Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/D24uu-cGNPbETLU7R55ubR0RR_k.roa
File:                     D24uu-cGNPbETLU7R55ubR0RR_k.roa (raw, json)
Hash identifier:          yL7f95cY/9t8lNgrmNlhVlipbO04z5kDtSR0ji5AiKQ=
Subject key identifier:   0F:6E:2E:BB:E7:06:34:F6:C4:4C:B5:3B:47:9E:6E:6D:1D:11:47:F9
Certificate issuer:       /CN=0dff499ecdb8e15733bb7110959959ac0e166008
Certificate serial:       029298
Authority key identifier: 0D:FF:49:9E:CD:B8:E1:57:33:BB:71:10:95:99:59:AC:0E:16:60:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/D24uu-cGNPbETLU7R55ubR0RR_k.roa
Signing time:             Wed 09 Mar 2022 08:13:15 +0000
ROA not before:           Wed 09 Mar 2022 08:13:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     12886
IP address blocks:        193.96.173.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 168600 (0x29298)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0dff499ecdb8e15733bb7110959959ac0e166008
        Validity
            Not Before: Mar  9 08:13:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0f6e2ebbe70634f6c44cb53b479e6e6d1d1147f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:73:e9:68:89:13:7b:a5:38:71:32:d9:87:ae:
                    40:a0:43:35:67:de:72:1d:c6:fc:42:2b:39:28:96:
                    40:ca:69:b1:97:64:37:a6:34:9a:bd:44:02:45:7c:
                    84:12:84:c1:1d:30:81:8d:c3:c5:15:03:f9:d3:b1:
                    10:9e:ad:af:f4:95:3b:c5:7f:08:f8:50:41:59:2b:
                    80:56:a5:c2:cf:34:9f:87:8f:46:e3:f3:85:13:14:
                    7f:75:6c:59:3f:59:6a:b3:1e:71:4d:18:c1:9c:42:
                    be:35:fa:fa:ab:f5:e2:bb:9e:42:88:83:5a:23:e5:
                    bf:d3:f8:f8:14:3d:6f:23:d4:04:4e:22:ff:63:44:
                    5a:52:c1:9d:b8:3b:75:b0:3f:0f:68:ff:e7:14:d9:
                    17:f7:3d:11:e1:67:df:57:6b:f6:cb:a2:c8:bd:6f:
                    20:a9:47:33:f4:0c:b0:50:28:16:c3:35:83:92:f8:
                    e8:0c:23:69:c4:8f:de:24:a6:06:4f:1c:46:bc:dc:
                    ff:58:9b:34:83:b7:eb:e6:65:d5:52:cf:d6:57:2b:
                    98:c3:11:2f:26:c8:bb:94:16:9d:1a:8a:8c:90:38:
                    30:67:9c:b4:0b:ab:cc:65:58:cd:c7:3a:5a:be:52:
                    19:23:54:76:b7:34:06:4e:b7:31:85:b5:4c:ea:de:
                    9c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:6E:2E:BB:E7:06:34:F6:C4:4C:B5:3B:47:9E:6E:6D:1D:11:47:F9
            X509v3 Authority Key Identifier:
                keyid:0D:FF:49:9E:CD:B8:E1:57:33:BB:71:10:95:99:59:AC:0E:16:60:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/D24uu-cGNPbETLU7R55ubR0RR_k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.96.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:49:9e:aa:99:1e:da:69:37:21:10:ff:85:23:77:68:26:6c:
         14:d1:87:55:5e:45:ee:a8:cd:4c:af:14:c4:56:d8:5f:87:36:
         9e:79:fa:5e:ef:d6:40:b6:22:87:99:cf:83:58:c6:93:28:61:
         a1:d0:a2:52:8d:23:08:97:2f:cb:d3:11:23:83:36:72:dd:56:
         0c:ff:15:b8:f4:76:3a:e5:2d:b2:c7:03:18:14:dc:b3:a2:aa:
         60:f3:f0:9b:f9:ff:f5:f9:c0:3b:b7:23:d0:64:62:43:39:bc:
         04:fa:72:30:f4:98:36:b4:6e:cd:4a:66:da:6b:fc:b9:44:9d:
         55:68:32:87:28:a7:81:45:e3:0d:a0:87:6d:6c:86:43:3a:19:
         14:08:c7:fd:00:49:54:b1:0b:23:0e:cb:c7:09:31:7f:80:d4:
         b7:44:dc:83:68:27:d9:f0:a9:be:94:c9:74:12:1d:74:a8:38:
         0d:91:b9:c6:f2:41:9f:3c:5f:cc:69:88:23:37:f7:6f:a1:d5:
         1a:40:f1:38:9a:9a:e6:fe:f2:3a:c1:14:ee:f4:81:c0:1a:1b:
         ed:40:ca:36:5d:7e:c5:f6:ec:bb:89:dc:10:bf:f4:92:fb:2a:
         cc:4f:ba:56:cd:db:80:9c:9a:23:03:4b:0c:fa:ba:db:9f:93:
         1b:07:80:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:43 2024 by rpki-client on console-fra.rpki-client.org