Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/E2EB6A29lgumSyENmMp5vQ9hf7w.roa
File:                     E2EB6A29lgumSyENmMp5vQ9hf7w.roa (raw, json)
Hash identifier:          yC95TOlDLL93OeSFItGVQfGQqCBUiN/xHXS5m6XlrbQ=
Subject key identifier:   13:61:01:E8:0D:BD:96:0B:A6:4B:21:0D:98:CA:79:BD:0F:61:7F:BC
Certificate issuer:       /CN=60998d3c9d8bdc9c1dff8e319424412b6cdc1dd3
Certificate serial:       0793B61C
Authority key identifier: 60:99:8D:3C:9D:8B:DC:9C:1D:FF:8E:31:94:24:41:2B:6C:DC:1D:D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/E2EB6A29lgumSyENmMp5vQ9hf7w.roa
Signing time:             Fri 04 Mar 2022 08:45:04 +0000
ROA not before:           Fri 04 Mar 2022 08:45:04 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61317
IP address blocks:        147.189.163.0/24 maxlen: 24
                          147.189.162.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 127120924 (0x793b61c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60998d3c9d8bdc9c1dff8e319424412b6cdc1dd3
        Validity
            Not Before: Mar  4 08:45:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=136101e80dbd960ba64b210d98ca79bd0f617fbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6a:6c:4e:2a:aa:b1:a7:b6:da:43:84:29:c2:
                    ae:3e:32:dc:e2:9a:4d:42:1e:f1:73:95:ab:03:75:
                    c7:ed:c8:cd:ed:60:b5:15:e9:29:8f:49:73:76:cf:
                    47:2c:e9:26:da:24:89:83:40:2d:81:4a:29:68:92:
                    5e:38:be:21:45:b6:50:5a:54:d1:88:3e:74:d9:3c:
                    8f:5f:d1:e9:4a:ad:7b:a5:af:2a:e2:6e:3c:04:03:
                    ba:78:ea:49:67:87:55:a8:5c:99:e1:89:79:8c:bd:
                    71:02:8f:be:c5:42:cd:54:38:a3:ef:79:48:a0:9b:
                    f9:80:5c:69:56:38:29:cc:fe:1c:db:a9:00:a8:c9:
                    23:b4:52:b1:32:2d:68:14:d9:7d:33:78:89:92:99:
                    ef:d8:53:c8:ef:12:c0:82:0d:16:aa:93:47:c5:db:
                    5e:55:e7:f3:32:79:0c:6a:4c:47:c7:49:ed:68:54:
                    af:f3:35:81:33:01:35:45:e5:2b:a3:50:60:eb:01:
                    cd:30:61:78:7c:05:88:c6:7b:d9:e5:23:27:02:c5:
                    de:ae:d5:c4:5f:cf:59:ca:4e:f3:0d:77:aa:3d:ad:
                    8e:15:1d:6f:88:c2:0a:05:ee:c5:68:1b:38:7b:69:
                    49:86:08:be:f9:e3:0c:65:df:10:bc:4d:89:70:ae:
                    3d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:61:01:E8:0D:BD:96:0B:A6:4B:21:0D:98:CA:79:BD:0F:61:7F:BC
            X509v3 Authority Key Identifier:
                keyid:60:99:8D:3C:9D:8B:DC:9C:1D:FF:8E:31:94:24:41:2B:6C:DC:1D:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/E2EB6A29lgumSyENmMp5vQ9hf7w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.189.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d1:2e:47:48:f4:6b:12:28:79:8f:dc:64:19:72:8d:6c:c3:31:
         8c:06:0d:50:ee:eb:32:fc:22:43:93:08:55:b5:53:7f:87:44:
         e1:15:e7:75:c8:b1:d8:40:5d:9d:3d:9b:e9:96:7f:42:47:27:
         6e:ed:b0:f1:eb:ff:f8:4e:16:37:c1:4a:b2:45:b1:6a:0e:34:
         22:f6:05:43:ca:b8:04:11:be:8a:92:8a:f1:35:bd:ce:fc:b5:
         30:7f:cb:d6:ec:c2:0f:32:27:f6:a4:ce:b2:d6:5e:48:56:cf:
         bb:90:42:89:e0:ba:4c:47:d3:b1:41:22:07:c8:10:d8:56:5a:
         b8:45:06:48:5b:86:33:cf:57:45:e7:68:f4:6e:75:0a:65:33:
         6e:82:8b:db:de:26:0c:e1:07:b8:66:b8:92:52:44:3d:88:3d:
         45:95:53:7f:c8:9e:e2:7e:fd:84:e1:e7:b8:7e:f8:8c:aa:a7:
         dd:81:43:2d:03:ec:bb:cd:3d:48:1b:11:e5:0f:60:c5:13:12:
         01:1a:2b:70:04:f9:fc:74:0a:66:e8:c4:9a:39:a2:30:8f:55:
         d3:82:a9:d8:c7:3c:75:49:e3:a6:a8:67:83:14:d0:15:23:f6:
         03:1f:3b:fa:a9:03:7f:c0:79:5c:d1:af:8f:20:e4:b3:74:66:
         e9:9d:9b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:06 2024 by rpki-client on console-ams.rpki-client.org