Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/_tIO3-xTaaz6ZTaJBQI9Wv3hGbQ.roa
File:                     _tIO3-xTaaz6ZTaJBQI9Wv3hGbQ.roa (raw, json)
Hash identifier:          bpQDeRVG+9RWjy2NMiJA94MnLwFgBPYPa+cMNF0UcnQ=
Subject key identifier:   FE:D2:0E:DF:EC:53:69:AC:FA:65:36:89:05:02:3D:5A:FD:E1:19:B4
Certificate issuer:       /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial:       0184198CC566CD2C7F834F8D262A642C3CA8
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/_tIO3-xTaaz6ZTaJBQI9Wv3hGbQ.roa
Signing time:             Thu 27 Oct 2022 13:06:06 +0000
ROA not before:           Thu 27 Oct 2022 13:06:06 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211975
IP address blocks:        146.247.105.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:19:8c:c5:66:cd:2c:7f:83:4f:8d:26:2a:64:2c:3c:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
        Validity
            Not Before: Oct 27 13:06:06 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fed20edfec5369acfa65368905023d5afde119b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:1e:67:64:9d:89:0d:36:4d:76:a5:f3:d7:9b:
                    fd:94:ec:d6:2c:85:fe:28:62:46:8a:29:59:ba:0c:
                    f5:f5:3c:d5:e2:62:d4:0a:32:58:46:fc:58:97:25:
                    19:03:fa:83:ff:20:95:34:5a:96:35:ab:de:bd:89:
                    65:a7:3c:16:85:9c:23:5c:c3:45:31:4c:9d:b9:54:
                    54:50:c2:d2:98:36:03:16:35:32:7a:8e:43:fa:ea:
                    9f:e1:08:56:9d:3c:b7:08:f4:3d:99:2e:b6:d7:0d:
                    48:63:57:3f:e6:b5:0d:45:08:71:4e:ac:11:75:e9:
                    73:35:86:a7:af:21:db:66:10:a8:21:33:2c:c7:35:
                    b4:e4:b6:ae:14:8d:98:f3:ad:7a:aa:55:1e:e0:86:
                    c2:97:10:ef:bd:8f:f4:61:15:95:d5:80:44:ce:80:
                    dc:9f:3d:7f:26:d6:50:a4:f9:89:89:94:b0:a3:bf:
                    a9:88:1f:25:ef:f3:37:3a:79:cc:15:cb:d5:7b:48:
                    ba:39:a8:a3:08:23:3d:3a:f3:e1:2c:56:60:a4:10:
                    3a:8d:57:73:8f:53:b7:dd:e8:6c:62:27:f1:81:cd:
                    63:e4:b3:f9:2c:92:25:b5:ce:1a:af:d5:b2:5a:28:
                    c2:4e:1c:30:53:d9:1d:d0:c4:bd:9d:53:97:1d:5a:
                    64:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:D2:0E:DF:EC:53:69:AC:FA:65:36:89:05:02:3D:5A:FD:E1:19:B4
            X509v3 Authority Key Identifier:
                keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/_tIO3-xTaaz6ZTaJBQI9Wv3hGbQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.247.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:54:e7:70:28:70:21:12:92:75:73:ca:7a:75:7a:e7:ff:7f:
         24:fe:30:c0:fe:73:0b:46:8c:8f:bd:6f:cc:fc:e5:4d:67:e6:
         db:b5:8d:73:b6:75:c8:fe:81:2b:88:45:bc:77:92:54:a6:74:
         96:19:66:b5:5e:3d:b7:44:8c:36:9e:37:25:e5:5f:7a:12:4d:
         47:74:05:24:8b:a0:fb:a8:13:c8:98:38:4c:e8:8d:26:3d:f6:
         99:fd:9c:7d:92:75:78:fc:25:fe:0d:bb:8a:41:a4:73:db:13:
         fd:c9:f7:e0:21:8d:44:17:8c:c5:26:88:37:15:9b:ba:1e:7a:
         f5:da:b3:b6:39:71:07:0c:99:76:7a:38:a7:1a:22:f5:0e:1f:
         55:06:07:bf:c1:a7:b7:f1:5f:8a:33:8f:2c:db:4a:42:7a:3f:
         86:ec:88:1a:4e:6b:56:f4:f4:51:3b:fe:5e:ba:e3:03:5d:6f:
         4d:c8:85:eb:13:59:e4:fe:c3:ad:02:c0:ff:38:b9:20:1a:4f:
         3d:2f:26:47:f4:fc:cb:b5:3c:e2:27:61:f7:fe:d2:1c:e3:ef:
         27:97:e9:04:05:84:d2:22:8e:00:f7:02:9d:2f:18:0b:60:0e:
         b6:bb:8b:d2:6d:71:cf:c2:81:9d:ce:8f:1b:1f:44:5c:8c:44:
         34:f4:a6:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:35 2024 by rpki-client on console-ams.rpki-client.org