Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/6fd5d2-b7ce-4b3d-8f2c-138bbaac7fe2/1/6zb6l0r5CmjetoPpO2AOIEU0wYE.roa
File:                     6zb6l0r5CmjetoPpO2AOIEU0wYE.roa (raw, json)
Hash identifier:          XNcq6Ebohg5dZ9dMz4FzHBV1cMNvrIu7b+eISSsQZks=
Subject key identifier:   EB:36:FA:97:4A:F9:0A:68:DE:B6:83:E9:3B:60:0E:20:45:34:C1:81
Certificate issuer:       /CN=e6e4687ab8b1eb6de1abd04a07617c86d118518d
Certificate serial:       04A0C8CD
Authority key identifier: E6:E4:68:7A:B8:B1:EB:6D:E1:AB:D0:4A:07:61:7C:86:D1:18:51:8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5uRoerix623hq9BKB2F8htEYUY0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/6fd5d2-b7ce-4b3d-8f2c-138bbaac7fe2/1/6zb6l0r5CmjetoPpO2AOIEU0wYE.roa
Signing time:             Wed 13 Apr 2022 15:34:19 +0000
ROA not before:           Wed 13 Apr 2022 15:34:19 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     398962
IP address blocks:        176.125.236.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77646029 (0x4a0c8cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6e4687ab8b1eb6de1abd04a07617c86d118518d
        Validity
            Not Before: Apr 13 15:34:19 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=eb36fa974af90a68deb683e93b600e204534c181
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7b:3e:0d:24:47:72:9e:6c:f5:c7:5d:80:b8:
                    bc:7b:a6:14:8e:10:f3:04:db:e0:02:bd:ce:a6:50:
                    b8:e8:67:3d:61:93:9e:9f:6f:e3:c2:17:b3:3a:b6:
                    45:b7:89:3e:95:d8:16:93:9c:de:b6:36:38:0e:3b:
                    6c:fe:87:6e:c4:21:da:26:cb:8b:3d:4f:d2:39:1a:
                    0f:3f:78:85:1c:19:c9:8e:6c:d8:44:83:c4:45:6c:
                    b0:51:f5:70:fb:1b:ed:5c:6f:a7:e2:e3:79:ee:4a:
                    64:ed:49:f5:06:23:3d:07:0d:a9:6f:6e:fd:58:29:
                    a6:62:27:e1:72:0f:49:33:99:ab:50:18:1e:7e:61:
                    0d:63:d9:12:21:62:27:83:ff:90:96:5f:98:70:29:
                    ce:cf:aa:5e:87:74:34:fe:4e:77:14:63:e8:cf:a6:
                    9c:ff:fd:8d:68:9f:b2:7d:67:3d:24:94:b8:72:87:
                    d0:66:e5:a7:8b:85:aa:b6:96:40:e3:1e:05:ed:50:
                    dc:0f:95:26:5f:d8:40:2a:61:e3:b5:6b:96:28:3b:
                    a5:ff:b6:a0:47:e2:6d:c4:b9:53:29:59:59:ad:59:
                    59:56:49:6a:b5:43:31:ee:e9:bc:84:a1:a5:27:94:
                    1e:d0:fd:56:fd:c9:4d:a5:2a:68:12:81:34:db:85:
                    54:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:36:FA:97:4A:F9:0A:68:DE:B6:83:E9:3B:60:0E:20:45:34:C1:81
            X509v3 Authority Key Identifier:
                keyid:E6:E4:68:7A:B8:B1:EB:6D:E1:AB:D0:4A:07:61:7C:86:D1:18:51:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5uRoerix623hq9BKB2F8htEYUY0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/6fd5d2-b7ce-4b3d-8f2c-138bbaac7fe2/1/6zb6l0r5CmjetoPpO2AOIEU0wYE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/6fd5d2-b7ce-4b3d-8f2c-138bbaac7fe2/1/5uRoerix623hq9BKB2F8htEYUY0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.125.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         e6:98:4f:86:81:11:b6:45:2d:9e:20:13:05:ce:e9:98:44:4d:
         b3:59:9c:4e:32:77:da:1b:f0:ca:32:9d:06:93:8b:dc:3d:73:
         01:cb:14:07:aa:2c:61:bd:2f:76:13:4b:ba:d4:68:2a:14:24:
         03:9a:34:c5:ac:69:dc:0a:fe:f8:ba:c3:25:c8:21:3a:d2:8b:
         b7:ba:cd:ba:0f:d4:82:3d:6d:aa:13:dd:2d:02:6b:a0:55:0b:
         6c:88:e2:ea:2f:31:18:79:6c:cb:fc:d5:55:b9:90:60:12:b0:
         24:74:2c:c9:43:12:68:31:7d:14:92:23:c2:39:85:86:42:28:
         63:37:f0:44:22:d0:ce:69:5b:bf:ab:79:3d:63:cb:4b:df:ff:
         bb:be:38:88:ec:b2:e9:cb:bd:12:cc:91:a2:e3:49:07:f5:82:
         73:56:0f:d9:b9:89:82:cf:c0:fa:ff:3e:fa:3b:39:e6:57:61:
         ae:e7:a8:8e:0e:1d:7b:e6:24:44:b7:19:4a:0c:6e:62:9d:59:
         d7:a1:3f:8c:21:85:19:0a:b2:62:cf:5d:2c:1f:ed:bf:80:6b:
         74:89:5a:e7:3f:ba:48:3a:54:4a:be:67:fd:c5:2e:30:39:a5:
         ae:27:77:86:42:66:1d:bc:7d:3e:7f:11:b4:14:5b:b5:bd:e0:
         b3:48:0f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:07 2024 by rpki-client on console-ams.rpki-client.org