Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/MOyt5t6Qzqz5Bye6-uZsi3_4psQ.roa
File:                     MOyt5t6Qzqz5Bye6-uZsi3_4psQ.roa (raw, json)
Hash identifier:          7Fw0Wj4aM99Ng7DN+8cBD4omgUDEy8F/YaqPZjkbpxc=
Subject key identifier:   30:EC:AD:E6:DE:90:CE:AC:F9:07:27:BA:FA:E6:6C:8B:7F:F8:A6:C4
Certificate issuer:       /CN=427a2670508b945123beecbf13145ffbd7bfcde4
Certificate serial:       018997FD99E815CEFB3D21CE82C204DFF14B
Authority key identifier: 42:7A:26:70:50:8B:94:51:23:BE:EC:BF:13:14:5F:FB:D7:BF:CD:E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QnomcFCLlFEjvuy_ExRf-9e_zeQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/MOyt5t6Qzqz5Bye6-uZsi3_4psQ.roa
Signing time:             Thu 27 Jul 2023 15:35:26 +0000
ROA not before:           Thu 27 Jul 2023 15:35:26 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     48199
IP address blocks:        212.42.48.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:97:fd:99:e8:15:ce:fb:3d:21:ce:82:c2:04:df:f1:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=427a2670508b945123beecbf13145ffbd7bfcde4
        Validity
            Not Before: Jul 27 15:35:26 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=30ecade6de90ceacf90727bafae66c8b7ff8a6c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0f:ab:d1:10:0b:e1:84:3c:40:09:00:6e:a1:
                    d0:a6:a3:b3:95:85:4c:5b:c3:56:5f:88:7c:67:78:
                    ae:81:ab:17:35:e1:d0:05:d4:5a:6e:67:75:88:ce:
                    70:06:ee:ad:cd:f3:2d:ac:a3:6f:00:ab:b3:33:9a:
                    81:8a:98:57:82:a8:8f:4f:8c:15:f3:1c:05:e0:85:
                    27:df:88:a7:be:22:73:d4:7a:f0:1c:57:9d:62:54:
                    21:84:df:86:f6:9d:0e:aa:72:6c:b4:77:5a:40:70:
                    ae:79:f4:a3:28:8e:27:ab:7b:74:12:b9:97:e9:6e:
                    cf:a8:b3:b9:ef:cb:85:46:58:a0:d1:3e:cc:18:e2:
                    75:13:94:ee:7f:2b:ea:4d:0f:1c:d3:3f:ea:80:37:
                    65:b3:02:41:eb:af:e0:da:ae:12:fe:70:88:13:ac:
                    41:f4:4d:fc:23:26:5f:38:15:57:c9:ef:60:2f:e0:
                    18:12:78:39:de:c9:2a:41:7e:62:1c:f7:35:d4:28:
                    47:f2:68:da:73:ac:70:5e:92:d1:51:f2:2e:2a:fd:
                    e6:a5:94:c1:e9:33:33:2a:80:96:3f:1f:ba:58:ba:
                    23:4c:89:0e:cd:6f:f9:20:77:13:31:b4:11:23:75:
                    68:31:47:39:3e:b6:e2:54:bc:ef:b7:f6:ac:8c:46:
                    28:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:EC:AD:E6:DE:90:CE:AC:F9:07:27:BA:FA:E6:6C:8B:7F:F8:A6:C4
            X509v3 Authority Key Identifier:
                keyid:42:7A:26:70:50:8B:94:51:23:BE:EC:BF:13:14:5F:FB:D7:BF:CD:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnomcFCLlFEjvuy_ExRf-9e_zeQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/MOyt5t6Qzqz5Bye6-uZsi3_4psQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.42.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:09:68:ba:aa:d6:55:e5:88:54:23:a1:ef:4a:21:41:d4:bd:
         2f:35:c9:29:87:19:59:55:15:c8:a6:dc:a4:aa:61:bb:2b:13:
         9d:4c:29:21:b6:66:1d:8e:66:ce:7f:0f:1b:90:88:f4:c9:eb:
         23:cb:98:d4:14:5f:65:47:e3:58:43:87:42:60:57:6d:22:af:
         36:c6:09:e1:4c:b3:a8:5c:fe:fe:44:a5:66:19:da:3b:fd:08:
         03:47:4e:63:ce:fe:fb:21:e7:4a:50:99:5e:81:b5:f3:fc:f6:
         6a:11:5e:a3:2e:ed:c1:ba:a2:48:42:a2:62:7d:71:76:b6:4d:
         6f:c6:f0:41:bd:cb:8c:8d:00:6b:75:1a:f8:8d:56:71:b3:f6:
         86:71:32:ab:5e:70:0e:22:e0:f9:ff:9e:64:6d:d7:df:35:8e:
         c3:4b:67:44:16:bb:5e:8a:49:cb:0f:8b:50:fd:36:d1:2a:94:
         43:2e:2d:23:3f:4e:5d:26:f1:b8:e6:b7:55:fd:78:49:bb:3f:
         8c:ac:93:44:16:21:7a:02:da:84:eb:5e:6f:85:b0:9d:ec:36:
         b9:de:5c:d8:db:29:95:ba:39:c8:d6:d8:30:01:3b:29:19:02:
         8a:a5:b5:f0:19:2f:b1:0a:83:45:9c:5b:ad:4c:60:f6:69:c2:
         a6:93:c5:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 21:40:03 2025 by rpki-client