Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/SRDzAhNnT5tWbnb4k12irAyjvLM.roa
File:                     SRDzAhNnT5tWbnb4k12irAyjvLM.roa (raw, json)
Hash identifier:          WMlAac4NMBJjP1PX4WLOnrS4AS+gT01i5dPURtHOPHU=
Subject key identifier:   49:10:F3:02:13:67:4F:9B:56:6E:76:F8:93:5D:A2:AC:0C:A3:BC:B3
Certificate issuer:       /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial:       0182201B58E698EA8BBB80CC6198C9F9BCB8
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/SRDzAhNnT5tWbnb4k12irAyjvLM.roa
Signing time:             Thu 21 Jul 2022 09:33:59 +0000
ROA not before:           Thu 21 Jul 2022 09:33:59 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60721
IP address blocks:        146.247.102.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:20:1b:58:e6:98:ea:8b:bb:80:cc:61:98:c9:f9:bc:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
        Validity
            Not Before: Jul 21 09:33:59 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4910f30213674f9b566e76f8935da2ac0ca3bcb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2b:fa:a7:66:2f:d6:f1:d9:23:fd:7e:6d:2f:
                    c7:c5:6a:10:b8:14:ac:0f:a9:03:88:1e:64:09:b0:
                    44:64:23:dd:9c:48:1f:e7:20:58:04:ce:ca:89:e5:
                    1b:8f:c5:60:a3:0e:78:0b:30:74:6f:fa:13:69:f6:
                    38:99:e1:dc:7a:92:9d:64:8f:a1:58:48:41:d5:94:
                    7e:c0:13:4f:39:07:2d:e0:0d:c7:1d:b7:04:4c:bf:
                    ad:d1:e0:0b:67:51:ce:bc:b6:b7:87:38:7e:59:2b:
                    84:56:bc:c0:b3:1e:f3:2f:55:9f:ad:40:b1:b6:a3:
                    da:9b:e1:e8:1b:1f:a2:58:df:73:34:28:5f:f9:c6:
                    da:a9:58:0d:d6:83:13:4d:19:7d:df:a5:0a:1a:fd:
                    0e:69:c3:67:d2:a2:84:3d:bd:78:a3:25:d5:ff:28:
                    40:86:2b:02:1a:ff:cb:2b:41:b6:be:0c:a2:51:d0:
                    e7:ec:ce:66:be:80:ad:58:62:35:7c:31:97:f3:70:
                    fb:1c:ca:6b:a0:6d:e3:1f:3d:a9:81:86:b4:0e:95:
                    2c:70:0f:82:28:c5:f4:36:3f:50:96:c2:59:14:9b:
                    67:e6:b9:21:4e:19:74:eb:eb:e0:62:86:c5:82:2a:
                    d8:41:9c:8c:b1:e5:d4:5d:fa:29:23:d2:4f:c4:cf:
                    0a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:10:F3:02:13:67:4F:9B:56:6E:76:F8:93:5D:A2:AC:0C:A3:BC:B3
            X509v3 Authority Key Identifier:
                keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/SRDzAhNnT5tWbnb4k12irAyjvLM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.247.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:51:c1:1c:7d:12:39:d8:0a:22:94:0e:4a:dc:8a:bd:0c:55:
         03:64:e9:ba:28:d0:03:78:b4:38:ed:78:ef:26:b7:4d:30:db:
         16:0e:44:03:d9:82:0f:45:fb:76:c4:0b:b8:73:44:6c:47:08:
         9b:c5:b1:1a:18:ee:7e:64:c0:eb:4f:2c:57:96:ea:bd:82:e7:
         91:b0:a9:5c:cd:7b:b5:53:14:eb:4c:01:d6:de:14:bc:99:a2:
         5d:64:bf:8b:c8:4a:65:f3:48:f8:36:35:12:fe:60:e4:7c:5e:
         d6:d5:35:98:33:d4:68:e1:29:0a:3e:3f:1f:d5:fb:c4:06:69:
         0d:7e:e7:c9:69:96:6b:fa:22:6e:f9:7a:be:26:cb:dd:86:01:
         34:b8:97:25:a8:b7:e3:2d:69:ca:eb:f7:8c:d5:3e:0a:18:1d:
         4b:26:7b:71:fa:d6:6b:a5:da:82:48:1f:3b:e5:ee:75:a3:31:
         dd:04:c6:52:b9:33:be:9c:b1:4b:90:47:9e:eb:1e:77:a2:9f:
         0b:2b:70:9d:f6:7e:f0:23:7b:d9:42:98:49:b8:b4:dd:1a:94:
         58:dc:8d:bd:57:04:82:8f:01:80:55:16:c1:e9:2f:da:9c:6a:
         ee:43:9e:dc:b4:80:91:6e:b1:6f:2f:f4:75:e0:47:50:40:ac:
         96:43:e7:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:19 2024 by rpki-client on console-fra.rpki-client.org