Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/si6Ej7MG8LXPtlu-FElDMedY8SA.roa
File:                     si6Ej7MG8LXPtlu-FElDMedY8SA.roa (raw, json)
Hash identifier:          1MDGihvSinhWJVx9B/q6YQ2Ma8gCRI9gjYWnB48N8Vk=
Subject key identifier:   B2:2E:84:8F:B3:06:F0:B5:CF:B6:5B:BE:14:49:43:31:E7:58:F1:20
Certificate issuer:       /CN=712c99cc338f692da8f81b716bad79d1c9d7c820
Certificate serial:       164BDA44
Authority key identifier: 71:2C:99:CC:33:8F:69:2D:A8:F8:1B:71:6B:AD:79:D1:C9:D7:C8:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cSyZzDOPaS2o-Btxa6150cnXyCA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/si6Ej7MG8LXPtlu-FElDMedY8SA.roa
Signing time:             Sat 01 Jan 2022 06:54:50 +0000
ROA not before:           Sat 01 Jan 2022 06:54:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     201333
IP address blocks:        212.54.240.0/20 maxlen: 23
                          212.54.232.0/21 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 374069828 (0x164bda44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=712c99cc338f692da8f81b716bad79d1c9d7c820
        Validity
            Not Before: Jan  1 06:54:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b22e848fb306f0b5cfb65bbe14494331e758f120
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:81:e4:05:d9:4b:7f:1b:a1:48:72:15:c3:0f:
                    0f:6b:ae:30:e7:75:74:42:f5:b6:a9:b3:ff:eb:6d:
                    6d:5b:24:13:43:eb:a8:c6:04:d3:92:25:70:17:72:
                    81:9c:92:6c:f0:3a:2f:b6:89:e4:96:e5:89:6f:2f:
                    19:b4:d6:14:20:12:ec:64:ca:14:4a:07:7a:62:f6:
                    ab:b2:aa:46:45:96:64:da:2b:44:82:00:5f:68:9c:
                    15:4a:89:3e:9a:81:f2:91:1d:0e:a2:70:9b:42:b9:
                    41:49:ec:6f:58:8e:37:d5:54:79:78:c4:f0:b2:4a:
                    73:7b:4d:bd:ad:5d:d4:90:d7:2a:cc:bd:f9:1a:d5:
                    fd:9b:83:78:a4:17:11:a8:3f:3a:d9:24:db:c3:7a:
                    2a:90:dd:8d:95:b3:41:6a:7f:b0:dd:ab:fc:68:8c:
                    11:ea:1c:1f:83:f4:91:60:a4:08:14:6b:03:4c:0c:
                    0c:21:6b:6f:38:4d:b1:c6:b8:a8:01:6e:79:14:22:
                    24:ee:9f:80:77:ae:93:72:4a:63:6a:73:b3:e7:02:
                    57:8e:a8:5f:aa:b8:d0:89:38:f6:a3:53:49:18:ae:
                    e0:f7:ee:7c:45:95:f4:c5:11:41:16:a4:b3:85:fb:
                    3f:7e:03:80:21:1b:6f:8e:42:84:32:1d:a9:23:67:
                    33:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:2E:84:8F:B3:06:F0:B5:CF:B6:5B:BE:14:49:43:31:E7:58:F1:20
            X509v3 Authority Key Identifier:
                keyid:71:2C:99:CC:33:8F:69:2D:A8:F8:1B:71:6B:AD:79:D1:C9:D7:C8:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cSyZzDOPaS2o-Btxa6150cnXyCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/si6Ej7MG8LXPtlu-FElDMedY8SA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.54.232.0-212.54.255.255

    Signature Algorithm: sha256WithRSAEncryption
         86:3c:b3:b2:40:52:24:e3:d5:d0:f7:d9:b2:7e:b1:16:75:f7:
         04:01:fe:c4:6e:94:b6:ca:76:62:34:4d:c0:fa:83:dc:28:e2:
         0b:31:0c:ee:13:67:0c:d5:f5:f5:1b:19:5f:47:9c:eb:69:2b:
         22:b1:58:05:4b:66:86:e1:c7:0c:33:1d:86:bf:01:23:97:3e:
         01:4a:87:33:4e:5b:c7:5f:1c:13:08:90:68:34:21:6c:04:c5:
         60:8a:5e:ab:23:e3:45:87:5f:9e:95:0c:6d:05:09:3a:82:45:
         29:1e:bd:6f:99:dc:b9:2b:43:2a:f6:18:d1:2b:78:64:40:26:
         05:17:10:9f:d9:22:bc:f3:e5:e3:ce:78:b6:28:84:6a:26:87:
         51:57:26:1f:cf:2d:e0:0c:49:75:7a:90:72:03:06:a2:1f:90:
         1c:0c:69:0b:56:41:12:54:01:79:14:10:e9:41:f2:e1:c1:ea:
         e4:a0:05:c2:3c:ba:2b:d5:e6:17:f2:80:66:0a:2f:77:fc:57:
         a3:1c:0e:1c:fd:ea:4b:e8:e2:2c:af:b0:3b:93:61:76:61:43:
         40:ef:7e:55:c4:c6:79:10:f6:64:51:81:e5:18:c3:fc:ff:8c:
         83:57:84:a3:05:df:62:f9:19:7a:c6:6f:52:f0:b5:9c:11:f6:
         80:31:82:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:38 2024 by rpki-client on console-fra.rpki-client.org