Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/vSwLMZ_REodlKUh_CDO6jYxgzZs.roa
File:                     vSwLMZ_REodlKUh_CDO6jYxgzZs.roa (raw, json)
Hash identifier:          5PpUQDTGH5bM1YHHL8f6m/Hw2tYEKXv4e9mWQM88XvY=
Subject key identifier:   BD:2C:0B:31:9F:D1:12:87:65:29:48:7F:08:33:BA:8D:8C:60:CD:9B
Certificate issuer:       /CN=8bce4281a994d52166ef3ff17728bae218855fc4
Certificate serial:       088F6219
Authority key identifier: 8B:CE:42:81:A9:94:D5:21:66:EF:3F:F1:77:28:BA:E2:18:85:5F:C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i85CgamU1SFm7z_xdyi64hiFX8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/vSwLMZ_REodlKUh_CDO6jYxgzZs.roa
Signing time:             Sat 01 Jan 2022 00:50:26 +0000
ROA not before:           Sat 01 Jan 2022 00:50:26 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     15600
IP address blocks:        193.8.165.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 143614489 (0x88f6219)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bce4281a994d52166ef3ff17728bae218855fc4
        Validity
            Not Before: Jan  1 00:50:26 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=bd2c0b319fd112876529487f0833ba8d8c60cd9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:96:18:b3:08:12:67:54:5b:46:73:67:09:b9:
                    13:c9:85:32:50:7b:f2:1c:af:78:f9:20:bd:28:e7:
                    c5:9a:d2:45:04:7f:23:9d:3b:45:91:50:c6:ef:40:
                    dd:91:cc:17:85:e8:36:7b:05:2e:3d:51:ac:d0:ce:
                    9c:12:39:4c:74:f2:47:76:a7:a4:64:cf:e1:4e:30:
                    06:41:d7:23:9f:77:64:9e:d7:eb:1b:74:1a:34:39:
                    39:62:d7:9f:ee:62:0e:78:d4:1f:18:46:a7:1d:09:
                    24:7e:7a:9a:22:5b:b5:c8:83:51:29:42:ef:59:57:
                    d1:c8:d8:3f:7c:bd:98:e3:e1:e3:bd:29:34:8b:6f:
                    30:21:44:ff:28:6b:06:94:b4:90:6c:5d:4f:f8:5c:
                    77:5a:39:66:d2:e2:1b:01:6a:7e:6a:76:e7:9b:0c:
                    fc:83:96:7a:f3:e6:99:47:2d:dc:ba:c5:b9:c4:08:
                    6a:b7:1f:f4:07:a9:0d:68:98:69:82:18:70:f3:08:
                    be:04:e7:50:2a:ae:0e:3f:37:f2:23:74:b9:d7:e4:
                    ce:3d:dc:64:87:dd:23:8a:eb:51:06:64:05:8c:fd:
                    8d:44:d9:f4:6c:56:f0:d0:fb:51:2a:74:bc:a1:26:
                    0d:a8:22:17:42:ae:4f:0a:be:3a:44:54:5f:25:b3:
                    7c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:2C:0B:31:9F:D1:12:87:65:29:48:7F:08:33:BA:8D:8C:60:CD:9B
            X509v3 Authority Key Identifier:
                keyid:8B:CE:42:81:A9:94:D5:21:66:EF:3F:F1:77:28:BA:E2:18:85:5F:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i85CgamU1SFm7z_xdyi64hiFX8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/vSwLMZ_REodlKUh_CDO6jYxgzZs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.8.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:7c:17:47:f3:ef:50:16:09:86:51:0b:93:e2:a4:79:f6:2d:
         cb:97:5d:52:7d:96:ca:32:d7:53:a9:d1:04:f1:a0:b6:d6:39:
         36:b6:6f:e2:99:47:46:be:7f:d4:80:11:df:82:2a:c0:d0:18:
         5e:09:ad:ff:e5:b7:ae:f7:aa:8b:a4:6b:e0:a7:e7:98:c3:82:
         c6:bc:1f:63:02:68:f3:77:0f:91:0d:dc:12:01:91:66:21:bf:
         0d:09:18:e7:42:ad:0d:0c:6c:ba:80:f3:87:4d:3d:f9:fd:38:
         61:7e:53:0a:cf:48:2a:a2:c3:34:0b:62:f5:87:e7:5d:1a:c1:
         8b:e5:a3:83:bb:49:ce:76:e8:de:11:26:95:ca:ef:29:78:c0:
         ba:13:39:2f:ec:2f:df:aa:f8:88:ba:1d:2e:a5:29:45:33:a9:
         05:f7:e7:7b:09:79:28:9d:28:3b:a4:62:52:07:e6:c0:fa:90:
         e9:10:db:be:39:07:40:fc:ff:9f:3e:ce:be:55:33:1f:eb:1b:
         06:6f:6e:a1:0d:b9:91:dd:49:1c:33:5f:b8:de:1b:ae:2d:5a:
         ed:98:53:e2:99:4f:38:6c:e6:b5:0c:98:9d:9e:ac:98:ce:ab:
         ad:1a:8f:a2:45:00:32:63:23:9e:b8:c8:37:63:5e:20:9d:45:
         11:98:19:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:10 2024 by rpki-client on console-ams.rpki-client.org