Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/b42Y1sFMDKNlXgTr8ZxYYaXki0I.roa
File:                     b42Y1sFMDKNlXgTr8ZxYYaXki0I.roa (raw, json)
Hash identifier:          aaNqTm8tXVDYdsqLpfAQRHxoFVw+yXPYMSbZs7xXtNo=
Subject key identifier:   6F:8D:98:D6:C1:4C:0C:A3:65:5E:04:EB:F1:9C:58:61:A5:E4:8B:42
Certificate issuer:       /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial:       087C9B93
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/b42Y1sFMDKNlXgTr8ZxYYaXki0I.roa
Signing time:             Thu 30 Jun 2022 19:19:58 +0000
ROA not before:           Thu 30 Jun 2022 19:19:58 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49600
IP address blocks:        193.37.65.0/24 maxlen: 24
                          185.230.54.0/23 maxlen: 23
                          185.230.55.0/24 maxlen: 24
                          193.37.64.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 142384019 (0x87c9b93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
        Validity
            Not Before: Jun 30 19:19:58 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6f8d98d6c14c0ca3655e04ebf19c5861a5e48b42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:47:a2:a4:23:10:90:15:50:13:99:65:af:b7:
                    92:40:61:c7:c9:a8:de:73:f2:ab:9f:dd:fc:90:df:
                    5e:0f:c2:35:ec:7a:b5:ef:4d:cc:f4:b6:2a:37:c9:
                    a4:61:28:9a:14:d3:e7:18:58:34:5f:ab:0e:e8:0f:
                    d3:f3:4f:de:3a:76:11:d5:c9:30:16:0b:63:7d:7c:
                    10:ba:89:b7:90:3a:ae:b6:af:19:9b:55:aa:5a:b2:
                    96:98:78:ea:46:5f:71:01:97:af:d5:c5:d2:d0:06:
                    c0:5d:ec:58:a3:51:32:3e:45:36:f4:9e:6f:1c:e8:
                    00:a2:b4:50:f3:d4:9f:14:dd:56:b4:30:bc:db:9d:
                    d9:d4:89:c1:b4:f0:9e:a0:4a:30:e6:48:5a:95:bb:
                    fd:93:27:77:99:3c:95:cc:9b:33:57:00:9d:0e:e7:
                    07:bf:e4:3e:dd:1f:2c:ac:61:c7:bc:c3:8a:fa:dc:
                    ab:26:bb:2b:0e:bb:6b:5a:93:ac:72:da:39:7a:fc:
                    41:28:8e:c4:77:a5:89:7a:13:0f:0e:d4:ec:ee:23:
                    d3:79:8f:d2:e6:d1:ee:60:76:8d:5d:75:37:5c:4f:
                    a5:d5:bb:d7:ef:ae:1d:50:cf:77:7e:95:7d:f6:f5:
                    03:9b:94:84:45:4c:72:ed:ee:17:4a:7c:3d:f3:81:
                    06:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:8D:98:D6:C1:4C:0C:A3:65:5E:04:EB:F1:9C:58:61:A5:E4:8B:42
            X509v3 Authority Key Identifier:
                keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/b42Y1sFMDKNlXgTr8ZxYYaXki0I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.230.54.0/23
                  193.37.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9e:2e:57:c1:4f:0f:ef:57:dd:82:cb:bc:87:bf:7d:84:3d:26:
         ef:b5:0d:ce:de:0d:3e:80:42:59:d6:d8:60:09:bf:bd:c5:7a:
         d0:0d:4b:fc:c2:99:99:7c:f1:b2:3e:64:58:65:62:8c:10:a3:
         aa:ad:a8:60:e4:6a:0c:2c:0b:ef:8f:83:14:b8:ff:ff:67:be:
         cf:e8:01:c6:ac:a3:db:66:c0:d9:72:be:dd:48:49:e6:fd:3e:
         c6:c2:39:c8:c2:c7:3d:bb:a6:65:d3:74:77:17:f6:5f:31:76:
         6b:58:29:cc:76:60:b3:11:64:1d:ee:e2:0a:eb:89:ff:3e:7b:
         e6:39:4b:26:25:da:50:ab:a1:4d:19:92:2a:8a:6e:0d:ca:45:
         05:7e:28:89:f8:44:1d:a1:65:72:1c:63:bb:0d:5e:1d:7c:30:
         22:8c:d0:5a:98:b6:11:9d:10:62:c9:79:06:d9:ab:a8:f3:44:
         ce:70:81:a5:82:c0:55:11:ab:8a:68:f5:ba:5f:71:a1:40:12:
         a6:96:34:47:23:6e:61:09:d5:61:9e:06:21:75:06:37:a0:e7:
         3f:4b:20:ca:0a:ae:9f:56:3f:e6:a7:ee:73:01:9c:f6:75:01:
         73:fc:2a:ea:73:31:25:55:de:d5:95:ed:31:d5:f6:c8:86:8a:
         e9:cd:8e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:27 2024 by rpki-client on console-ams.rpki-client.org