Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/57548d-7096-45b0-8be8-00b7bf32ecf8/1/w7QRixNLugT0yWOtuVcAa58AwlE.roa
File:                     w7QRixNLugT0yWOtuVcAa58AwlE.roa (raw, json)
Hash identifier:          LzSRAjwJcSHpeQ2uMmSaTt0pN538T1cEaiBmultvvmc=
Subject key identifier:   C3:B4:11:8B:13:4B:BA:04:F4:C9:63:AD:B9:57:00:6B:9F:00:C2:51
Certificate issuer:       /CN=ea9ff91c6b1c7a8ed02842b25c9b0d0638a90424
Certificate serial:       014774AF
Authority key identifier: EA:9F:F9:1C:6B:1C:7A:8E:D0:28:42:B2:5C:9B:0D:06:38:A9:04:24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6p_5HGsceo7QKEKyXJsNBjipBCQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/57548d-7096-45b0-8be8-00b7bf32ecf8/1/w7QRixNLugT0yWOtuVcAa58AwlE.roa
Signing time:             Sat 01 Jan 2022 13:55:50 +0000
ROA not before:           Sat 01 Jan 2022 13:55:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     44934
IP address blocks:        83.138.62.0/24 maxlen: 24
                          2a05:5a42::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21460143 (0x14774af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea9ff91c6b1c7a8ed02842b25c9b0d0638a90424
        Validity
            Not Before: Jan  1 13:55:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c3b4118b134bba04f4c963adb957006b9f00c251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a3:c5:f8:38:10:1e:42:f7:94:31:b8:c3:b0:
                    57:61:08:ff:da:3b:a0:1b:6e:ed:d3:30:86:6a:27:
                    70:81:89:52:58:1e:f5:49:90:08:ad:19:be:e0:05:
                    aa:04:3d:b5:ff:6c:f3:dd:e3:9f:50:71:dd:34:67:
                    20:b4:61:9c:cd:56:b5:6d:12:88:a4:38:c4:4e:6e:
                    91:c5:e9:e8:9f:1d:5f:9c:58:e0:8e:e4:73:d6:1c:
                    fa:31:c0:b6:bb:bf:ce:dc:b6:c7:83:45:83:01:76:
                    b0:80:ef:74:ad:ae:b3:bf:e3:69:75:49:8e:3f:77:
                    dd:03:04:77:19:cc:93:2d:8d:0f:37:f2:d8:0c:5a:
                    81:9d:b0:15:7f:11:ff:0d:d5:71:e4:6f:bc:a2:54:
                    32:d5:37:af:a8:bc:db:69:a6:b6:df:d6:47:89:eb:
                    18:35:71:e1:fa:7a:c4:41:d8:13:24:17:05:f5:24:
                    3d:d9:45:18:56:24:bc:0d:4b:c5:07:59:7c:ce:ce:
                    9a:18:36:1a:e9:d4:d9:a5:e8:fb:de:41:07:3e:73:
                    e6:06:05:d6:c9:3b:42:58:ce:2f:06:4e:6d:28:7e:
                    f5:1e:41:fa:50:70:e1:8f:0d:7b:79:a8:82:d6:e2:
                    ab:0e:e7:a9:7a:5a:3a:c5:49:e4:7c:c4:63:91:2a:
                    b6:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:B4:11:8B:13:4B:BA:04:F4:C9:63:AD:B9:57:00:6B:9F:00:C2:51
            X509v3 Authority Key Identifier:
                keyid:EA:9F:F9:1C:6B:1C:7A:8E:D0:28:42:B2:5C:9B:0D:06:38:A9:04:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6p_5HGsceo7QKEKyXJsNBjipBCQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/57548d-7096-45b0-8be8-00b7bf32ecf8/1/w7QRixNLugT0yWOtuVcAa58AwlE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/57548d-7096-45b0-8be8-00b7bf32ecf8/1/6p_5HGsceo7QKEKyXJsNBjipBCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.138.62.0/24
                IPv6:
                  2a05:5a42::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:c4:8e:ed:90:0a:ee:15:14:a4:1d:41:63:f6:db:ff:52:88:
         03:d2:3e:d7:41:41:a4:b4:15:bd:23:f7:15:0a:16:93:c2:0a:
         76:44:6c:3d:f3:1f:aa:4a:97:da:ab:84:89:c6:ab:01:f3:c5:
         ad:28:bc:8e:1f:2b:58:6c:ef:1b:88:61:5d:44:c6:6e:b1:70:
         8e:21:95:77:01:2f:c2:78:60:43:de:ef:4f:c4:59:36:29:82:
         b5:d1:ac:b4:61:a1:f8:c6:4f:4c:c5:72:db:42:47:3d:9c:1f:
         24:6c:6a:4b:5d:3c:e1:2d:e7:1c:7c:05:db:d2:02:51:b3:e5:
         92:58:19:98:0b:6d:18:b0:b9:e6:53:2b:2b:9d:b9:fd:dd:77:
         6c:2d:99:8b:4c:e5:3e:2f:8f:26:ed:a9:50:37:27:cf:70:64:
         43:75:b8:c0:cf:10:f8:38:ed:00:18:54:49:92:c3:0e:55:51:
         28:e2:3b:fc:ff:04:04:f3:98:ff:c0:36:6c:09:c0:c0:49:d1:
         d3:36:df:44:3d:f8:af:7d:a9:f8:81:aa:00:ab:e8:fe:7c:7b:
         d1:fb:e1:54:01:0c:30:fe:45:1b:e6:e7:c9:58:73:ec:a6:da:
         16:5f:df:6f:8d:53:eb:be:c3:d4:d6:12:e3:d9:e8:69:24:62:
         8f:56:7d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:56 2024 by rpki-client on console-ams.rpki-client.org