Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/44d59e-dc7b-4d2c-ba45-4a91fabd8a8e/1/RBEbbz1n0b9SBhiURPX6HiV5Edc.roa
File:                     RBEbbz1n0b9SBhiURPX6HiV5Edc.roa (raw, json)
Hash identifier:          C8ldBrziAEPQhqatTCWvelt85m0TrfcbXKAY5Yt5ca4=
Subject key identifier:   44:11:1B:6F:3D:67:D1:BF:52:06:18:94:44:F5:FA:1E:25:79:11:D7
Certificate issuer:       /CN=e69e45a4481456148e2e00349d87aa57c56b24a0
Certificate serial:       02E33406
Authority key identifier: E6:9E:45:A4:48:14:56:14:8E:2E:00:34:9D:87:AA:57:C5:6B:24:A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5p5FpEgUVhSOLgA0nYeqV8VrJKA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/44d59e-dc7b-4d2c-ba45-4a91fabd8a8e/1/RBEbbz1n0b9SBhiURPX6HiV5Edc.roa
Signing time:             Sat 01 Jan 2022 01:55:16 +0000
ROA not before:           Sat 01 Jan 2022 01:55:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     62146
IP address blocks:        194.150.106.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48444422 (0x2e33406)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e69e45a4481456148e2e00349d87aa57c56b24a0
        Validity
            Not Before: Jan  1 01:55:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=44111b6f3d67d1bf5206189444f5fa1e257911d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:1f:df:ed:19:a6:b4:23:83:73:1e:10:1d:de:
                    7d:cc:44:87:81:37:46:7a:f4:31:e2:65:0a:c7:70:
                    aa:d8:aa:92:c0:9e:42:a2:6f:ed:d4:32:81:94:91:
                    c0:b5:68:2e:15:62:65:90:df:bc:f0:05:2a:9b:0b:
                    8e:58:ad:52:ab:c7:3d:e3:dc:dd:e9:6f:12:9d:b5:
                    3f:87:31:a2:54:c3:f4:90:a7:3a:bf:f4:20:61:25:
                    8e:a2:2b:a5:66:e1:65:8d:6d:ed:59:75:d2:2e:91:
                    47:11:4e:48:fa:ee:a8:53:12:ff:da:e0:71:ee:49:
                    ac:11:b7:cd:b5:c2:8a:cf:ce:d6:2d:40:25:c7:43:
                    b5:bb:6f:3c:87:32:42:b6:40:65:2f:4b:b3:8b:95:
                    8b:6e:03:5b:a2:12:f3:87:17:2e:fc:29:6c:3e:56:
                    c9:ce:28:bc:45:c1:4b:c9:0c:2b:d9:84:f6:ba:a6:
                    db:d1:cc:04:66:ea:d4:ec:ff:78:27:4c:c9:de:3d:
                    4b:7b:9f:8c:75:f6:73:ea:16:af:d2:36:97:8d:ca:
                    3d:2a:16:b2:7b:14:0f:13:df:b0:b2:53:5e:77:b6:
                    d1:43:43:71:76:af:20:b3:57:22:8f:68:26:4e:db:
                    b6:cf:eb:28:29:60:82:34:b5:1a:4d:16:e9:31:cf:
                    ee:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:11:1B:6F:3D:67:D1:BF:52:06:18:94:44:F5:FA:1E:25:79:11:D7
            X509v3 Authority Key Identifier:
                keyid:E6:9E:45:A4:48:14:56:14:8E:2E:00:34:9D:87:AA:57:C5:6B:24:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5p5FpEgUVhSOLgA0nYeqV8VrJKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/44d59e-dc7b-4d2c-ba45-4a91fabd8a8e/1/RBEbbz1n0b9SBhiURPX6HiV5Edc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/44d59e-dc7b-4d2c-ba45-4a91fabd8a8e/1/5p5FpEgUVhSOLgA0nYeqV8VrJKA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.150.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:7c:2d:55:f0:a4:14:4e:24:6e:1e:b5:ca:5e:88:3b:a3:60:
         ac:87:88:6a:59:c0:09:b3:78:8d:a8:0f:f4:35:09:4d:5b:68:
         f0:30:80:42:45:f4:57:52:dd:da:27:e9:6c:40:4f:58:d8:f2:
         f4:88:25:b2:75:05:27:a1:3b:cc:35:e1:be:6c:22:ab:0b:89:
         62:0b:66:3d:e8:bb:00:8b:27:9f:5d:9a:77:eb:f5:fe:84:05:
         9a:30:aa:49:b3:c0:5a:ca:3f:14:c2:b5:7e:c7:7a:e8:72:f2:
         60:22:42:8c:b1:d3:54:28:52:b5:0f:bb:6e:e3:e2:f6:aa:66:
         4b:79:99:b2:93:36:bc:bd:02:13:d4:05:69:d6:ff:d5:84:cb:
         7f:4d:d2:b6:9b:de:38:61:e8:7e:d0:27:bf:32:30:86:fa:ba:
         6a:e8:8a:06:0e:9e:36:5a:72:c1:fe:30:62:69:05:2b:6a:0f:
         7f:5d:ec:52:d2:d7:00:54:66:62:6b:bc:56:a7:b0:64:ce:80:
         1e:9a:77:f8:f2:53:60:66:c2:1c:c4:56:24:db:bc:6d:57:75:
         58:7c:13:86:fe:7c:6d:5b:11:75:6c:c9:f0:42:15:c2:72:00:
         19:28:5b:49:88:bc:fb:2c:35:cd:91:4e:ff:5d:13:39:a5:99:
         6a:17:f9:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:18 2024 by rpki-client on console-ams.rpki-client.org