Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/x6Dm7WMF3tY-gclbRWlynHQEL1w.roa
File:                     x6Dm7WMF3tY-gclbRWlynHQEL1w.roa (raw, json)
Hash identifier:          8p1yYf3a7DahXBjSjVUbzMCQK9za1As2Q1mx+XimAK8=
Subject key identifier:   C7:A0:E6:ED:63:05:DE:D6:3E:81:C9:5B:45:69:72:9C:74:04:2F:5C
Certificate issuer:       /CN=68639a21759796fe3a1d919f9b5737eb68d708e4
Certificate serial:       0183F97D349514E780384C8E4ED52E8C36BD
Authority key identifier: 68:63:9A:21:75:97:96:FE:3A:1D:91:9F:9B:57:37:EB:68:D7:08:E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aGOaIXWXlv46HZGfm1c362jXCOQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/x6Dm7WMF3tY-gclbRWlynHQEL1w.roa
Signing time:             Fri 21 Oct 2022 07:41:15 +0000
ROA not before:           Fri 21 Oct 2022 07:41:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     30936
IP address blocks:        185.39.116.0/22 maxlen: 22
                          82.116.32.0/19 maxlen: 19
                          82.116.63.0/24 maxlen: 24
                          87.238.232.0/21 maxlen: 21
                          2a01:4420::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:f9:7d:34:95:14:e7:80:38:4c:8e:4e:d5:2e:8c:36:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68639a21759796fe3a1d919f9b5737eb68d708e4
        Validity
            Not Before: Oct 21 07:41:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c7a0e6ed6305ded63e81c95b4569729c74042f5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:52:25:86:ed:de:f0:ef:aa:9b:54:eb:92:aa:
                    4f:6b:c5:5b:73:7e:74:a5:d0:85:e5:9b:57:0a:f0:
                    8e:ca:4c:cc:2c:4a:d4:cb:77:bc:c1:38:46:38:bb:
                    92:e1:42:a8:4d:81:9b:be:7e:f5:0d:73:5d:4c:37:
                    5f:d6:a5:79:3f:0e:c7:64:fc:7b:06:29:5f:9c:66:
                    9d:91:c9:3d:a0:1b:01:42:3d:e7:89:f9:34:6e:34:
                    0d:6a:38:00:d2:c2:fc:15:2d:f6:ff:3a:74:f4:c2:
                    4b:e6:72:35:1d:54:a6:4a:27:d7:19:48:8f:1d:cb:
                    f0:5e:3e:7d:1a:2f:40:4b:ff:52:8e:91:77:bc:8e:
                    48:0d:54:7e:b9:fb:e6:de:8a:4f:55:9d:1b:b3:ac:
                    c9:bf:9d:da:b5:5c:b2:a4:b0:6f:4d:a2:ce:a6:a0:
                    c2:f8:61:41:f4:23:ca:32:b3:33:20:4d:3f:30:a4:
                    6e:24:0c:2b:d2:72:05:33:de:2d:e5:9c:e5:a6:2e:
                    05:7c:37:95:a1:8a:68:0f:55:7b:57:16:89:9b:5d:
                    13:5c:00:ad:c2:39:1a:ae:12:a3:1d:22:ec:f4:4e:
                    e8:43:d5:c4:b0:1a:55:30:05:b1:d8:f1:b2:a0:87:
                    18:33:46:04:9b:27:97:f9:86:f0:b7:c8:80:b0:9a:
                    e1:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:A0:E6:ED:63:05:DE:D6:3E:81:C9:5B:45:69:72:9C:74:04:2F:5C
            X509v3 Authority Key Identifier:
                keyid:68:63:9A:21:75:97:96:FE:3A:1D:91:9F:9B:57:37:EB:68:D7:08:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGOaIXWXlv46HZGfm1c362jXCOQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/x6Dm7WMF3tY-gclbRWlynHQEL1w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/aGOaIXWXlv46HZGfm1c362jXCOQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.116.32.0/19
                  87.238.232.0/21
                  185.39.116.0/22
                IPv6:
                  2a01:4420::/32

    Signature Algorithm: sha256WithRSAEncryption
         33:d7:69:44:55:55:d7:a4:c6:5a:59:59:00:da:29:64:18:16:
         e6:09:fb:6b:33:7e:d7:67:90:78:63:5b:82:e7:bf:88:92:b7:
         7c:d6:56:d2:f0:02:13:63:98:94:da:95:90:61:bd:20:a2:c5:
         56:03:1c:d0:42:4f:a4:7a:48:50:65:fd:04:45:c7:52:f6:d0:
         c1:19:ef:6c:41:26:1f:67:c0:0e:ba:f5:09:58:f6:77:d5:81:
         1b:fd:74:68:67:59:43:4f:be:c8:d8:10:7b:29:a3:fe:b7:8f:
         cf:bc:3f:c3:0b:0e:da:de:6b:16:a6:8b:91:fb:22:81:99:66:
         ea:ed:fd:e0:08:dc:06:66:a3:70:d4:f2:2d:e4:83:81:9b:f9:
         d0:d3:dd:55:ea:71:91:c2:1c:12:a0:45:48:45:50:27:84:9e:
         63:59:cb:57:c3:da:4c:38:bd:e1:3d:8b:51:93:a6:aa:78:ae:
         02:76:b5:4d:31:4a:19:98:74:68:d2:b4:73:99:21:61:94:de:
         5e:7b:c8:b7:00:af:47:0f:71:b6:08:09:15:9d:d6:ba:28:bb:
         74:50:78:fc:42:46:b9:d6:6a:95:90:82:5b:ba:41:f9:20:e4:
         b8:fb:da:5c:6c:1e:4d:3f:65:7a:0e:54:8d:ed:84:ab:69:c0:
         ee:b3:1a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:19 2024 by rpki-client on console-fra.rpki-client.org