Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/RL11b3hQqaP21FAlZ3hfhT0OrVA.roa
File:                     RL11b3hQqaP21FAlZ3hfhT0OrVA.roa (raw, json)
Hash identifier:          6TvGJj/1BmANvB9XaffEmzqyjHtf9JDeu+rOZSMAfh8=
Subject key identifier:   44:BD:75:6F:78:50:A9:A3:F6:D4:50:25:67:78:5F:85:3D:0E:AD:50
Certificate issuer:       /CN=cfc025a9d55bfd643757da4d499dce17201774d2
Certificate serial:       0B0D1F5D
Authority key identifier: CF:C0:25:A9:D5:5B:FD:64:37:57:DA:4D:49:9D:CE:17:20:17:74:D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/RL11b3hQqaP21FAlZ3hfhT0OrVA.roa
Signing time:             Sat 01 Jan 2022 10:58:32 +0000
ROA not before:           Sat 01 Jan 2022 10:58:32 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     48782
IP address blocks:        91.212.30.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 185409373 (0xb0d1f5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfc025a9d55bfd643757da4d499dce17201774d2
        Validity
            Not Before: Jan  1 10:58:32 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=44bd756f7850a9a3f6d4502567785f853d0ead50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:33:64:96:7c:1d:fd:a3:48:19:d8:04:25:66:
                    ba:b2:ba:7c:18:6c:8b:54:6b:31:74:5c:b9:8c:4c:
                    64:a2:07:95:54:94:79:63:e3:9f:2f:cb:70:2e:0e:
                    cc:e7:7d:67:51:01:50:bb:0e:1a:fa:d0:85:a6:0d:
                    be:9a:fb:de:24:c6:bb:e0:f1:d0:11:6c:da:14:19:
                    89:41:2f:04:f0:bd:01:b2:41:30:36:24:2b:77:0e:
                    8e:73:90:df:8b:34:12:b7:4f:5e:96:42:34:b7:72:
                    65:59:e6:e2:3b:23:6c:4f:a6:cb:8b:d9:29:5c:b0:
                    cf:69:a5:d5:e6:3e:cd:12:a3:2e:ce:d5:3e:82:64:
                    b1:16:ed:06:a2:bc:dc:69:a8:06:bb:b3:3d:f1:e3:
                    8c:20:b5:5d:b0:10:df:f2:87:33:e7:3b:f2:a9:d8:
                    79:00:05:be:a4:bc:59:29:60:30:7b:bb:21:9b:a4:
                    fe:6f:36:e4:1f:87:06:18:19:37:d8:4e:ab:5a:31:
                    22:a1:53:96:73:eb:e3:0d:0d:cf:53:17:d9:a1:a5:
                    21:99:db:29:40:22:d4:85:f5:70:71:8a:75:05:74:
                    60:a7:ce:e6:c2:41:51:63:46:9d:be:3b:60:16:35:
                    07:ae:8d:a8:ff:00:92:15:65:48:32:2a:9c:2f:9b:
                    b9:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:BD:75:6F:78:50:A9:A3:F6:D4:50:25:67:78:5F:85:3D:0E:AD:50
            X509v3 Authority Key Identifier:
                keyid:CF:C0:25:A9:D5:5B:FD:64:37:57:DA:4D:49:9D:CE:17:20:17:74:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/RL11b3hQqaP21FAlZ3hfhT0OrVA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.212.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:c2:2d:13:d7:11:09:ef:ff:ae:f8:e3:46:6f:14:d2:89:68:
         e8:26:40:aa:22:b4:e5:e0:a9:4e:5a:73:05:5f:af:26:cc:40:
         58:f0:5c:94:38:6d:06:d1:04:3a:f2:2e:41:86:96:90:c5:f9:
         0a:5d:45:5a:a0:95:48:3d:71:19:a7:ba:04:57:20:1e:2f:02:
         de:52:ac:19:07:4a:ee:d3:d0:89:31:a2:bc:ac:ba:e6:8b:72:
         e8:f7:81:64:bf:41:cb:55:64:68:59:47:32:26:1e:07:be:d5:
         cd:08:cc:87:c9:0f:5b:75:1e:14:17:9c:d1:aa:a7:f4:4f:2b:
         09:2e:eb:90:de:05:f9:58:62:3f:0e:a8:8c:ba:7e:3f:6c:c2:
         60:b2:e8:c5:a5:f4:a1:d5:6e:82:4a:8e:77:75:74:bf:f7:1a:
         41:db:21:30:c5:90:26:32:c9:24:38:dc:32:a6:4b:92:e2:17:
         c4:23:63:36:13:b6:4f:6b:ab:d1:48:20:44:91:3e:45:a2:22:
         a9:34:9a:89:fb:89:72:75:cd:1a:39:e2:08:bb:be:e1:9a:cf:
         0b:0e:64:18:5c:d5:38:94:7a:60:ac:55:84:b5:53:2c:31:83:
         54:71:3c:41:96:66:02:e3:41:7b:0a:3d:3c:55:6b:be:1c:14:
         5a:f8:1b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:12 2024 by rpki-client on console-ams.rpki-client.org