Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/0bea33-bb40-4bd1-9724-f64c70f4d445/1/EkolGU-_m5tG2h90_RmFKhIk6I4.roa
File:                     EkolGU-_m5tG2h90_RmFKhIk6I4.roa (raw, json)
Hash identifier:          BNw30JHAGwZBjevUxtikXVxy9HcEOOmPHNbOOhm6410=
Subject key identifier:   12:4A:25:19:4F:BF:9B:9B:46:DA:1F:74:FD:19:85:2A:12:24:E8:8E
Certificate issuer:       /CN=665c39bfbc52e9693a4ddf2d56e1ca99f4537e45
Certificate serial:       01BE92
Authority key identifier: 66:5C:39:BF:BC:52:E9:69:3A:4D:DF:2D:56:E1:CA:99:F4:53:7E:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/0bea33-bb40-4bd1-9724-f64c70f4d445/1/EkolGU-_m5tG2h90_RmFKhIk6I4.roa
Signing time:             Tue 24 May 2022 12:05:15 +0000
ROA not before:           Tue 24 May 2022 12:05:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211651
IP address blocks:        185.251.69.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114322 (0x1be92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=665c39bfbc52e9693a4ddf2d56e1ca99f4537e45
        Validity
            Not Before: May 24 12:05:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=124a25194fbf9b9b46da1f74fd19852a1224e88e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2d:59:16:16:40:76:0f:06:49:95:3b:17:d8:
                    39:da:1f:c2:94:18:50:1a:fa:71:3f:f7:ba:d1:8d:
                    3f:f1:fb:a5:5f:5d:1d:8c:8a:60:5c:e9:4e:54:a3:
                    8e:fc:cc:e9:9d:e4:94:df:c7:34:a5:cf:e2:9f:5c:
                    3e:5f:4b:a5:a6:9a:86:0e:20:13:cf:f6:bb:b1:48:
                    a9:19:bd:1a:42:d9:52:63:74:47:d9:fc:9d:c9:b4:
                    02:c8:91:da:be:d4:04:1e:3b:37:ea:0a:03:c6:22:
                    ae:56:f6:a2:ef:9c:b4:9e:c7:69:9d:6d:9e:45:94:
                    be:8a:0b:f1:13:4a:9f:dc:3c:e2:c2:62:5f:3e:dc:
                    6b:f3:d7:65:26:73:c5:af:81:a3:11:e9:3a:a7:f7:
                    d6:9a:ce:97:03:95:8f:5f:a0:c4:62:b9:69:13:5a:
                    9c:6b:4f:ce:b3:cc:11:06:0f:07:70:96:b0:ca:14:
                    1d:6d:b8:2c:d1:fc:17:5c:bf:a3:55:e6:bd:e9:70:
                    7c:68:83:10:a7:74:4c:9c:e3:83:0a:df:73:fb:1a:
                    90:5f:aa:e4:cb:af:70:d5:c8:93:3c:d5:43:11:33:
                    75:00:ca:9e:1e:af:22:08:67:6c:c4:84:e4:66:64:
                    22:a1:83:20:c7:e5:da:d0:34:5a:a1:c6:ae:58:47:
                    df:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:4A:25:19:4F:BF:9B:9B:46:DA:1F:74:FD:19:85:2A:12:24:E8:8E
            X509v3 Authority Key Identifier:
                keyid:66:5C:39:BF:BC:52:E9:69:3A:4D:DF:2D:56:E1:CA:99:F4:53:7E:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0bea33-bb40-4bd1-9724-f64c70f4d445/1/EkolGU-_m5tG2h90_RmFKhIk6I4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0bea33-bb40-4bd1-9724-f64c70f4d445/1/Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.251.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:57:32:6b:fe:14:96:c1:5a:28:48:4b:cd:7e:33:92:3e:99:
         99:85:aa:45:ed:20:87:86:4d:1f:97:21:fc:b0:68:f0:93:f9:
         da:dc:80:91:f0:be:f9:d6:d6:d4:28:3e:40:63:29:55:e7:bb:
         2a:51:4d:84:cf:76:b9:1a:32:ba:2d:63:ff:1c:42:f8:3c:73:
         3f:e8:d1:c3:ec:0f:03:50:7d:0a:ca:e5:80:ae:26:b6:77:29:
         1b:65:6c:44:e2:8e:e7:dc:59:d2:de:d3:61:26:35:fd:78:a2:
         3b:5f:59:4e:20:92:2c:0c:94:3d:ff:be:9b:73:06:01:02:9b:
         52:1b:f3:11:f8:a7:1e:ab:e7:0e:55:e1:c1:0d:d7:d1:7d:95:
         a0:49:7b:d1:cb:a8:a2:1f:e1:56:f7:38:99:d3:60:a9:1d:a0:
         f5:84:d5:34:4b:1e:6d:86:38:0f:e6:15:85:59:24:f4:f4:1e:
         41:f4:ec:ca:a4:12:10:d7:97:df:ac:2d:51:ed:d1:12:3e:e1:
         4a:47:66:94:92:94:41:03:0d:8c:bd:7b:dd:65:6a:da:cd:99:
         66:66:e1:7f:39:98:40:ea:c3:61:dd:87:2b:be:80:e9:34:2d:
         52:54:c2:ff:24:a6:fe:26:ed:0b:f5:43:61:fb:d8:d3:34:8d:
         59:db:00:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:50 2023 by rpki-client on console.sobornost.net