Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/6VRVWl4MI0ph5X6s2YTR1ZAPmZY.roa
File:                     6VRVWl4MI0ph5X6s2YTR1ZAPmZY.roa (raw, json)
Hash identifier:          ORD70kehnDxg6nFE4l7vwWR4cFcBMfyG76kaDKocg44=
Subject key identifier:   E9:54:55:5A:5E:0C:23:4A:61:E5:7E:AC:D9:84:D1:D5:90:0F:99:96
Certificate issuer:       /CN=c50c97eb9baf5428f50f45d330357678b73e061c
Certificate serial:       0F653A60
Authority key identifier: C5:0C:97:EB:9B:AF:54:28:F5:0F:45:D3:30:35:76:78:B7:3E:06:1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xQyX65uvVCj1D0XTMDV2eLc-Bhw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/6VRVWl4MI0ph5X6s2YTR1ZAPmZY.roa
Signing time:             Sat 01 Jan 2022 13:06:13 +0000
ROA not before:           Sat 01 Jan 2022 13:06:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     47692
IP address blocks:        185.190.48.0/24 maxlen: 24
                          185.190.49.0/24 maxlen: 24
                          2a0a:441:1::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 258292320 (0xf653a60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c50c97eb9baf5428f50f45d330357678b73e061c
        Validity
            Not Before: Jan  1 13:06:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e954555a5e0c234a61e57eacd984d1d5900f9996
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:36:e0:d3:27:73:b8:08:8e:0b:52:a4:33:a8:
                    6b:5e:b6:4e:5a:cc:2f:d5:69:91:2f:4c:1d:00:f8:
                    07:2c:56:97:bc:2b:60:2b:10:7e:88:91:fd:16:9f:
                    08:3a:3f:19:03:1d:9d:e5:eb:b5:f6:21:d3:65:46:
                    4e:01:c5:49:77:07:be:fd:79:16:97:32:20:4e:cb:
                    f5:59:a9:00:01:38:ec:84:97:75:db:3e:0c:f7:51:
                    ab:f1:0c:80:d5:da:17:86:82:5e:cf:04:54:dc:01:
                    35:87:56:2c:09:cc:8f:f7:43:a6:cd:91:fd:47:3f:
                    40:02:0b:90:ad:e0:3d:d1:c6:01:dc:47:c9:f8:01:
                    d0:1e:ea:54:a7:35:f6:a6:0b:1c:f4:6a:cb:74:de:
                    c7:70:1b:a7:6e:a6:c5:2f:15:5a:ba:48:26:24:22:
                    b0:5f:ab:48:43:e3:38:db:ee:d0:95:f1:26:ee:0b:
                    b5:7c:3b:4f:d3:ef:b3:e9:61:ec:90:45:d0:1e:db:
                    78:0c:e4:b7:49:bd:d5:07:3d:a8:1e:4b:07:1b:6b:
                    ea:3d:41:7c:54:cc:24:2a:d1:72:bd:fe:7e:c0:28:
                    af:7f:0a:88:8b:30:23:40:99:d0:4f:8a:72:8e:74:
                    1e:33:21:1c:70:99:93:fa:44:ec:32:c5:be:eb:53:
                    65:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:54:55:5A:5E:0C:23:4A:61:E5:7E:AC:D9:84:D1:D5:90:0F:99:96
            X509v3 Authority Key Identifier:
                keyid:C5:0C:97:EB:9B:AF:54:28:F5:0F:45:D3:30:35:76:78:B7:3E:06:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQyX65uvVCj1D0XTMDV2eLc-Bhw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/6VRVWl4MI0ph5X6s2YTR1ZAPmZY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.190.48.0/23
                IPv6:
                  2a0a:441:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         41:f9:ba:6d:d7:50:9e:98:1e:77:9d:30:01:37:0a:d2:fe:89:
         05:13:2b:98:ab:72:f6:b5:92:ed:a8:97:e3:6f:72:9b:02:84:
         c0:98:07:e8:ac:18:26:0d:04:b1:61:ba:be:84:f6:06:60:55:
         91:76:2c:65:c1:5a:16:f2:5f:81:29:b4:68:6a:f4:b6:ec:58:
         e5:f3:e7:3b:59:a7:f6:56:3c:72:2e:ed:72:9e:bd:0b:d0:7d:
         c4:a4:78:c0:77:5f:22:16:f2:ef:b3:7e:25:97:46:97:88:a3:
         fe:a0:aa:c3:3a:e6:4d:60:7d:bc:7e:18:d5:ce:04:e3:1b:15:
         02:49:36:e3:91:8c:d3:70:8d:25:25:2f:9d:ae:0a:d0:ef:f2:
         5d:98:95:33:0f:7c:83:8d:d7:54:d9:99:8c:38:be:46:f3:31:
         f6:5f:5c:04:d6:fd:db:c1:5d:b3:df:cc:47:1c:8f:77:67:e0:
         55:f0:a9:50:72:ed:4b:1e:a9:d5:d3:17:6f:79:e8:00:89:fc:
         e2:78:a2:45:fb:f9:d3:2f:c3:32:6b:01:1e:5b:b0:1b:92:95:
         d0:64:4b:21:28:9e:11:24:3f:ec:a2:ca:5e:14:85:31:2b:ab:
         61:23:89:18:ba:4e:42:3d:28:e7:fb:7f:16:08:e0:a2:bd:96:
         64:ac:bd:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:31 2024 by rpki-client on console-fra.rpki-client.org