Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/GLlaXm1ajkBXFK2owq6CjFNfm-k.roa
File:                     GLlaXm1ajkBXFK2owq6CjFNfm-k.roa (raw, json)
Hash identifier:          cYWsWGNprgFEGrL8iLqJkWgg5z/VvDDVqtH3D/e7KdY=
Subject key identifier:   18:B9:5A:5E:6D:5A:8E:40:57:14:AD:A8:C2:AE:82:8C:53:5F:9B:E9
Certificate issuer:       /CN=dfea4e9bff294e20bd749ed2eeb9184f208bc9d6
Certificate serial:       01B48604
Authority key identifier: DF:EA:4E:9B:FF:29:4E:20:BD:74:9E:D2:EE:B9:18:4F:20:8B:C9:D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3-pOm_8pTiC9dJ7S7rkYTyCLydY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/GLlaXm1ajkBXFK2owq6CjFNfm-k.roa
Signing time:             Fri 17 Jun 2022 01:24:46 +0000
ROA not before:           Fri 17 Jun 2022 01:24:46 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     56540
IP address blocks:        188.244.114.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28608004 (0x1b48604)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfea4e9bff294e20bd749ed2eeb9184f208bc9d6
        Validity
            Not Before: Jun 17 01:24:46 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=18b95a5e6d5a8e405714ada8c2ae828c535f9be9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f5:2b:b3:53:9c:60:8b:c7:3f:20:a7:70:f8:
                    85:fe:53:b5:42:34:28:e9:84:3c:1c:95:71:94:a2:
                    2a:08:9f:ed:ec:8f:d3:8f:a5:2b:03:a0:33:db:34:
                    3d:d5:10:9c:f9:d0:77:a6:4c:2f:7d:9a:60:1e:89:
                    a7:7d:16:9a:72:8e:3e:4b:9b:9d:ff:b5:65:63:c8:
                    b8:32:95:6d:31:84:33:21:23:96:06:32:67:0e:2b:
                    98:71:12:40:79:e8:3f:b1:36:ac:68:9c:03:ae:ca:
                    7f:b0:06:51:eb:50:8b:d2:7a:29:0f:38:96:c3:87:
                    b0:c6:6a:2d:76:3e:85:3f:19:38:86:0a:ae:8f:87:
                    15:47:79:03:40:0e:24:51:7a:ac:5f:5b:b2:26:10:
                    8c:53:b0:c8:a6:97:5d:9f:15:4b:23:ff:ff:2d:ab:
                    c2:ad:45:7c:79:e5:9e:3a:a6:63:6d:10:76:a4:f4:
                    4d:19:ae:fb:60:52:ad:8b:f7:e2:0b:18:9c:e1:df:
                    bf:ea:5c:f5:c6:20:f1:bf:ac:f3:0c:b0:63:bd:a3:
                    d8:80:67:5d:48:4d:a9:c5:71:4a:02:b1:a1:68:8c:
                    ae:eb:e5:1b:c3:5d:cd:0a:fb:62:eb:42:47:4c:4c:
                    d3:80:60:79:34:38:3f:14:75:e9:74:e5:d1:48:63:
                    82:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:B9:5A:5E:6D:5A:8E:40:57:14:AD:A8:C2:AE:82:8C:53:5F:9B:E9
            X509v3 Authority Key Identifier:
                keyid:DF:EA:4E:9B:FF:29:4E:20:BD:74:9E:D2:EE:B9:18:4F:20:8B:C9:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-pOm_8pTiC9dJ7S7rkYTyCLydY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/GLlaXm1ajkBXFK2owq6CjFNfm-k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/3-pOm_8pTiC9dJ7S7rkYTyCLydY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.244.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:2a:4c:3a:2e:45:af:39:3e:f4:c9:58:ee:a4:8b:af:46:13:
         eb:46:c9:8a:4b:47:48:2f:e0:ff:5c:56:2c:5d:70:df:12:14:
         15:f8:2f:66:22:a7:51:c5:79:aa:46:fe:2d:33:87:99:06:53:
         e6:53:03:3b:d4:5b:a2:de:20:76:9e:f6:44:ee:e9:e8:ee:49:
         20:2e:0f:a2:f1:86:f1:76:e6:c3:f1:31:40:74:b8:8a:29:44:
         7a:0d:0b:e1:bb:b3:c0:99:e8:5c:a9:74:fb:fc:26:fd:f0:7e:
         81:9e:52:0a:0e:28:c7:1c:50:56:79:c8:d9:34:e7:c2:4c:9f:
         45:24:8f:87:5d:7b:02:cd:89:18:db:56:b9:6b:aa:ad:56:34:
         1a:39:83:fc:a8:98:9b:92:2a:34:a2:3f:0f:d9:bd:33:db:c6:
         77:c0:81:50:71:0d:19:cc:5d:36:44:89:da:da:00:6c:c0:81:
         49:38:92:79:cf:e3:60:97:82:60:df:f9:bb:e7:f0:c9:12:d4:
         01:b9:a4:5a:82:57:c4:78:24:61:53:8c:81:61:96:50:74:44:
         64:51:eb:da:24:5a:02:07:f6:da:35:f0:8e:cf:88:e9:ed:05:
         06:57:2e:10:d1:23:9c:67:36:34:48:2f:03:0f:37:85:48:81:
         f4:05:1f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:34 2024 by rpki-client on console-fra.rpki-client.org