Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/329297-6eb1-47cf-8348-2350e24f03a7/1/29wPMGzZEjN-8-TdmKLl4R8Rqdw.roa
File:                     29wPMGzZEjN-8-TdmKLl4R8Rqdw.roa (raw, json)
Hash identifier:          J8+WUMvry53A0EmJqfhrneiQzavpAwrwiDYbZ8j8fbI=
Subject key identifier:   DB:DC:0F:30:6C:D9:12:33:7E:F3:E4:DD:98:A2:E5:E1:1F:11:A9:DC
Certificate issuer:       /CN=75d003bee173163d19a9927ab371221f95f10fd3
Certificate serial:       01094E
Authority key identifier: 75:D0:03:BE:E1:73:16:3D:19:A9:92:7A:B3:71:22:1F:95:F1:0F:D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ddADvuFzFj0ZqZJ6s3EiH5XxD9M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/329297-6eb1-47cf-8348-2350e24f03a7/1/29wPMGzZEjN-8-TdmKLl4R8Rqdw.roa
Signing time:             Thu 12 May 2022 10:47:38 +0000
ROA not before:           Thu 12 May 2022 10:47:38 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     39855
IP address blocks:        178.211.154.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67918 (0x1094e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75d003bee173163d19a9927ab371221f95f10fd3
        Validity
            Not Before: May 12 10:47:38 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=dbdc0f306cd912337ef3e4dd98a2e5e11f11a9dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:60:e5:ce:08:c8:b5:4d:bf:1e:49:6a:ee:e3:
                    96:f8:42:d0:fa:e9:62:47:ff:c1:98:bd:44:ba:47:
                    b6:8f:11:7d:d2:ee:1e:35:c6:53:9a:d7:68:0c:75:
                    85:a8:c8:05:46:57:84:8c:76:78:04:ff:f4:5a:d2:
                    4d:57:20:12:ab:e5:30:ec:3b:1f:a6:dc:5e:d4:9a:
                    55:38:a2:06:22:df:e3:92:3d:90:9d:d0:71:2a:8f:
                    a3:6b:03:e2:12:2a:20:0b:5e:0a:6d:35:0f:dd:da:
                    9b:bf:7b:1d:a2:40:38:49:0c:7f:be:aa:09:bc:a1:
                    41:b8:11:cd:5d:00:e4:9a:b8:9e:c4:fd:5f:7c:b8:
                    c6:0c:60:8d:a0:a8:0a:fb:bb:40:23:42:bd:28:7e:
                    d6:59:cd:2f:7a:c7:aa:bf:97:ba:6d:be:ff:bb:73:
                    0b:75:b1:11:22:a7:e1:85:4a:c6:c8:52:5e:bd:2f:
                    15:51:60:89:c2:50:49:57:2c:93:af:7c:d6:ae:e5:
                    f5:45:78:34:03:21:97:8c:1b:68:f5:c2:74:2e:9e:
                    db:61:08:88:ae:88:23:8f:bf:0e:c6:a3:bd:94:03:
                    16:cb:11:56:d8:a7:7e:93:69:3e:96:ba:07:b2:ab:
                    2e:a0:c4:46:d0:69:05:06:b9:65:a8:01:dc:71:af:
                    4e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:DC:0F:30:6C:D9:12:33:7E:F3:E4:DD:98:A2:E5:E1:1F:11:A9:DC
            X509v3 Authority Key Identifier:
                keyid:75:D0:03:BE:E1:73:16:3D:19:A9:92:7A:B3:71:22:1F:95:F1:0F:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ddADvuFzFj0ZqZJ6s3EiH5XxD9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/329297-6eb1-47cf-8348-2350e24f03a7/1/29wPMGzZEjN-8-TdmKLl4R8Rqdw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/329297-6eb1-47cf-8348-2350e24f03a7/1/ddADvuFzFj0ZqZJ6s3EiH5XxD9M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.211.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:e9:45:d4:10:93:4e:ad:75:66:cc:9c:db:71:30:23:16:89:
         d5:09:9d:70:06:ed:f9:c9:90:ff:a5:1b:c3:d0:ae:ee:81:88:
         7b:a7:ba:ca:bd:73:05:5b:9f:27:67:21:4c:aa:7e:de:f3:77:
         98:26:15:08:a5:42:22:5a:ef:5a:ff:02:d6:75:26:39:04:b5:
         2c:18:d0:d3:57:5e:63:92:ec:fd:e2:1b:6d:99:ec:a3:3f:80:
         39:ff:94:e3:1f:39:e3:09:6c:34:c1:9d:c6:10:a2:62:0a:f6:
         4f:c5:52:82:bc:4c:02:ac:24:d6:5b:41:bd:68:bd:4c:b4:d4:
         30:e0:59:56:89:85:8b:eb:45:9f:18:cd:6c:89:cd:ca:65:3d:
         e3:1f:e7:2a:ce:f2:06:6c:a7:65:58:ff:63:ec:90:2f:67:d6:
         dc:95:4a:55:47:58:12:b3:4c:7f:3a:43:80:0d:60:3f:d8:30:
         67:35:55:23:fc:c9:95:42:52:d9:ef:b2:53:0f:9c:f8:78:27:
         49:1e:4f:ff:f9:64:bc:76:35:86:61:0e:eb:0e:9c:f7:90:c7:
         aa:f5:11:64:76:7b:24:74:d4:d1:2e:1f:7a:21:65:ba:27:6c:
         c6:e7:ed:96:eb:46:03:90:ec:d7:04:37:7b:08:2c:0e:27:01:
         00:36:3d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:18 2024 by rpki-client on console-ams.rpki-client.org