Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/rDdle4SW0JI4vN7B0rxHjOlb_NU.roa
File:                     rDdle4SW0JI4vN7B0rxHjOlb_NU.roa (raw, json)
Hash identifier:          qSgVyKbfSQtJoa980fu4UuaLt4Bjnv9MYg55VRdfOI0=
Subject key identifier:   AC:37:65:7B:84:96:D0:92:38:BC:DE:C1:D2:BC:47:8C:E9:5B:FC:D5
Certificate issuer:       /CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
Certificate serial:       01828117494B9961E14A7D7A701AF5C90835
Authority key identifier: 7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/rDdle4SW0JI4vN7B0rxHjOlb_NU.roa
Signing time:             Tue 09 Aug 2022 05:32:43 +0000
ROA not before:           Tue 09 Aug 2022 05:32:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60721
IP address blocks:        193.228.168.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:81:17:49:4b:99:61:e1:4a:7d:7a:70:1a:f5:c9:08:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
        Validity
            Not Before: Aug  9 05:32:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ac37657b8496d09238bcdec1d2bc478ce95bfcd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9d:7a:34:bc:d9:66:f4:2f:ba:ac:6c:0e:e6:
                    f9:9c:80:ef:0c:79:cf:94:42:1d:1b:14:d0:a9:3b:
                    35:88:21:d3:6f:f2:95:4b:08:72:90:f9:c8:94:95:
                    53:ee:c6:65:2e:9a:e6:8f:b9:75:e2:13:0f:f7:63:
                    8a:dd:65:53:aa:83:71:ca:17:d2:e9:ef:5e:3b:71:
                    a5:2c:df:a6:63:47:4a:32:15:15:23:eb:5e:3d:70:
                    e3:2c:ed:90:b3:56:05:c8:62:4a:3a:56:e0:db:f2:
                    ff:99:69:81:70:7f:43:b4:fb:f2:70:21:c5:7c:50:
                    c8:ac:fa:98:d3:c6:80:3f:27:35:8b:2d:d7:ec:31:
                    c0:63:d9:3b:5a:c5:2d:d4:bc:1a:fa:fe:b7:14:ac:
                    f8:1d:ab:72:b4:8b:3b:1e:90:5a:93:e9:ce:31:da:
                    4a:71:57:84:96:b1:59:5b:e6:ff:2f:31:25:b6:3a:
                    0e:c5:a5:83:7c:c7:23:34:ba:56:73:23:a8:1e:d1:
                    9c:f8:9f:85:16:19:84:0f:29:24:30:00:62:1a:19:
                    0d:1f:7c:a1:1c:a2:74:6c:39:22:97:b5:86:17:50:
                    90:e8:2d:55:01:5f:ce:f8:4e:08:fe:94:31:e5:a2:
                    2f:f3:0d:af:e3:05:53:52:f4:83:49:54:33:bb:e3:
                    28:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:37:65:7B:84:96:D0:92:38:BC:DE:C1:D2:BC:47:8C:E9:5B:FC:D5
            X509v3 Authority Key Identifier:
                keyid:7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/rDdle4SW0JI4vN7B0rxHjOlb_NU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fuBTy5y09BweR3Pn8W6Eu1dSIDM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.228.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:f0:82:31:97:a6:89:d7:66:82:1e:66:e0:de:b5:ca:d6:f2:
         12:b5:cf:30:4c:eb:2c:45:6c:99:3e:bc:2d:f9:24:c3:c0:fd:
         7e:b4:e6:bf:11:2d:20:d6:5e:e4:ae:44:03:50:60:6c:5e:73:
         bc:fd:e4:12:7d:7c:2d:fc:42:14:2a:75:96:81:47:e4:c8:af:
         16:98:c9:df:ab:aa:9b:e3:5c:a4:32:03:e0:b1:f6:ff:54:db:
         6b:ec:1a:26:a8:e0:a9:3a:d5:ad:d9:10:88:2a:dd:59:1b:d5:
         eb:79:0e:ff:6a:7c:a3:49:f6:15:a1:ce:3b:df:ea:c9:e2:39:
         57:ef:9b:2c:63:f4:f6:e6:5c:40:95:af:74:31:ab:e2:10:24:
         80:dd:15:5d:b6:9a:74:eb:28:8a:37:d8:a5:99:f2:06:80:28:
         a2:49:5f:db:1c:2c:98:05:09:8d:aa:f0:31:14:a2:89:29:c6:
         19:e0:c4:59:32:f9:e7:80:5c:ed:cf:69:2f:56:0b:c1:a5:55:
         bd:34:ee:e5:64:8c:0a:38:f5:ed:06:e3:ad:eb:c1:f3:bb:a4:
         64:7c:4f:d6:e1:ac:ed:65:14:10:8f:e7:ed:cf:35:02:e6:4b:
         3f:05:e5:53:d4:64:49:ee:0f:7b:d9:8d:8f:39:12:24:a1:93:
         08:c3:0b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:02 2024 by rpki-client on console-fra.rpki-client.org