Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/ruPvf4C6de4RHKsdqcFZbEYpGSY.roa
File:                     ruPvf4C6de4RHKsdqcFZbEYpGSY.roa (raw, json)
Hash identifier:          GJTTP4eY+jrbb89aqDsA4ssrdjaztqvv6a6QujyEC1c=
Subject key identifier:   AE:E3:EF:7F:80:BA:75:EE:11:1C:AB:1D:A9:C1:59:6C:46:29:19:26
Certificate issuer:       /CN=57182aab5ad9efa380a6c6f06c016e158be977bc
Certificate serial:       150F46F8
Authority key identifier: 57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/ruPvf4C6de4RHKsdqcFZbEYpGSY.roa
Signing time:             Sat 01 Jan 2022 15:54:53 +0000
ROA not before:           Sat 01 Jan 2022 15:54:53 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     213238
IP address blocks:        193.30.81.0/24 maxlen: 24
                          2a02:1161:800::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 353322744 (0x150f46f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57182aab5ad9efa380a6c6f06c016e158be977bc
        Validity
            Not Before: Jan  1 15:54:53 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=aee3ef7f80ba75ee111cab1da9c1596c46291926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f8:2b:85:59:50:21:4c:b8:a0:31:d7:91:64:
                    49:c0:fb:64:7d:2a:39:14:73:bc:bb:87:89:90:e5:
                    a2:99:73:0a:7c:05:ad:af:85:98:09:d8:8f:57:cb:
                    bb:95:2e:fc:41:23:1b:34:3e:87:e1:76:c7:46:2a:
                    2d:bd:bc:c5:9e:26:59:4b:9c:3d:ea:98:05:6d:f6:
                    c4:39:ac:4a:14:91:62:86:83:38:28:b3:8b:7e:86:
                    33:e7:59:c7:dc:ff:72:4c:93:8d:48:8f:e0:1d:3a:
                    08:3b:7e:7e:fa:2b:7d:d2:86:9f:3d:38:90:ee:52:
                    2f:38:57:0f:5b:7b:1b:2a:b8:20:7a:12:3c:90:5b:
                    90:41:fb:da:7d:e0:c0:f3:c1:28:c7:47:a5:4f:e2:
                    4a:67:45:e5:44:36:9c:55:30:bc:97:62:68:95:6e:
                    32:97:22:36:73:b4:0d:c1:6d:4a:79:12:5d:5a:db:
                    16:8b:41:b1:b5:2c:aa:e1:04:de:87:10:37:ea:c3:
                    4e:c2:2e:14:70:95:90:17:8c:dc:75:e7:57:f5:7d:
                    3f:76:ef:d6:75:c6:5f:91:74:d1:37:aa:92:58:e7:
                    cf:81:0b:1c:2e:be:68:ab:2a:45:82:fd:81:17:e4:
                    c2:b7:ff:cb:7d:8e:6c:ff:4e:c5:76:0e:0d:77:36:
                    b2:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:E3:EF:7F:80:BA:75:EE:11:1C:AB:1D:A9:C1:59:6C:46:29:19:26
            X509v3 Authority Key Identifier:
                keyid:57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/ruPvf4C6de4RHKsdqcFZbEYpGSY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.30.81.0/24
                IPv6:
                  2a02:1161:800::/40

    Signature Algorithm: sha256WithRSAEncryption
         01:0f:27:0c:bf:72:37:0e:d3:22:55:c0:86:90:03:ed:4e:ed:
         79:84:23:99:e5:d9:39:a8:94:3d:05:bd:07:48:65:9f:16:48:
         34:dc:d0:ba:8d:ff:dc:63:5a:8d:05:0c:0e:c8:17:47:1d:34:
         25:d3:d0:30:ce:a2:8e:7b:63:5c:5d:84:0e:c3:df:db:14:83:
         05:e3:f8:34:fd:5e:8c:7d:9b:02:fe:d7:47:e2:1a:5c:31:02:
         64:10:a9:79:9e:09:e7:b4:5e:81:1a:1a:05:e9:4a:2d:a5:05:
         e2:f9:cc:2d:35:70:4d:6f:ba:7e:4e:6b:94:c7:f9:54:4a:7b:
         0c:1c:5c:ba:3c:3f:f1:70:c6:37:67:55:7b:0d:63:b7:17:ca:
         2d:20:8c:f6:2a:16:9a:9a:16:33:bf:29:dd:0d:f4:55:32:a6:
         3b:24:2c:66:4e:6b:ad:53:5b:a5:0f:79:be:73:6e:e4:5a:b8:
         47:9f:30:13:50:bb:c1:03:37:d2:bb:f3:84:51:b6:7a:fd:c1:
         f6:da:d1:3d:04:4e:d0:11:69:eb:e1:f1:e3:d4:8b:d7:63:fa:
         fa:8b:ca:af:f1:44:fe:37:22:07:ae:e1:d2:24:e2:3a:4f:28:
         32:91:58:05:c8:31:e6:d3:b2:c0:b2:bb:bf:6c:cc:5e:49:4a:
         49:a1:0e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:20 2024 by rpki-client on console-fra.rpki-client.org