Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/z-6B7ZFBfhiRKc5cL9cmZhFCta8.roa
File:                     z-6B7ZFBfhiRKc5cL9cmZhFCta8.roa (raw, json)
Hash identifier:          yr7qhUFtVxBbJ8LmViwL+a1YJR9ruxfbCRmysoBmNmQ=
Subject key identifier:   CF:EE:81:ED:91:41:7E:18:91:29:CE:5C:2F:D7:26:66:11:42:B5:AF
Certificate issuer:       /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial:       018317DED8CE5DA32ABB9E51C97B4A07F156
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/z-6B7ZFBfhiRKc5cL9cmZhFCta8.roa
Signing time:             Wed 07 Sep 2022 12:13:43 +0000
ROA not before:           Wed 07 Sep 2022 12:13:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61317
IP address blocks:        146.247.107.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:17:de:d8:ce:5d:a3:2a:bb:9e:51:c9:7b:4a:07:f1:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
        Validity
            Not Before: Sep  7 12:13:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=cfee81ed91417e189129ce5c2fd726661142b5af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:98:89:98:41:d8:b0:92:66:0f:e7:d9:f3:b8:
                    42:71:2c:71:8d:51:98:70:28:39:fb:d2:05:89:db:
                    94:21:3c:18:16:f2:ff:42:78:53:83:1e:1f:64:5e:
                    b3:65:2c:ca:f2:14:1f:5f:5f:73:e9:4c:e7:c2:e3:
                    b3:29:d3:11:65:f6:0c:e5:f8:8e:8b:79:ed:c6:b6:
                    77:79:0d:31:6a:78:7f:01:86:f2:9e:ef:e6:2b:c5:
                    d4:27:4b:10:68:77:d3:98:90:d0:fa:40:5a:65:14:
                    e6:55:2d:0a:4b:9d:b5:f6:76:25:07:06:78:fb:a1:
                    74:01:a3:23:72:64:c7:22:95:65:8e:ea:7e:83:cb:
                    8d:fe:b3:4e:56:ce:37:f7:b9:03:e0:dc:67:1c:3d:
                    71:6d:60:35:d9:38:58:50:79:d9:ef:f9:98:18:1f:
                    6e:4a:73:05:7b:90:56:96:c0:a6:a1:2a:c8:8c:86:
                    82:49:ac:5a:7e:71:a8:b4:47:5c:41:4a:51:a8:f6:
                    9f:a2:a3:24:52:5e:6b:4c:4a:1e:83:f1:b6:cf:19:
                    50:20:da:c2:e8:86:8c:21:c0:fa:0a:d9:04:3b:8d:
                    ce:cd:00:2e:dc:b2:81:38:34:55:5e:cd:96:28:f3:
                    78:25:79:ee:79:2f:a2:61:41:aa:c8:00:2b:75:10:
                    49:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:EE:81:ED:91:41:7E:18:91:29:CE:5C:2F:D7:26:66:11:42:B5:AF
            X509v3 Authority Key Identifier:
                keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/z-6B7ZFBfhiRKc5cL9cmZhFCta8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.247.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:16:78:07:d4:76:ef:29:50:bb:61:bb:a2:fe:56:61:67:bb:
         77:58:4c:eb:c5:ea:43:9d:bf:64:00:4d:ac:3b:6f:c7:87:8a:
         ba:cc:92:78:cb:12:1a:a2:47:9f:b5:3c:70:36:30:57:5e:c2:
         59:cc:da:93:c5:cf:34:cb:44:d5:33:fa:3b:1e:9e:51:83:f8:
         12:1f:a1:39:72:d3:ca:e4:c3:1f:bd:bb:3a:e9:f8:54:9a:28:
         5b:55:48:fc:63:cc:58:dc:a2:99:b6:64:b5:4d:1c:be:52:29:
         0f:1f:50:17:3b:1f:98:49:83:1f:54:f1:c6:7b:81:23:fb:c6:
         c5:66:99:c1:70:4f:ab:2e:1f:c4:f6:dd:64:2e:df:4b:9c:34:
         09:a3:ca:0d:62:ad:da:fd:cd:98:88:73:3d:3a:92:f0:f8:35:
         46:93:5d:20:8c:74:b6:c3:72:0f:44:04:6a:be:24:19:1a:f3:
         c7:c5:b9:30:ba:d3:62:5b:59:a2:7b:0e:7d:e0:15:14:70:7e:
         eb:34:e2:f8:43:0a:7a:b1:45:52:d1:14:d6:16:bc:ca:dd:bc:
         91:ce:d2:3c:ee:0e:3e:c9:7e:92:1e:12:02:4a:8f:81:9a:6e:
         86:a2:b9:40:c3:d3:50:3e:08:04:c5:c2:cd:c7:d8:1a:b1:fb:
         6c:5c:5a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:35 2024 by rpki-client on console-ams.rpki-client.org