Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/WrvNpiyNnZTEsB0WOqGknq2j5cs.roa
File:                     WrvNpiyNnZTEsB0WOqGknq2j5cs.roa (raw, json)
Hash identifier:          UXJIEFhs597/TZzliYajqp5BxcqPMvLiaYhoXTxM2rI=
Subject key identifier:   5A:BB:CD:A6:2C:8D:9D:94:C4:B0:1D:16:3A:A1:A4:9E:AD:A3:E5:CB
Certificate issuer:       /CN=8f6c424cfe92703100d50a2832253744dd756452
Certificate serial:       6A0893
Authority key identifier: 8F:6C:42:4C:FE:92:70:31:00:D5:0A:28:32:25:37:44:DD:75:64:52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j2xCTP6ScDEA1QooMiU3RN11ZFI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/WrvNpiyNnZTEsB0WOqGknq2j5cs.roa
Signing time:             Sat 01 Jan 2022 01:58:55 +0000
ROA not before:           Sat 01 Jan 2022 01:58:55 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210588
IP address blocks:        37.200.87.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6949011 (0x6a0893)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f6c424cfe92703100d50a2832253744dd756452
        Validity
            Not Before: Jan  1 01:58:55 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5abbcda62c8d9d94c4b01d163aa1a49eada3e5cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:bb:c3:a0:f8:88:17:3a:aa:8e:74:44:2c:f5:
                    a7:a7:1b:5a:39:d2:a9:9f:50:f7:f1:55:d1:22:ac:
                    7d:a2:44:14:d4:b3:be:b3:e2:33:83:aa:a7:a0:38:
                    06:b3:48:95:57:4c:83:9e:ce:f9:90:69:80:75:61:
                    4b:50:c2:76:f6:9b:f9:72:70:75:df:33:ae:2d:bd:
                    e1:24:c2:da:6a:c1:2b:f8:77:a0:4f:ea:88:4d:88:
                    ee:a3:e2:90:37:56:98:b1:6e:e5:c9:a3:a3:31:4d:
                    b4:f0:e8:be:02:6d:7e:e5:84:54:a2:fa:e0:9b:74:
                    ec:05:a2:38:01:e5:f4:53:4e:b5:d1:98:d8:71:7b:
                    0c:7d:d1:81:ac:54:e8:4a:ac:4d:96:d1:8e:c0:17:
                    79:f9:65:07:de:41:db:13:c9:af:d5:cc:dd:be:52:
                    12:e5:05:01:bb:b1:35:ff:82:51:b2:be:50:12:e5:
                    0c:7d:64:b3:5b:a0:7c:1e:17:df:f2:33:93:5d:cb:
                    dc:e1:2f:81:4f:5a:08:55:46:b8:86:c7:f5:64:7f:
                    b7:56:17:50:a8:e4:e0:ad:9c:4d:f7:28:c5:67:94:
                    57:56:fb:9d:16:9a:f5:97:0a:8a:69:3b:03:63:32:
                    74:51:76:88:cc:c4:71:de:64:38:db:7f:7d:30:59:
                    ab:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:BB:CD:A6:2C:8D:9D:94:C4:B0:1D:16:3A:A1:A4:9E:AD:A3:E5:CB
            X509v3 Authority Key Identifier:
                keyid:8F:6C:42:4C:FE:92:70:31:00:D5:0A:28:32:25:37:44:DD:75:64:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j2xCTP6ScDEA1QooMiU3RN11ZFI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/WrvNpiyNnZTEsB0WOqGknq2j5cs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.200.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:09:b1:af:6a:b4:b9:77:15:28:ae:a3:67:e0:b0:b6:dc:a5:
         62:f8:2b:ac:5e:a2:7e:e1:9c:29:ef:bf:14:f7:40:4d:01:21:
         74:c4:e3:68:cd:d6:cb:20:87:19:74:48:2e:82:dd:78:14:4a:
         57:ae:4c:78:32:c5:c7:a0:1e:11:45:71:b4:20:c2:9d:9e:e5:
         7d:05:9f:78:8a:6f:b4:9d:87:f7:60:a9:46:3e:a8:35:be:27:
         90:c7:13:68:42:d9:04:e4:6d:a2:0c:70:c5:d0:a7:7c:ca:e0:
         06:59:60:12:04:a4:e8:5a:4c:90:d6:35:14:78:e3:8a:7c:c3:
         e5:47:1f:7c:81:e0:f0:cb:f8:e1:0b:16:45:89:89:5d:34:ec:
         cd:d8:27:fd:c6:6c:d5:f9:95:93:c9:86:3f:27:5e:1b:64:5e:
         69:2b:7c:04:88:4b:7b:70:47:37:c7:93:54:b0:8a:a1:d5:6b:
         91:ea:4e:ad:6d:01:a1:20:35:e3:e9:70:9d:1e:c5:ad:31:be:
         59:4d:df:9f:6d:5d:03:58:99:1c:ba:59:89:d0:44:7a:a8:71:
         6d:2d:97:59:59:57:93:80:8b:0f:8f:98:79:f0:c9:fb:e8:ab:
         1f:41:3e:71:06:b5:81:83:54:0c:b2:bb:1f:18:8f:08:1a:3a:
         e5:9c:bc:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:12 2024 by rpki-client on console-ams.rpki-client.org