer:       /CN=669f5c8b9b63ae5e28786eba10a1f6572a60e3fc
Certificate serial:       05CCFDDA
Authority key identifier: 66:9F:5C:8B:9B:63:AE:5E:28:78:6E:BA:10:A1:F6:57:2A:60:E3:FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zp9ci5tjrl4oeG66EKH2Vypg4_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/3c2efb-2292-4c6a-914b-55eb820fd596/1/0MXP-6IklqOrfLS7x6ShMTWo7GU.roa
Signing time:             Sat 01 Jan 2022 03:57:21 +0000
ROA not before:           Sat 01 Jan 2022 03:57:21 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49875
IP address blocks:        193.104.13.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 97320410 (0x5ccfdda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=669f5c8b9b63ae5e28786eba10a1f6572a60e3fc
        Validity
            Not Before: Jan  1 03:57:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d0c5cffba22496a3ab7cb4bbc7a4a13135a8ec65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2d:55:91:cc:8f:a3:6f:b0:59:66:9f:8b:4a:
                    43:76:c7:ce:04:ce:e4:4c:db:8f:86:50:e7:91:54:
                    7a:f9:08:00:df:4c:b9:0f:32:b3:dd:be:a5:55:5b:
                    40:3c:65:e1:bf:6f:e5:ce:39:cd:92:69:fa:f5:d2:
                    33:d4:06:35:3a:32:b9:38:ab:92:ca:90:9e:ea:94:
                    8c:4f:0e:03:e2:f9:bc:0e:fc:20:a6:5b:97:47:30:
                    97:2d:16:94:47:88:7d:76:d8:d0:79:6f:66:5a:6f:
                    6d:aa:27:c7:f0:f7:74:45:db:ec:6e:7a:c7:e4:57:
                    b3:e9:50:d5:ef:32:4b:88:8f:92:3d:73:da:bc:4e:
                    66:78:31:a2:4f:28:1f:42:4a:5a:00:7c:ef:50:eb:
                    22:06:b1:26:e3:42:28:32:65:6a:64:b9:87:58:77:
                    25:7d:ff:ec:e4:48:f3:5e:27:35:9c:6e:bc:60:02:
                    13:c6:b9:7c:f4:3b:e8:0a:b5:47:4f:93:8c:c3:82:
                    74:f4:30:ff:5f:0a:2c:5b:c5:3c:11:a1:b1:99:54:
                    61:7c:dd:3f:98:82:ec:90:89:0e:be:51:96:84:23:
                    75:fe:3f:41:f3:c9:09:05:e9:3a:41:c0:17:8b:15:
                    a0:e3:0c:38:47:e1:5c:14:77:d1:bc:8e:3b:d0:62:
                    c5:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:C5:CF:FB:A2:24:96:A3:AB:7C:B4:BB:C7:A4:A1:31:35:A8:EC:65
            X509v3 Authority Key Identifier:
                keyid:66:9F:5C:8B:9B:63:AE:5E:28:78:6E:BA:10:A1:F6:57:2A:60:E3:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zp9ci5tjrl4oeG66EKH2Vypg4_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/3c2efb-2292-4c6a-914b-55eb820fd596/1/0MXP-6IklqOrfLS7x6ShMTWo7GU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/3c2efb-2292-4c6a-914b-55eb820fd596/1/Zp9ci5tjrl4oeG66EKH2Vypg4_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.104.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:e0:f2:82:a2:6a:55:df:f0:20:ff:ba:08:4a:6f:9c:6b:a1:
         07:d9:c6:69:7f:49:9e:87:d3:bb:31:a7:e7:2c:06:44:16:e6:
         57:31:53:9a:42:d3:5f:34:5d:28:b8:88:73:5e:ad:89:6f:39:
         a2:e7:5e:16:1f:14:5a:18:77:ec:67:91:44:e4:24:aa:6c:73:
         63:f6:38:cc:c1:ae:31:f5:db:ca:9f:f7:d5:15:77:e1:f0:50:
         e5:4e:f5:fe:c9:af:6e:a3:51:cb:8d:4e:a1:c9:79:45:12:b0:
         3f:9b:2f:ca:97:a9:86:88:f5:cd:22:02:8d:0e:73:d8:59:75:
         6d:b1:1c:ec:cd:8b:5b:be:90:c1:89:02:b4:a0:c7:48:d8:d3:
         9c:3a:b4:79:0b:86:42:0a:29:76:7d:64:66:f5:b9:0e:2d:9a:
         a3:59:03:e1:1d:c9:74:d9:cd:65:0f:f9:83:43:96:0c:cf:19:
         95:2e:70:d4:f0:44:92:cf:4f:6f:ba:d5:b0:a6:0e:fd:30:1e:
         e5:d1:5c:e1:25:11:a5:f9:ed:d4:ac:6d:b4:7d:dc:e5:81:a9:
         bd:33:8f:06:12:6d:52:e4:7b:d1:01:2c:fa:6d:7d:a0:ed:c2:
         11:26:db:fe:26:00:30:8c:d4:87:32:2d:31:66:db:19:c1:25:
         b2:f2:d8:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:46 2024 by rpki-client on console-ams.rpki-client.org