Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/Qcbggo_2Cdy_FDffrWoU_K4VfoM.roa
File:                     Qcbggo_2Cdy_FDffrWoU_K4VfoM.roa (raw, json)
Hash identifier:          KHvqC3NHHavcy8S0Isd+4DhqpqwWy5mwQmm6RVbKiUE=
Subject key identifier:   41:C6:E0:82:8F:F6:09:DC:BF:14:37:DF:AD:6A:14:FC:AE:15:7E:83
Certificate issuer:       /CN=a0df7f5b6618bda23c83bed11b442041f1fb456d
Certificate serial:       BB1029
Authority key identifier: A0:DF:7F:5B:66:18:BD:A2:3C:83:BE:D1:1B:44:20:41:F1:FB:45:6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oN9_W2YYvaI8g77RG0QgQfH7RW0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/Qcbggo_2Cdy_FDffrWoU_K4VfoM.roa
Signing time:             Sun 06 Feb 2022 00:50:41 +0000
ROA not before:           Sun 06 Feb 2022 00:50:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     51847
IP address blocks:        2a12:e100:1::/48 maxlen: 48
                          2a12:e100:2::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12259369 (0xbb1029)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0df7f5b6618bda23c83bed11b442041f1fb456d
        Validity
            Not Before: Feb  6 00:50:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=41c6e0828ff609dcbf1437dfad6a14fcae157e83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7e:c6:16:c0:7a:f7:c5:f1:06:35:1a:48:e2:
                    6d:bc:35:84:ff:43:26:b8:c4:ed:db:0d:aa:1d:69:
                    08:22:f5:44:ec:0d:d1:42:56:fe:25:bd:e2:e3:22:
                    de:b9:4d:91:69:fa:eb:08:13:e2:49:95:79:f8:f6:
                    13:d5:c5:cb:b4:2b:f3:7f:5b:ff:6e:b0:db:6b:96:
                    11:24:d8:a1:ee:c3:da:19:fc:1c:ce:30:04:37:7e:
                    b6:d6:78:14:b0:1a:b8:c2:b9:d9:3c:43:a6:ca:67:
                    62:c6:9e:49:9b:03:34:9d:cf:b7:5e:a9:95:a7:d1:
                    02:2d:26:6b:f8:8c:88:04:2a:d8:4c:1b:6c:89:2a:
                    19:0d:98:2d:3b:15:31:b2:2a:e3:df:e3:4f:21:d8:
                    eb:40:f2:cf:90:6b:1a:13:27:8a:a8:7b:07:b8:87:
                    bc:fb:c7:b1:d3:e9:84:07:95:b8:4a:30:33:1c:1f:
                    03:cc:d5:93:85:7f:22:01:92:36:3a:ab:2b:b5:a2:
                    38:c7:56:9f:ba:aa:8c:97:5b:34:14:ab:dd:dd:77:
                    b9:14:22:4d:4e:03:20:ff:92:d4:3c:5e:1e:49:92:
                    4b:f5:f5:19:07:9e:3c:c8:27:29:d0:e5:d1:03:a9:
                    37:f3:d0:d6:70:e9:99:80:92:19:dc:4e:8d:b6:41:
                    62:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:C6:E0:82:8F:F6:09:DC:BF:14:37:DF:AD:6A:14:FC:AE:15:7E:83
            X509v3 Authority Key Identifier:
                keyid:A0:DF:7F:5B:66:18:BD:A2:3C:83:BE:D1:1B:44:20:41:F1:FB:45:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oN9_W2YYvaI8g77RG0QgQfH7RW0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/Qcbggo_2Cdy_FDffrWoU_K4VfoM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:e100:1::-2a12:e100:2:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         89:84:e7:38:77:1d:e8:5d:ba:16:53:95:14:57:ac:1f:42:17:
         82:98:55:cf:e6:5c:aa:b9:48:47:af:a3:a0:69:91:03:55:f0:
         35:ea:8c:07:88:3e:ab:9f:22:3d:ff:f7:c3:3d:a8:68:1a:c7:
         80:a9:2a:06:e8:e6:bc:a5:86:ee:ea:b3:25:3f:f5:f5:22:d4:
         b3:40:42:a6:ad:9f:dc:ef:23:9d:15:08:a8:60:aa:e4:6b:28:
         9d:90:c6:67:1d:dc:d6:01:b2:39:9a:96:83:e8:3f:22:48:01:
         e6:fa:99:dc:b5:b8:91:15:85:25:9c:c3:a8:ae:18:12:f8:a0:
         63:18:f7:cf:31:6e:e6:19:c7:cc:f8:25:8b:37:07:d0:b0:1c:
         0f:7c:95:78:6b:4d:13:9e:72:bb:22:fd:de:22:d5:1f:4b:71:
         1d:87:f6:0e:74:40:d0:a2:a7:2d:48:92:7a:30:da:ba:ee:ab:
         61:dc:90:fa:6f:d6:5d:10:e9:95:7f:83:25:ea:58:75:19:2f:
         3e:ae:61:a4:77:f7:66:e5:6f:c2:1f:f1:67:62:7b:56:72:30:
         e6:bd:9a:57:25:bf:cf:c0:18:93:f0:ab:69:df:fc:7d:97:59:
         48:5f:77:64:db:03:3d:02:4a:cc:80:49:92:8d:d4:b5:e1:7e:
         2f:09:6f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:10 2024 by rpki-client on console-ams.rpki-client.org