Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/6eVlrsJjVnHcJpJpZHYneZ_UyN8.roa
File:                     6eVlrsJjVnHcJpJpZHYneZ_UyN8.roa (raw, json)
Hash identifier:          lFkn4t+2BpsE1vGSr9GJrHQmAbaClncp9fL4+s5Qv3E=
Subject key identifier:   E9:E5:65:AE:C2:63:56:71:DC:26:92:69:64:76:27:79:9F:D4:C8:DF
Certificate issuer:       /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial:       0383FCF3
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/6eVlrsJjVnHcJpJpZHYneZ_UyN8.roa
Signing time:             Tue 14 Jun 2022 07:24:47 +0000
ROA not before:           Tue 14 Jun 2022 07:24:47 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212238
IP address blocks:        2a0e:c780::/29 maxlen: 29
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58981619 (0x383fcf3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
        Validity
            Not Before: Jun 14 07:24:47 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e9e565aec2635671dc269269647627799fd4c8df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:8c:df:ad:60:77:61:37:6d:0a:e1:51:9b:84:
                    f5:47:92:b3:c6:28:32:33:c3:ab:31:9b:73:81:02:
                    ed:39:25:f5:0b:7a:52:c9:fb:26:3c:9d:9f:26:33:
                    34:88:f4:ce:40:e6:e9:5c:ce:58:8d:50:ea:f3:88:
                    01:91:91:b1:7b:48:6b:85:09:cc:31:be:b5:24:6c:
                    f6:43:84:8b:33:4f:e7:e8:05:d3:3d:4f:9d:b3:47:
                    6e:fd:08:ce:86:08:2e:b3:34:e8:4d:6f:7d:71:60:
                    d1:88:f0:0f:b8:41:e9:e1:d9:4d:b9:6b:29:12:a6:
                    f4:f1:35:c3:cd:8d:b6:37:68:09:a5:26:7b:3b:60:
                    bd:a1:85:a6:37:ce:77:73:9d:63:cc:27:36:75:eb:
                    37:5c:19:90:94:cd:2c:9b:bf:6d:50:77:ce:47:5c:
                    8e:66:3e:5e:03:3d:7d:82:82:e2:63:bd:54:84:4f:
                    ce:a1:15:ac:b9:34:e7:70:c9:f4:c6:16:db:c3:6c:
                    1c:ad:63:d0:21:eb:44:e7:99:be:2b:9a:90:76:55:
                    69:1c:ba:63:ba:1e:a3:fb:9f:d9:64:be:40:de:3c:
                    1e:52:90:8d:f5:b3:f1:28:69:f3:a8:9d:18:98:d9:
                    f8:18:2d:0f:d9:8c:75:aa:3d:54:4f:7b:db:b7:2d:
                    45:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:E5:65:AE:C2:63:56:71:DC:26:92:69:64:76:27:79:9F:D4:C8:DF
            X509v3 Authority Key Identifier:
                keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/6eVlrsJjVnHcJpJpZHYneZ_UyN8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:c780::/29

    Signature Algorithm: sha256WithRSAEncryption
         16:66:46:4f:f8:fa:2d:26:a5:25:44:13:d7:b1:44:39:10:33:
         31:27:19:af:87:e3:b1:dd:34:91:ac:95:db:cb:c2:a7:33:95:
         95:8c:f2:3b:a8:e5:52:c8:90:4e:66:88:fe:7d:3f:d3:54:aa:
         87:a3:3f:b6:06:05:aa:92:b6:1a:b9:a2:79:82:a2:2f:2a:3e:
         87:5b:40:52:a8:d8:24:c5:1b:20:6b:49:a0:47:3e:13:de:e3:
         5f:9f:85:1f:86:6e:12:0d:0d:27:70:9b:90:0d:a8:d0:a5:02:
         d9:4f:8d:83:ef:52:21:f6:5e:8e:36:34:cc:44:28:04:5e:3c:
         11:fc:96:fa:7d:9f:36:9e:1c:a7:a1:31:64:8a:da:87:58:c4:
         e2:d2:49:ba:a2:69:72:e7:94:e9:7a:1c:1b:f1:b1:28:89:be:
         ef:85:ff:90:58:af:42:07:45:dc:da:65:11:b6:a9:1c:b6:2f:
         3b:12:72:f5:82:2c:a2:68:65:66:fa:43:48:c0:e5:bd:d4:bf:
         4b:7f:83:c9:42:10:36:d2:98:3c:c2:5b:61:7c:e3:36:33:1a:
         54:66:00:6f:e3:00:06:4b:75:88:4d:19:cd:5e:c2:ba:8b:e6:
         b8:63:5a:74:a5:d1:be:fe:34:da:ab:a3:e5:0d:1a:14:0e:2c:
         6c:d0:93:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:09:31 2025 by rpki-client