Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/0Lk6j2hOaW315ZLOnwKDtOX2P8M.roa
File:                     0Lk6j2hOaW315ZLOnwKDtOX2P8M.roa (raw, json)
Hash identifier:          c4+II2qGOVeHHLi3PR3/ei7G5j1Te6NPhTJUjHojLGo=
Subject key identifier:   D0:B9:3A:8F:68:4E:69:6D:F5:E5:92:CE:9F:02:83:B4:E5:F6:3F:C3
Certificate issuer:       /CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Certificate serial:       03B4152A
Authority key identifier: 6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/0Lk6j2hOaW315ZLOnwKDtOX2P8M.roa
Signing time:             Tue 08 Feb 2022 13:45:21 +0000
ROA not before:           Tue 08 Feb 2022 13:45:21 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     834
IP address blocks:        91.235.2.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62133546 (0x3b4152a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
        Validity
            Not Before: Feb  8 13:45:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d0b93a8f684e696df5e592ce9f0283b4e5f63fc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0e:f9:08:7c:d8:40:a9:d7:c4:31:a7:69:72:
                    13:2f:e5:fe:75:b3:a1:8b:c1:91:eb:d2:4c:8c:5e:
                    2b:f5:27:09:07:1c:85:70:e3:5f:13:27:9a:6b:3d:
                    72:fb:1f:66:3e:62:0e:8b:e4:36:35:0b:d7:75:61:
                    83:1c:fb:e4:24:a1:5d:4a:fa:40:41:d3:5d:7c:4d:
                    bb:28:a8:f9:98:ca:66:a6:0e:97:95:86:ad:24:7b:
                    53:b6:41:fc:9c:f6:be:cb:19:73:8d:db:ff:42:db:
                    2f:ce:74:db:e2:6a:7f:5e:6b:9d:b3:c6:49:af:33:
                    31:af:e9:65:db:95:0b:63:89:4c:9f:30:2b:45:f5:
                    d1:59:ac:6c:e3:9d:a9:94:3f:de:49:c0:46:35:b2:
                    3c:c7:3c:6c:7a:e6:30:d3:6c:8f:e3:6d:f6:fb:c3:
                    ed:89:88:4b:6b:d7:31:c8:bf:01:f8:ff:aa:ce:8e:
                    ea:5c:e4:8b:2f:b2:94:61:d1:95:49:48:5b:00:00:
                    7b:f7:d0:90:3f:1c:30:29:7d:a3:0e:5a:59:4d:e5:
                    5b:b0:bf:03:ca:9f:78:7f:87:37:fa:a6:3f:3b:cf:
                    47:4a:e6:ca:77:7a:d3:b1:f3:b2:f2:96:98:73:9e:
                    1a:34:f3:01:0e:19:d2:0e:12:b3:a7:a2:e0:71:82:
                    d2:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:B9:3A:8F:68:4E:69:6D:F5:E5:92:CE:9F:02:83:B4:E5:F6:3F:C3
            X509v3 Authority Key Identifier:
                keyid:6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/0Lk6j2hOaW315ZLOnwKDtOX2P8M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.235.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:bc:8f:53:e5:20:f9:36:ca:bf:39:7e:fe:88:76:94:a2:cc:
         a9:ca:ea:41:47:5a:a5:6f:8a:e8:06:da:43:dc:37:1b:77:22:
         cc:81:82:fe:15:f7:73:b3:07:fe:b4:5e:62:e7:a7:83:4e:07:
         71:c8:5e:54:7d:0c:91:00:59:99:dc:44:3b:fe:73:3b:ad:25:
         3d:c6:42:2a:64:cd:74:05:c8:17:c7:f9:e2:66:30:c6:df:d4:
         44:b9:ce:91:79:ab:bf:2a:0e:6b:31:d8:9e:82:57:fe:9c:fa:
         71:b9:6c:7a:8e:2a:2f:99:00:53:63:47:b7:8d:f0:c7:e1:ef:
         80:cb:1d:6b:2a:1f:bc:a7:8a:cf:42:89:bd:ad:c1:c6:a8:51:
         3d:28:7b:93:b4:12:3a:13:d5:26:b6:cf:21:32:d6:9e:ba:09:
         0f:ae:35:7c:57:46:68:64:22:48:fc:47:eb:18:ac:81:9e:61:
         2f:57:77:cd:fb:f4:71:c0:65:70:1a:d9:87:a8:18:e0:36:2c:
         98:13:ee:4e:1a:8d:0b:21:d4:96:c2:80:19:d6:0a:20:ce:c4:
         f3:34:09:f5:72:cf:64:33:d3:d3:e2:c6:d9:79:3f:58:ee:0e:
         41:4f:ed:72:39:03:e9:d7:c8:17:32:e9:45:82:3d:fc:df:ff:
         a8:7b:ef:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:45 2024 by rpki-client on console-ams.rpki-client.org