Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/eudDWZp9DCVZvQqkDzTmtIySSV8.roa
File:                     eudDWZp9DCVZvQqkDzTmtIySSV8.roa (raw, json)
Hash identifier:          16cjCu/+7e85l6WNmTGYAWuu0RMJpMX5AfQCYF1EoiQ=
Subject key identifier:   7A:E7:43:59:9A:7D:0C:25:59:BD:0A:A4:0F:34:E6:B4:8C:92:49:5F
Certificate issuer:       /CN=3d8ba0a52c42129af1d4f743feb33bb144d4bb5c
Certificate serial:       0FFE3F27
Authority key identifier: 3D:8B:A0:A5:2C:42:12:9A:F1:D4:F7:43:FE:B3:3B:B1:44:D4:BB:5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/eudDWZp9DCVZvQqkDzTmtIySSV8.roa
Signing time:             Sat 01 Jan 2022 08:53:46 +0000
ROA not before:           Sat 01 Jan 2022 08:53:46 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209943
IP address blocks:        213.83.7.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 268320551 (0xffe3f27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d8ba0a52c42129af1d4f743feb33bb144d4bb5c
        Validity
            Not Before: Jan  1 08:53:46 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7ae743599a7d0c2559bd0aa40f34e6b48c92495f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:98:71:86:5d:41:bf:30:27:fd:2c:fa:95:44:
                    39:17:61:d7:a0:68:e8:46:63:da:a7:61:1c:c6:ea:
                    6b:c0:cc:91:49:44:b2:2f:59:92:08:f3:6e:39:65:
                    e4:34:7d:8f:da:f5:d2:6a:34:90:ae:a0:48:5c:9f:
                    96:65:1f:7b:19:d9:d5:7f:f3:23:dd:aa:cc:be:32:
                    08:d9:8a:68:23:c5:dc:35:c8:76:d4:90:52:a6:33:
                    8c:70:b2:60:9d:e5:9b:74:3a:82:f7:6c:1f:6c:1e:
                    17:ca:7b:af:62:91:80:e8:fa:26:d2:91:12:0a:36:
                    bb:d7:f3:c7:e0:72:8a:af:54:7f:a1:4f:7e:16:67:
                    2d:2a:58:0a:b6:f6:4b:4d:d5:ac:48:d8:a7:a6:ba:
                    07:97:c0:02:56:6d:d1:37:da:78:aa:a1:d4:e8:36:
                    a1:25:35:06:25:97:cd:79:94:5a:19:44:02:4b:0f:
                    ad:23:f3:da:af:81:37:57:98:55:d3:fa:1d:74:20:
                    e7:e8:8a:de:19:9c:56:f4:1e:bb:ea:45:a4:45:c4:
                    f9:1d:b9:e2:dd:95:e5:74:17:0d:25:28:4f:53:e3:
                    3a:23:3d:64:a9:21:38:ea:c1:63:38:0b:c8:4c:4d:
                    7b:d6:bd:4e:14:d2:58:5a:0e:5c:92:c5:82:03:65:
                    91:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:E7:43:59:9A:7D:0C:25:59:BD:0A:A4:0F:34:E6:B4:8C:92:49:5F
            X509v3 Authority Key Identifier:
                keyid:3D:8B:A0:A5:2C:42:12:9A:F1:D4:F7:43:FE:B3:3B:B1:44:D4:BB:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/eudDWZp9DCVZvQqkDzTmtIySSV8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.83.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:82:9b:ee:23:4c:13:8d:e3:54:34:41:a9:a1:55:16:6a:ed:
         30:7d:c6:fe:f6:67:70:f6:98:ed:c8:02:86:1e:69:47:84:dd:
         8d:0c:35:62:da:2d:53:46:87:32:a3:d8:49:cf:49:4f:67:a6:
         62:84:15:dc:2d:33:02:c0:2d:21:a3:1a:1d:24:2e:e0:10:de:
         74:a2:a1:02:88:b0:d0:e8:39:33:8e:5d:87:57:0d:03:47:66:
         b1:68:a7:1b:aa:31:ca:dc:ed:ed:b2:3c:ba:78:43:ba:87:8a:
         1b:eb:19:0f:32:04:e4:cf:99:80:d5:17:e4:f4:1e:99:e7:30:
         e9:4a:1b:a8:31:88:10:36:2f:1c:93:4e:74:67:df:7e:d5:f8:
         e0:1e:3e:f2:56:55:ba:ba:7a:d7:16:ef:4f:00:89:ba:f3:f2:
         01:e7:86:69:b6:bc:d5:df:cb:9d:95:19:ad:27:54:25:d7:c7:
         5a:59:df:05:28:bc:aa:b0:cc:08:e5:92:02:6e:19:c3:ed:09:
         d1:c6:bf:55:5c:93:c3:23:d0:c8:b7:d8:99:d2:08:d5:46:68:
         c5:46:16:47:d6:be:25:d4:f2:9d:ef:33:f4:ff:a5:91:94:5a:
         23:5c:0d:3c:33:f4:72:27:77:15:9c:79:f3:2f:fa:c8:b3:dc:
         ca:76:55:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:37 2024 by rpki-client on console-fra.rpki-client.org