Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/hjp4M54W0Z5ZT5divsjA24jIHgQ.roa
File:                     hjp4M54W0Z5ZT5divsjA24jIHgQ.roa (raw, json)
Hash identifier:          3fDTtCGRHIzstAPX/VYVUyt7f2r0D5hcqfMyqJYCkkw=
Subject key identifier:   86:3A:78:33:9E:16:D1:9E:59:4F:97:62:BE:C8:C0:DB:88:C8:1E:04
Certificate issuer:       /CN=fc44297e9271c6edf064915f6180ae12690dda8b
Certificate serial:       09817B96
Authority key identifier: FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/hjp4M54W0Z5ZT5divsjA24jIHgQ.roa
Signing time:             Sat 01 Jan 2022 13:05:08 +0000
ROA not before:           Sat 01 Jan 2022 13:05:08 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     197648
IP address blocks:        213.169.148.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 159480726 (0x9817b96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc44297e9271c6edf064915f6180ae12690dda8b
        Validity
            Not Before: Jan  1 13:05:08 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=863a78339e16d19e594f9762bec8c0db88c81e04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e7:5a:e4:43:21:89:be:61:22:c0:82:cc:64:
                    24:97:44:15:de:f2:3c:7d:4e:1a:6e:72:b1:92:a1:
                    a1:73:a1:c7:34:0b:14:8a:f9:2d:db:ac:16:77:9e:
                    f7:62:72:38:20:9d:7f:42:57:50:d6:e6:d7:cc:6b:
                    e9:3a:78:7d:fd:82:cc:79:01:f3:79:25:30:f0:05:
                    41:e0:70:69:1c:ac:ff:e4:82:01:5f:57:1b:e7:28:
                    0c:f6:e3:04:ad:b0:34:dd:c3:eb:ed:28:27:5f:fd:
                    0f:80:d1:b4:f2:54:6a:6a:c1:19:3a:c7:cf:f6:f6:
                    f3:04:98:14:88:a5:e7:e3:f7:c5:1e:68:64:a6:8b:
                    6b:51:99:6e:71:50:c3:7a:60:d5:ed:18:68:82:72:
                    9e:9c:0d:9b:92:3d:27:76:bc:22:60:c4:70:b6:c2:
                    4f:bc:37:4a:fc:c3:69:d2:38:91:77:f9:85:23:a4:
                    a5:da:fa:6f:8b:48:d1:5f:99:d7:da:f7:e5:48:a1:
                    cd:96:ac:7f:b1:b0:06:46:c4:92:41:85:e5:b5:c3:
                    34:44:72:70:88:0d:39:c0:24:db:a8:f8:95:67:5e:
                    09:d9:f0:7a:98:ce:97:27:74:e0:d6:af:1b:05:d0:
                    6a:0b:d9:0a:79:55:13:d2:8b:42:a2:c8:37:8d:16:
                    97:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:3A:78:33:9E:16:D1:9E:59:4F:97:62:BE:C8:C0:DB:88:C8:1E:04
            X509v3 Authority Key Identifier:
                keyid:FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/hjp4M54W0Z5ZT5divsjA24jIHgQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.169.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d6:71:cc:8e:7f:5b:87:b4:79:94:36:61:b5:77:82:10:a0:7c:
         f9:15:8b:09:79:c8:04:4a:dd:b1:50:42:b9:ef:55:16:56:8b:
         c7:33:d0:46:3f:36:b4:ce:7f:d6:4d:a0:71:e9:2a:13:58:15:
         6a:d9:fd:b3:e3:4e:4b:bf:df:41:50:41:44:61:88:8d:46:40:
         55:95:09:88:b3:05:e5:25:9d:cc:9d:4a:50:00:c3:d5:d2:fb:
         9f:16:ed:77:46:43:e5:55:b3:c1:7a:52:0f:1e:a3:26:99:54:
         b9:71:f0:1b:16:de:70:04:0e:3c:7c:4a:97:3d:e8:7e:33:16:
         7b:62:0b:52:18:3f:54:43:d5:1b:f9:72:80:28:f7:89:2f:d3:
         c7:1d:f7:1c:75:15:d7:f0:af:71:26:d9:88:fa:c2:88:1c:8c:
         ad:bc:53:b9:a6:da:32:2a:f8:e5:4e:1d:c4:73:5e:17:ef:84:
         14:bf:83:8b:dc:24:0f:b0:c0:90:95:f7:fc:15:1b:40:b2:9a:
         1e:37:a0:0f:13:08:6a:f7:aa:11:60:6e:82:8d:d8:37:b5:4d:
         a9:ec:7d:3a:42:d5:83:9f:22:87:ad:5e:5b:c9:4a:4b:c0:7a:
         71:24:6e:34:21:bf:50:f0:c5:8f:82:52:2d:d3:f8:b6:3e:c0:
         37:5f:b2:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:54 2024 by rpki-client on console-ams.rpki-client.org