Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/EnnU66SJrQ9SSs2TijwJA1MEOlI.roa
File:                     EnnU66SJrQ9SSs2TijwJA1MEOlI.roa (raw, json)
Hash identifier:          u9fqqnvx6i62sW346vflW43RUgZTN6dGf3C4Sng2AX8=
Subject key identifier:   12:79:D4:EB:A4:89:AD:0F:52:4A:CD:93:8A:3C:09:03:53:04:3A:52
Certificate issuer:       /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial:       03EF1DE5
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/EnnU66SJrQ9SSs2TijwJA1MEOlI.roa
Signing time:             Wed 02 Mar 2022 12:07:05 +0000
ROA not before:           Wed 02 Mar 2022 12:07:05 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211585
IP address blocks:        46.37.112.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66002405 (0x3ef1de5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
        Validity
            Not Before: Mar  2 12:07:05 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1279d4eba489ad0f524acd938a3c090353043a52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:4f:28:d9:09:ba:4a:4c:f8:8d:83:8e:4c:0c:
                    24:5c:97:99:de:b0:c9:5f:a8:09:1d:17:d8:02:cd:
                    d5:71:2f:3c:3b:09:79:4a:86:ca:b0:9e:3e:83:59:
                    a4:95:91:de:1f:69:fd:f4:71:37:34:f0:96:82:90:
                    c3:3d:39:4f:9a:88:f7:e4:49:23:f8:95:aa:cb:3f:
                    f6:be:78:7b:9b:8b:05:cc:53:11:07:ba:21:0e:e5:
                    0f:1b:cc:4a:3f:12:e5:35:9a:27:5c:d5:c9:d3:5e:
                    dc:78:ca:f4:aa:aa:e4:b6:3a:93:06:b4:0d:75:41:
                    a0:f4:e2:12:01:04:fe:a0:b6:99:5c:81:53:af:8d:
                    2d:77:2c:46:fd:b9:bc:5d:4c:d1:c5:09:a7:19:10:
                    76:1d:99:78:f6:c8:ba:98:f5:43:d0:3c:92:5e:6d:
                    55:57:0c:c0:f7:f7:05:1a:d3:db:0b:7d:7b:7c:57:
                    5f:2d:da:eb:df:ac:6a:21:af:4b:c4:4d:d9:c8:90:
                    6a:76:ca:fe:3f:5b:df:b0:e3:84:6b:06:84:2f:79:
                    13:e5:db:b7:4f:37:b3:62:6c:6a:50:81:50:41:5d:
                    d7:51:81:2a:fd:67:0c:b5:cf:d2:2f:e7:66:a3:8a:
                    28:e8:24:a2:d8:0b:3d:f7:8f:c7:20:a2:32:02:22:
                    46:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:79:D4:EB:A4:89:AD:0F:52:4A:CD:93:8A:3C:09:03:53:04:3A:52
            X509v3 Authority Key Identifier:
                keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/EnnU66SJrQ9SSs2TijwJA1MEOlI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.37.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:40:d0:4e:90:f7:95:43:41:3d:e5:bc:df:f9:b1:dd:6f:6d:
         b0:55:04:22:0a:07:81:c1:fe:0e:d0:bb:0a:77:34:2b:18:d6:
         e1:71:1c:f3:1d:db:99:53:b3:4b:56:7f:77:6a:aa:3f:da:ed:
         a5:d6:62:de:fe:59:4c:ff:14:d1:9a:da:fe:44:b1:37:7d:77:
         a0:4a:05:91:23:26:e2:44:86:33:88:42:3c:28:d3:75:59:8f:
         8d:8e:e2:88:94:89:5e:12:38:e0:3e:6d:3b:d0:1d:7f:4f:d8:
         82:64:76:dd:bb:90:3c:58:6c:6f:8d:03:57:1f:ee:99:f6:47:
         c2:48:2e:a2:a6:54:f2:d4:70:6b:e3:af:32:4b:40:8d:39:b8:
         0a:fd:f5:27:03:7d:5e:f5:94:db:2d:37:4c:89:ca:09:fa:d4:
         b6:3c:1a:17:52:11:59:9a:f9:52:54:d5:e4:27:92:05:d9:39:
         25:85:81:65:0d:35:8c:aa:03:a8:02:25:28:87:97:94:67:4a:
         f9:b3:3e:42:99:89:49:22:77:23:07:99:c3:52:89:52:77:8a:
         d5:22:f5:8c:e3:ce:d3:fd:63:d4:47:f7:3e:60:fc:dd:39:0f:
         6d:9c:b8:2d:83:6f:d1:e2:53:57:ef:dc:9c:92:7c:04:51:4d:
         5a:e3:e8:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:34 2023 by rpki-client on console-ams.rpki-client.org