Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/a6076e-1510-488c-b7fb-c94fe4c971d4/1/oLNzdEKV8R10i2I8BC-9M70DRWk.roa
File:                     oLNzdEKV8R10i2I8BC-9M70DRWk.roa (raw, json)
Hash identifier:          w7m0mLsguBH/njoOIXTHbkhQ5A4FUyRJ5TFr1OzafJg=
Subject key identifier:   A0:B3:73:74:42:95:F1:1D:74:8B:62:3C:04:2F:BD:33:BD:03:45:69
Certificate issuer:       /CN=7607ccc309291dc81b19143d4d3fe28d01c6bebd
Certificate serial:       01EA4602
Authority key identifier: 76:07:CC:C3:09:29:1D:C8:1B:19:14:3D:4D:3F:E2:8D:01:C6:BE:BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dgfMwwkpHcgbGRQ9TT_ijQHGvr0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/a6076e-1510-488c-b7fb-c94fe4c971d4/1/oLNzdEKV8R10i2I8BC-9M70DRWk.roa
Signing time:             Tue 10 May 2022 14:22:01 +0000
ROA not before:           Tue 10 May 2022 14:22:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210728
IP address blocks:        194.26.103.0/24 maxlen: 24
                          2a11:2440::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32130562 (0x1ea4602)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7607ccc309291dc81b19143d4d3fe28d01c6bebd
        Validity
            Not Before: May 10 14:22:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a0b373744295f11d748b623c042fbd33bd034569
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e0:5a:69:a1:d9:cd:84:7d:bd:da:f4:a7:37:
                    57:1d:e5:41:97:46:5d:ac:cb:d7:48:cf:7d:c6:23:
                    13:87:ee:a3:54:60:51:65:39:74:9a:6c:a5:e3:d7:
                    25:56:c7:b8:87:16:02:44:5a:3e:ff:2d:76:c9:ab:
                    46:47:d4:e8:a8:85:35:92:95:78:91:2e:1d:81:e5:
                    14:1b:6f:ef:f4:2f:05:6b:16:27:b2:5a:2f:e5:c0:
                    15:7c:13:ac:46:15:ef:17:f1:16:37:5c:a7:07:0f:
                    4f:a4:b4:89:73:dd:80:7b:a3:b6:a2:64:22:76:8a:
                    49:77:5e:0e:1c:94:7f:76:06:28:e3:15:f7:af:5e:
                    ad:0a:cf:d2:e4:01:87:52:ae:56:b2:58:17:3e:b1:
                    07:bc:0e:45:02:87:71:63:39:e3:20:d6:64:50:0d:
                    89:a4:06:cd:a7:60:fc:c0:cd:af:66:70:b5:4b:6e:
                    17:66:90:db:6b:a2:67:4f:16:aa:65:32:25:55:f6:
                    db:f0:12:4a:27:de:27:37:e7:e1:69:a8:51:f3:c4:
                    06:37:8a:4d:82:31:dd:99:65:65:97:e6:88:4d:69:
                    c1:e5:f2:be:4a:56:12:ea:dc:2e:ad:5a:1d:a1:6f:
                    1f:45:ed:74:b3:76:f9:5d:7e:0e:62:b5:e1:76:04:
                    86:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:B3:73:74:42:95:F1:1D:74:8B:62:3C:04:2F:BD:33:BD:03:45:69
            X509v3 Authority Key Identifier:
                keyid:76:07:CC:C3:09:29:1D:C8:1B:19:14:3D:4D:3F:E2:8D:01:C6:BE:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dgfMwwkpHcgbGRQ9TT_ijQHGvr0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/a6076e-1510-488c-b7fb-c94fe4c971d4/1/oLNzdEKV8R10i2I8BC-9M70DRWk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/a6076e-1510-488c-b7fb-c94fe4c971d4/1/dgfMwwkpHcgbGRQ9TT_ijQHGvr0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.26.103.0/24
                IPv6:
                  2a11:2440::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:52:b6:e8:cd:24:88:ad:c4:7a:96:73:71:3f:1c:ab:37:5a:
         f3:eb:36:73:04:f3:d8:f0:dd:29:6a:81:2b:d6:b0:02:f7:74:
         b1:be:9e:7c:48:70:10:d4:d9:14:75:47:00:da:18:a2:d8:c7:
         b9:cb:90:33:44:b3:a9:30:e9:88:75:fb:9f:83:3d:2c:6f:30:
         95:fc:0b:b9:e2:ab:a1:a9:83:7f:1c:fe:40:99:81:89:5a:11:
         74:d4:59:d8:52:cc:43:4c:78:3c:79:0a:9a:e5:bd:23:7a:f5:
         2e:95:e4:06:13:a9:84:00:c8:48:68:90:01:a7:62:95:ac:e6:
         b4:fe:dd:ad:11:b5:38:c3:79:fb:f7:80:9b:72:8c:9e:29:b6:
         d2:3d:d2:0b:97:8c:e4:4c:f6:60:3c:4d:93:02:da:a6:98:0d:
         e7:e7:76:39:6e:10:f3:d2:59:20:d0:1a:35:35:5b:f5:97:f4:
         87:2c:a1:23:cc:d7:79:d8:5e:6e:f0:c6:1a:da:d4:40:30:a9:
         a7:23:99:aa:99:93:be:05:51:9b:57:e1:d5:1f:a3:90:43:57:
         6e:b3:50:7f:2b:92:50:da:86:a4:7a:63:ce:76:a5:fa:4b:9b:
         b3:71:da:f0:64:ad:7f:4d:00:69:6b:f2:e0:3e:a5:c9:95:5f:
         72:61:f9:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:31 2024 by rpki-client on console-fra.rpki-client.org