Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/JdPHpOVEnJ0N8-JaDVP5BnhGySk.roa
File:                     JdPHpOVEnJ0N8-JaDVP5BnhGySk.roa (raw, json)
Hash identifier:          6h47XizBFV6wAWhVq4CbRaraYaOf6PUsGC4ARAX74+s=
Subject key identifier:   25:D3:C7:A4:E5:44:9C:9D:0D:F3:E2:5A:0D:53:F9:06:78:46:C9:29
Certificate issuer:       /CN=bd19d4535c7e62b921e859e6557b821f278e716a
Certificate serial:       0181FD1DA2D19EFB26A4DAAA1F43A052C7EE
Authority key identifier: BD:19:D4:53:5C:7E:62:B9:21:E8:59:E6:55:7B:82:1F:27:8E:71:6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/JdPHpOVEnJ0N8-JaDVP5BnhGySk.roa
Signing time:             Thu 14 Jul 2022 14:29:46 +0000
ROA not before:           Thu 14 Jul 2022 14:29:46 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     834
IP address blocks:        185.23.6.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:fd:1d:a2:d1:9e:fb:26:a4:da:aa:1f:43:a0:52:c7:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd19d4535c7e62b921e859e6557b821f278e716a
        Validity
            Not Before: Jul 14 14:29:46 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=25d3c7a4e5449c9d0df3e25a0d53f9067846c929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d4:f7:be:e8:b9:ec:68:ae:e9:79:97:d9:7a:
                    d2:f7:4e:75:1a:0b:38:c4:c7:23:f3:1c:f3:29:84:
                    1c:96:75:b8:2b:68:2e:4f:0e:b7:64:b6:c4:25:4f:
                    5e:fc:cf:06:79:8f:73:b3:27:9d:b9:68:32:6c:08:
                    64:3a:18:06:5f:88:ce:e8:77:88:58:36:fc:37:e4:
                    a8:10:d8:37:29:11:68:19:52:9e:0f:5e:8d:dc:b1:
                    34:8b:56:7e:6d:5f:03:a8:e7:aa:19:8d:8a:cd:3a:
                    6d:f4:08:fe:e6:b2:71:61:19:b2:ec:f4:2c:73:6f:
                    bd:54:77:f1:30:41:d5:42:a2:cd:7e:90:12:1f:ae:
                    03:ab:9c:16:47:ab:7b:29:03:ac:f5:a7:8a:c4:67:
                    7a:84:a7:65:60:d1:fa:f8:b5:7d:49:0c:f4:71:4c:
                    70:70:53:23:aa:c7:5d:7e:2e:32:a5:a8:8b:1d:20:
                    5c:3f:58:08:2b:db:b4:7f:14:2d:c4:8f:1c:64:25:
                    33:cc:52:63:d0:76:5e:7d:8b:30:1a:49:6d:96:00:
                    52:34:a2:24:94:cd:c5:66:68:d6:bb:e5:e5:e2:80:
                    9c:af:67:a5:b8:eb:ee:3a:87:a6:9b:0c:8a:90:8f:
                    3a:88:c9:f6:8f:d2:28:23:cd:c2:ef:6c:4b:80:80:
                    8d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:D3:C7:A4:E5:44:9C:9D:0D:F3:E2:5A:0D:53:F9:06:78:46:C9:29
            X509v3 Authority Key Identifier:
                keyid:BD:19:D4:53:5C:7E:62:B9:21:E8:59:E6:55:7B:82:1F:27:8E:71:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/JdPHpOVEnJ0N8-JaDVP5BnhGySk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.23.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:18:d2:1d:88:62:2b:28:4d:73:13:51:93:ea:03:e9:b5:a5:
         6a:c2:61:0c:ea:d8:46:19:b6:79:29:04:fd:81:d8:54:21:9c:
         76:a5:6c:78:d6:70:9f:ff:f3:2f:5d:2b:9e:2e:c5:ca:d3:0a:
         20:56:54:fd:81:df:73:fe:2d:93:f6:04:2d:a4:59:82:f6:52:
         b2:d3:07:e2:90:65:c5:29:3d:c7:80:c4:0e:b0:73:fa:b6:77:
         bb:c8:74:f0:d9:a7:43:2d:f2:f4:31:7a:5c:2c:00:c7:70:b8:
         2a:da:15:2e:85:80:4b:61:9f:02:f6:2c:62:a9:32:48:2c:74:
         1e:bd:77:6e:bf:b6:23:ee:43:f9:56:20:ea:e3:1d:a7:00:8e:
         66:e9:7f:c1:84:ba:85:0a:02:1e:5c:50:12:3c:0e:b6:d1:a4:
         bb:05:39:3e:a4:5e:96:3e:14:f0:06:d2:b6:bc:d0:c2:19:be:
         c7:f9:81:f0:19:96:a0:58:88:51:c3:fd:46:ea:d2:ae:39:2e:
         6a:99:87:97:77:a4:b8:4d:00:45:a0:7f:db:03:1f:37:88:58:
         22:0e:bd:b9:1e:dd:86:bf:0c:01:35:c5:08:ce:8a:db:3d:43:
         6f:5a:7c:5f:5e:42:f4:f7:2d:33:23:b1:e5:c1:ce:59:75:4a:
         75:9a:f8:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:52 2024 by rpki-client on console-fra.rpki-client.org