Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/DwDit4Cu74NymKtW_ltUlBTbVV8.roa
File:                     DwDit4Cu74NymKtW_ltUlBTbVV8.roa (raw, json)
Hash identifier:          HfS70sAj3RiqiC46psjupbyr/lqjix9YrmtOA6jcVt4=
Subject key identifier:   0F:00:E2:B7:80:AE:EF:83:72:98:AB:56:FE:5B:54:94:14:DB:55:5F
Certificate issuer:       /CN=fc44297e9271c6edf064915f6180ae12690dda8b
Certificate serial:       018225990B9556B860862C08109D14650A04
Authority key identifier: FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/DwDit4Cu74NymKtW_ltUlBTbVV8.roa
Signing time:             Fri 22 Jul 2022 11:09:23 +0000
ROA not before:           Fri 22 Jul 2022 11:09:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206244
IP address blocks:        213.169.157.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:25:99:0b:95:56:b8:60:86:2c:08:10:9d:14:65:0a:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc44297e9271c6edf064915f6180ae12690dda8b
        Validity
            Not Before: Jul 22 11:09:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0f00e2b780aeef837298ab56fe5b549414db555f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b8:65:f0:20:11:c4:5f:ba:31:fe:40:cf:ba:
                    36:58:f7:9d:d7:a7:b2:42:eb:ae:4a:d8:74:77:ea:
                    d8:3f:2c:76:95:a3:8a:e3:b4:e2:e8:9a:11:81:b1:
                    c5:5c:71:86:cb:d9:49:66:62:fd:06:d7:d3:ad:68:
                    f3:15:ad:a0:1b:e9:4f:59:31:b6:1f:24:0f:71:e4:
                    1e:6e:85:17:36:3d:37:37:b8:36:39:61:42:ea:b2:
                    6d:39:57:94:2e:3c:6b:80:e5:6e:e9:c5:b8:90:68:
                    a5:63:e5:52:7d:9d:ef:ab:20:0a:68:9f:c4:8d:59:
                    31:7f:66:f3:08:f1:1e:d2:89:bc:9f:ac:57:44:a0:
                    29:0c:e7:ce:0e:6e:61:10:c9:87:7c:e2:ed:db:42:
                    f2:31:7b:09:75:d6:b4:ce:f2:dd:8b:6c:99:3d:66:
                    42:af:4f:54:62:a0:86:90:6e:82:b2:d3:14:79:a5:
                    07:a5:49:68:8a:e1:67:13:c5:a2:9b:80:fa:e2:a8:
                    53:ad:5a:c3:17:5e:ee:11:cd:ba:36:aa:3b:85:5d:
                    d7:a5:ae:27:eb:0a:30:c5:0d:3d:10:47:32:f7:28:
                    0d:14:9b:22:d8:de:c2:49:63:d9:43:33:9a:b9:cc:
                    95:f9:d7:35:dd:f1:e0:b9:d0:8d:ac:ac:63:17:c2:
                    71:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:00:E2:B7:80:AE:EF:83:72:98:AB:56:FE:5B:54:94:14:DB:55:5F
            X509v3 Authority Key Identifier:
                keyid:FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/DwDit4Cu74NymKtW_ltUlBTbVV8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.169.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:ef:c9:4c:3f:4e:43:fe:27:c4:03:28:9d:68:c9:88:dc:cc:
         ce:e9:1f:5b:f7:61:9f:48:e7:8b:36:0f:28:87:db:2a:25:2b:
         84:33:8d:c6:35:ff:e5:d9:95:a7:04:2a:41:5d:99:fc:a5:b2:
         94:40:53:d6:77:43:0f:28:89:73:44:26:d9:46:24:67:81:d2:
         e2:12:ce:18:b7:39:25:6b:11:c7:2d:d1:df:33:9b:4e:45:49:
         4f:a9:52:06:98:e6:bb:25:c7:a4:a5:f6:e3:04:69:8c:fc:d1:
         59:5a:51:a8:df:c7:77:9a:63:53:d9:7f:a1:bb:bc:fc:86:b5:
         6b:f9:da:15:e8:47:2e:69:9a:0e:b5:5a:07:5e:b9:7f:ce:e1:
         d7:f9:4c:c2:04:de:da:ec:05:50:ee:72:39:f6:64:8f:05:6f:
         f9:d3:a9:6a:04:71:76:42:4d:79:fc:61:29:8c:28:c9:45:fc:
         9b:75:46:63:69:b1:a5:71:52:57:94:57:27:9f:5b:72:26:1f:
         b9:2c:e9:87:5b:39:6e:f3:ad:cd:dd:a2:ea:ac:89:4f:ad:05:
         84:8a:b8:4e:0e:45:55:f9:10:33:a7:e1:48:a6:60:5f:8d:55:
         2e:54:63:e6:31:96:58:2b:72:90:58:db:15:54:77:19:68:d1:
         ba:63:47:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:10 2024 by rpki-client on console-fra.rpki-client.org