Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/6Lxd5JBAqt5R87CLividRT1jwP4.roa
File:                     6Lxd5JBAqt5R87CLividRT1jwP4.roa (raw, json)
Hash identifier:          KzjTjHDz0x/+X3zKVIvGheE0jA/PirJQTlQLmvLedgQ=
Subject key identifier:   E8:BC:5D:E4:90:40:AA:DE:51:F3:B0:8B:8A:F8:9D:45:3D:63:C0:FE
Certificate issuer:       /CN=e0574c2878d6b536139b895f08c9c6db18e12a9b
Certificate serial:       153AD54B
Authority key identifier: E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/6Lxd5JBAqt5R87CLividRT1jwP4.roa
Signing time:             Wed 12 Jan 2022 09:22:25 +0000
ROA not before:           Wed 12 Jan 2022 09:22:25 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     56465
IP address blocks:        94.124.165.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 356177227 (0x153ad54b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0574c2878d6b536139b895f08c9c6db18e12a9b
        Validity
            Not Before: Jan 12 09:22:25 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e8bc5de49040aade51f3b08b8af89d453d63c0fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b3:14:66:29:e8:48:e0:8e:f9:82:a6:0e:7f:
                    03:19:ca:fb:5c:28:1e:d4:8f:c0:9e:ff:d9:07:4f:
                    5d:64:b7:db:aa:be:10:3c:7c:41:e3:1a:e3:40:6d:
                    ad:9e:08:b8:c1:6e:07:da:f6:dd:1d:7f:b7:cc:38:
                    72:11:6b:84:8a:b2:e6:04:2c:c5:cc:f6:43:76:f4:
                    70:ba:de:1e:b8:a8:72:9c:cf:7e:2c:25:11:f6:c6:
                    a3:9e:88:df:47:42:15:63:a2:8a:47:62:a9:f2:f2:
                    3f:90:8a:54:38:bc:99:b9:5e:86:23:35:6e:6f:73:
                    e5:f6:44:a7:76:f3:e1:82:94:f7:46:87:9e:08:e2:
                    8d:ef:0c:48:38:2b:a2:ce:3b:9f:ce:b2:98:1d:38:
                    cb:fe:a2:fd:a5:0a:cc:78:5b:0c:4f:a4:7e:01:8e:
                    6c:3e:05:59:75:08:b6:1c:bc:a1:c4:7b:33:0f:a2:
                    0a:08:ef:f9:77:3b:2b:a3:00:bc:53:74:09:c1:32:
                    39:cb:db:b2:04:75:42:64:60:2e:ea:ab:22:e0:66:
                    b4:f2:83:50:ca:55:b6:48:a7:40:b3:76:fa:63:75:
                    cb:7e:38:a7:27:2a:c6:a3:53:41:2b:4b:06:e6:03:
                    ee:4b:ce:e8:08:d5:91:b0:11:52:b6:8c:41:75:fa:
                    86:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:BC:5D:E4:90:40:AA:DE:51:F3:B0:8B:8A:F8:9D:45:3D:63:C0:FE
            X509v3 Authority Key Identifier:
                keyid:E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/6Lxd5JBAqt5R87CLividRT1jwP4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.124.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:8e:08:23:67:5a:c1:bd:bb:da:0a:e6:38:34:00:f1:66:7b:
         c2:45:77:56:77:2f:66:50:92:f8:bd:e5:5e:2e:7c:37:a1:a3:
         b8:d4:18:bb:bc:55:13:ba:df:e0:8e:bf:39:00:d4:a1:b8:f6:
         7f:01:91:52:54:68:3f:af:97:1a:48:97:1d:92:f2:49:de:af:
         da:59:da:71:99:c6:ef:78:6a:10:b2:26:5b:9d:c1:f7:ec:85:
         9d:d9:69:27:2c:db:9d:0b:62:e6:9b:b9:a9:0c:bc:93:a6:c9:
         0b:e5:47:0a:ae:55:7c:e4:36:3b:a1:7f:70:8f:1a:0c:53:29:
         93:8c:b1:6e:b9:7c:36:66:97:40:03:d6:58:75:dd:4d:41:86:
         64:2f:a6:5a:43:a3:ec:67:60:24:6d:2f:a2:fa:77:42:ed:38:
         41:07:77:e8:bc:a2:61:d8:6f:2b:2e:b2:67:6c:11:8e:2e:17:
         b4:1a:1b:d0:64:04:9f:ea:54:db:a1:c7:d5:de:05:78:de:84:
         c1:6d:10:b7:09:be:f7:ec:24:f3:bf:5a:f6:1d:af:ea:a6:d2:
         49:46:e0:95:e4:38:1d:c0:47:4a:21:b5:d0:8c:70:ee:85:5a:
         4f:d8:03:ad:f9:4e:c4:b5:df:15:76:4a:c5:f3:3a:bd:8c:94:
         93:f4:97:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:45 2023 by rpki-client on console.sobornost.net