Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/LouT8Rg1LhoNOYdEXxOdQCRgqbc.roa
File:                     LouT8Rg1LhoNOYdEXxOdQCRgqbc.roa (raw, json)
Hash identifier:          WgCON8o7ULrdInADZ2pFWi+ziULOQyragPWbxDIFiiQ=
Subject key identifier:   2E:8B:93:F1:18:35:2E:1A:0D:39:87:44:5F:13:9D:40:24:60:A9:B7
Certificate issuer:       /CN=75e05bc21b2a6f1033711ffca6491c6c30ce5a4a
Certificate serial:       1BC5E7A4
Authority key identifier: 75:E0:5B:C2:1B:2A:6F:10:33:71:1F:FC:A6:49:1C:6C:30:CE:5A:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/LouT8Rg1LhoNOYdEXxOdQCRgqbc.roa
Signing time:             Tue 10 May 2022 15:10:59 +0000
ROA not before:           Tue 10 May 2022 15:10:59 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     36947
IP address blocks:        213.140.56.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 465954724 (0x1bc5e7a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e05bc21b2a6f1033711ffca6491c6c30ce5a4a
        Validity
            Not Before: May 10 15:10:59 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2e8b93f118352e1a0d3987445f139d402460a9b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b0:30:7a:84:96:46:83:db:da:36:18:18:cd:
                    b8:f4:60:f3:4d:77:16:95:38:ab:09:89:fa:76:61:
                    a7:76:26:05:20:39:0e:5c:25:53:cd:9e:f0:ca:0a:
                    99:97:8f:18:44:37:8b:31:89:60:f5:ea:4a:f1:9b:
                    a1:1a:c4:a8:16:49:8a:10:fc:50:ac:9b:92:eb:e4:
                    15:38:aa:28:cf:d5:ad:f3:c1:26:cc:e2:87:2f:7d:
                    12:34:79:9b:0e:c2:a8:40:20:8e:c3:9b:c7:b2:b1:
                    f7:dd:37:8f:ad:03:c2:d7:4a:80:51:22:ca:6d:b1:
                    1a:16:ce:64:2e:f8:3f:71:0e:c0:07:06:95:e2:f9:
                    97:fb:9d:74:dc:e0:54:6a:c2:de:ed:b8:fd:5b:9b:
                    80:27:70:f7:fe:d9:d8:d6:5b:9d:b6:2e:ab:a9:b9:
                    d8:0c:6e:b3:38:61:6b:aa:04:37:56:69:2c:eb:b2:
                    b5:50:27:ce:ed:1a:6e:1e:30:d3:c0:1c:54:e8:4f:
                    3f:15:06:1c:65:90:ab:84:8b:7a:c5:00:ea:a5:eb:
                    6d:ec:6c:8a:c0:c5:26:51:3c:68:b4:19:f9:c3:e4:
                    80:50:1d:09:de:6a:6b:49:48:7b:83:fe:13:aa:ba:
                    fe:b9:5d:40:92:fa:e6:27:86:ae:33:c6:9c:8d:a8:
                    67:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:8B:93:F1:18:35:2E:1A:0D:39:87:44:5F:13:9D:40:24:60:A9:B7
            X509v3 Authority Key Identifier:
                keyid:75:E0:5B:C2:1B:2A:6F:10:33:71:1F:FC:A6:49:1C:6C:30:CE:5A:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/LouT8Rg1LhoNOYdEXxOdQCRgqbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.140.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:81:ce:03:dc:b9:4b:19:20:cb:ec:9a:c1:29:ca:e8:87:0c:
         01:8b:27:ab:87:49:b5:61:bb:d7:84:f3:c7:6b:ef:7a:0d:aa:
         ab:34:16:65:16:8d:c8:7b:fe:4d:74:4c:28:fc:9d:9a:63:b0:
         04:12:2e:62:9b:79:08:a9:9f:b0:4e:59:a2:56:98:ec:49:de:
         8f:19:4d:c0:0f:de:ba:ef:2f:5d:39:1c:0e:f5:91:c4:bf:e2:
         4e:f1:df:57:4f:a5:43:08:e7:4a:b4:cc:8b:d1:10:bf:d3:98:
         2e:2b:2f:93:a5:c4:a0:2a:19:4e:e4:fa:18:5c:cb:d0:36:2a:
         93:b7:1a:53:91:0f:39:3f:c2:47:98:5f:f0:a9:ea:d8:ef:ce:
         0c:3d:bc:2a:20:7e:7c:f4:cc:26:33:c2:d1:bd:64:5f:60:65:
         f2:64:0d:b5:db:29:57:18:ec:28:04:b7:89:01:a5:bb:e7:47:
         6c:1f:59:e4:09:0b:1c:60:2d:04:df:e2:65:8b:07:27:17:16:
         e3:d7:8e:f8:60:3c:4f:09:6f:fd:4e:20:80:c6:c8:fb:56:65:
         4e:b5:25:fb:ab:1d:2c:4b:c0:cc:3e:c3:87:0a:9b:e2:ad:35:
         db:1c:15:85:eb:a9:97:33:e6:34:96:65:7d:e8:28:15:e8:cf:
         48:06:9b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:57 2024 by rpki-client on console-ams.rpki-client.org