Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS6939.roa
File:                     AS6939.roa (raw, json)
Hash identifier:          Ks12/JVfAHbns83DIcrzonAsNNHrOd4pesLQ+Hdo2wY=
Subject key identifier:   BB:95:7E:2B:37:F9:2C:CF:37:35:F3:66:6D:1B:80:2C:13:A2:2D:51
Certificate issuer:       /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial:       7060697D9FE9170F5CABF8DB317BAA02C6563C1C
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS6939.roa
Signing time:             Thu 07 Sep 2023 11:30:08 +0000
ROA not before:           Thu 07 Sep 2023 11:25:08 +0000
ROA not after:            Thu 05 Sep 2024 11:30:08 +0000
asID:                     6939
IP address blocks:        181.214.237.0/24 maxlen: 24
                          181.215.23.0/24 maxlen: 24
                          191.101.122.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:60:69:7d:9f:e9:17:0f:5c:ab:f8:db:31:7b:aa:02:c6:56:3c:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
        Validity
            Not Before: Sep  7 11:25:08 2023 GMT
            Not After : Sep  5 11:30:08 2024 GMT
        Subject: CN=BB957E2B37F92CCF3735F3666D1B802C13A22D51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:90:9c:d7:7e:b9:1e:c7:ed:69:1a:3e:e5:8d:
                    b1:28:c5:95:91:3c:be:ca:b4:97:6f:d4:09:0b:96:
                    11:d8:21:53:07:cb:8f:41:0a:c9:fb:7f:c0:fa:50:
                    a3:8e:c2:3e:9d:9a:d9:be:7f:8c:38:20:61:d4:b9:
                    6a:50:3d:d3:33:25:de:9b:1c:d2:8e:71:d9:2d:8f:
                    56:8f:95:6e:95:6f:35:18:cd:b9:cc:df:8f:c6:43:
                    1e:3a:c6:54:02:e5:f3:1a:9d:4b:f4:c9:eb:6f:b3:
                    01:db:c1:38:dc:4a:2c:cf:3a:b0:ae:f0:0a:8b:52:
                    74:fe:3a:ac:cd:a5:15:c4:fd:cd:06:f3:7a:0b:0f:
                    67:c3:02:07:6f:61:72:4f:46:1e:0f:0a:a5:9b:c3:
                    bc:3c:1e:ab:c0:c7:c4:e6:18:08:66:cb:eb:56:0a:
                    f1:2c:dd:84:96:e6:30:83:ae:44:c7:58:31:f9:3e:
                    82:e1:d9:c9:ed:b8:3a:dc:fc:dd:d1:1d:5b:31:74:
                    cd:e1:cc:0b:d4:ad:12:40:cb:f8:4a:25:1c:a8:b8:
                    96:50:3c:46:8d:8f:73:41:d6:1a:f7:ce:2e:f6:97:
                    22:c9:d3:2d:43:32:ca:cb:bd:da:fc:35:f7:65:9b:
                    f0:1d:52:9d:d9:81:cf:24:d5:b8:a8:c1:0c:9e:de:
                    7f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:95:7E:2B:37:F9:2C:CF:37:35:F3:66:6D:1B:80:2C:13:A2:2D:51
            X509v3 Authority Key Identifier:
                keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS6939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.214.237.0/24
                  181.215.23.0/24
                  191.101.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:c2:b1:f0:a2:60:61:23:6e:d7:98:16:00:3a:a7:a9:a2:b9:
         e9:0b:e5:75:6f:66:4e:c6:0f:88:a3:54:f1:2c:58:57:56:3c:
         92:61:b9:e0:60:ef:9a:27:bd:a3:ed:6e:8d:ca:f8:89:e0:ff:
         f3:25:72:c1:8f:73:57:c9:c7:c5:95:c6:68:05:ef:5f:f0:ec:
         ff:32:ed:b9:1e:d0:d6:59:f5:53:89:c7:d0:b7:4d:e5:65:0b:
         f4:c2:77:de:a5:15:28:b7:24:96:9d:5c:19:ff:a9:fa:95:eb:
         a5:b8:23:c7:78:cc:7d:ae:d5:38:7f:93:e4:4b:c6:9e:4a:a9:
         20:93:7a:c1:9a:d3:fd:a6:66:ba:38:fb:7e:c2:96:ae:38:01:
         1d:9d:55:56:c2:90:9b:02:e5:17:74:9e:03:90:c7:4f:1c:e2:
         f9:da:ee:f8:63:5e:55:fb:93:af:9a:f4:c2:fa:60:4a:35:4b:
         58:87:73:f1:bd:97:63:77:8b:90:36:69:aa:20:13:cf:4a:e6:
         0a:2e:ee:82:b4:97:c8:a4:ee:79:21:8c:b6:d2:ab:71:14:97:
         6f:7a:75:16:e5:3f:09:2d:b5:cd:90:bc:35:47:6e:be:51:ad:
         71:8a:5a:81:d1:39:d8:83:23:a4:88:24:e7:8d:f3:a1:17:19:
         47:95:ff:ec
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Mar 13 01:53:20 2025 by rpki-client