Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/EabauAkzXljxSBc9D8svldc82t8.roa
File:                     EabauAkzXljxSBc9D8svldc82t8.roa (raw, json)
Hash identifier:          R1gyo7nxVp0hwO+wsL+CLi8fI6YPyjxp/p2Xtmx27w0=
Subject key identifier:   11:A6:DA:B8:09:33:5E:58:F1:48:17:3D:0F:CB:2F:95:D7:3C:DA:DF
Certificate issuer:       /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial:       04F6A279
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/EabauAkzXljxSBc9D8svldc82t8.roa
Signing time:             Thu 09 Jun 2022 09:27:02 +0000
ROA not before:           Thu 09 Jun 2022 09:27:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211975
IP address blocks:        46.37.98.0/24 maxlen: 24
                          46.37.101.0/24 maxlen: 24
                          46.37.108.0/24 maxlen: 24
                          46.37.115.0/24 maxlen: 24
                          46.37.113.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83272313 (0x4f6a279)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
        Validity
            Not Before: Jun  9 09:27:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=11a6dab809335e58f148173d0fcb2f95d73cdadf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a7:81:48:d9:f1:23:62:13:37:64:81:1e:08:
                    6a:22:95:fb:8e:32:21:ed:fa:74:33:f7:7c:97:d9:
                    cb:12:e8:6a:60:79:42:dc:99:0e:43:17:a0:04:55:
                    a0:44:6e:79:f0:e9:9d:bb:9a:8e:3e:c0:7e:94:fc:
                    44:90:7e:8c:eb:b2:6f:35:b1:b4:85:0b:bc:da:58:
                    66:67:ce:b9:ea:3b:d4:53:83:e7:b1:b1:26:c4:86:
                    7a:44:c4:20:c0:bd:35:7e:b1:64:f7:4a:9f:82:5a:
                    ee:4a:56:0d:a4:6e:be:ee:fa:5b:2f:24:5d:1d:07:
                    ec:c5:cb:ae:d3:a7:6c:91:19:8e:3e:ec:f0:ce:34:
                    b4:1d:ea:3a:bb:f2:a6:c0:63:67:28:88:dc:ff:b9:
                    30:80:7f:1f:18:6b:cb:69:0a:ba:36:96:07:f4:88:
                    d1:c2:8e:08:32:1b:e2:85:76:37:9b:fe:12:39:08:
                    f3:0a:b6:57:f1:a1:67:c4:cf:48:bd:67:9a:1e:8e:
                    b7:8a:56:a1:fd:14:ae:e1:c6:f7:aa:a4:40:83:aa:
                    00:31:5c:21:93:41:cc:d8:1e:73:f2:0d:5c:be:aa:
                    41:c7:00:3b:50:3d:8f:dc:ec:bb:ae:32:e3:b4:be:
                    f7:ea:ad:24:16:44:75:9f:dd:dc:e3:a1:de:34:0f:
                    1e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:A6:DA:B8:09:33:5E:58:F1:48:17:3D:0F:CB:2F:95:D7:3C:DA:DF
            X509v3 Authority Key Identifier:
                keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/EabauAkzXljxSBc9D8svldc82t8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.37.98.0/24
                  46.37.101.0/24
                  46.37.108.0/24
                  46.37.113.0/24
                  46.37.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:0c:46:a8:e4:a2:95:f6:1d:76:f7:95:29:aa:ed:56:f4:b9:
         ed:fc:28:0b:b9:2b:d5:5b:63:e1:3c:09:92:c6:15:04:77:fe:
         af:76:12:40:b0:9b:8b:8d:e3:e7:07:2f:f3:a6:ff:23:da:70:
         ee:fa:a8:37:27:f6:b8:e0:53:15:0b:e4:c0:0e:5b:04:84:08:
         e6:19:11:c6:4d:c3:16:75:f6:df:bb:e0:18:54:ad:d0:ac:de:
         bc:05:dc:f1:da:37:ba:0f:ff:99:81:a6:df:e6:6d:92:1a:f5:
         db:d0:e2:6d:ea:df:dd:28:8d:42:2f:f8:36:f3:0a:f9:94:c0:
         d0:3f:93:2a:d4:c1:a5:1c:03:25:2b:c1:ca:63:88:bf:f5:c5:
         c2:27:bf:0c:07:35:32:54:9f:8f:29:9f:86:12:7e:fe:07:59:
         a8:41:96:30:0b:dc:54:f5:3c:e8:75:12:12:52:6c:18:98:c0:
         c4:fb:b2:3e:35:6d:78:73:3f:3c:f2:75:b2:38:9f:cd:6a:fc:
         57:88:b1:c9:5f:c1:eb:91:ca:7b:37:d9:e7:f5:7b:98:b0:83:
         f6:56:3f:b7:aa:ff:12:11:60:a1:14:0c:60:0f:0a:ad:93:c5:
         e7:63:2c:9b:73:4e:4d:61:1e:b1:ff:15:b9:83:e2:fc:2f:ec:
         b0:1f:11:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:34 2023 by rpki-client on console-ams.rpki-client.org