Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/7fZCaT5iqOC7MQsgVH6NnMxi5q0.roa
File:                     7fZCaT5iqOC7MQsgVH6NnMxi5q0.roa (raw, json)
Hash identifier:          EvU0kVE+qUCdzZdvUu6ewPgZxKgWv5yzRVh+Z3pFGBQ=
Subject key identifier:   ED:F6:42:69:3E:62:A8:E0:BB:31:0B:20:54:7E:8D:9C:CC:62:E6:AD
Certificate issuer:       /CN=320b24a740f2e61632050adc146c1ee6a3e686c5
Certificate serial:       341D5DD6
Authority key identifier: 32:0B:24:A7:40:F2:E6:16:32:05:0A:DC:14:6C:1E:E6:A3:E6:86:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/7fZCaT5iqOC7MQsgVH6NnMxi5q0.roa
Signing time:             Sat 01 Jan 2022 09:03:10 +0000
ROA not before:           Sat 01 Jan 2022 09:03:10 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     8605
IP address blocks:        5.179.0.0/20 maxlen: 20
                          5.179.16.0/21 maxlen: 21
                          5.179.24.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 874339798 (0x341d5dd6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=320b24a740f2e61632050adc146c1ee6a3e686c5
        Validity
            Not Before: Jan  1 09:03:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=edf642693e62a8e0bb310b20547e8d9ccc62e6ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:e1:ca:37:b6:90:b8:55:80:12:a0:4d:c2:df:
                    22:b0:fd:ce:6c:dd:92:bd:ec:d0:f2:2c:87:11:70:
                    da:e3:ab:4e:3e:f9:95:1e:a2:67:ef:a1:b5:03:1b:
                    a2:06:20:e9:88:bd:6a:01:ed:f5:76:b2:e3:d7:46:
                    80:84:f9:38:c5:70:64:c8:69:e6:26:3e:8d:c5:3c:
                    f2:1a:49:04:46:b6:ff:df:07:61:77:e2:8f:89:15:
                    eb:4e:54:07:b7:ed:41:ef:f2:f3:df:af:3f:da:47:
                    9f:c2:09:e8:77:41:db:9b:d8:e6:45:7c:c4:a3:f2:
                    ad:02:14:c5:5e:74:a5:6c:2d:6e:2a:08:0e:b5:6d:
                    87:97:af:6e:a0:54:30:2b:12:38:ec:39:af:85:0e:
                    7b:e1:5a:a6:36:97:fb:a2:f9:6e:48:e7:2c:bf:0b:
                    80:e7:bb:fb:e3:61:0b:b5:69:8f:c8:3a:1f:a1:48:
                    5d:16:f9:94:0d:46:f4:56:b9:e5:b8:ed:93:6b:88:
                    d9:84:96:1b:97:1f:21:c3:fc:b5:3b:99:27:8c:f4:
                    d8:ff:fc:68:0c:95:f1:c5:19:58:db:13:f5:03:3c:
                    f4:6b:99:51:62:da:62:70:04:4b:ca:e9:e4:b7:9c:
                    79:6d:1e:4c:a8:ad:38:91:22:7a:94:fe:fe:cc:55:
                    e7:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:F6:42:69:3E:62:A8:E0:BB:31:0B:20:54:7E:8D:9C:CC:62:E6:AD
            X509v3 Authority Key Identifier:
                keyid:32:0B:24:A7:40:F2:E6:16:32:05:0A:DC:14:6C:1E:E6:A3:E6:86:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/7fZCaT5iqOC7MQsgVH6NnMxi5q0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.179.0.0-5.179.27.255

    Signature Algorithm: sha256WithRSAEncryption
         88:f9:7f:d3:44:e3:e9:0c:2c:20:f3:40:3d:7d:5a:a2:7c:0e:
         5b:60:33:d6:d2:17:3f:15:94:57:c3:f3:58:d4:b4:2a:f4:14:
         28:9f:42:01:ac:6f:d9:6c:02:c9:96:58:f4:a2:50:3e:e3:af:
         5a:0e:8a:22:6c:c2:53:bc:d9:ab:d2:aa:9f:0b:5c:16:8a:ab:
         f2:a1:2c:82:b4:ed:c4:d7:16:2a:db:1a:0c:df:76:c6:09:3d:
         02:87:17:52:4a:0d:4b:8c:06:a0:8a:58:66:73:d3:b0:a8:7c:
         fb:ef:1f:b4:06:38:1b:b4:86:d6:95:db:5f:72:72:39:13:7e:
         4a:d3:a9:f6:df:4f:65:a8:14:88:b1:b9:63:87:2f:e0:b4:af:
         09:3d:7b:bf:4f:59:cc:26:26:30:c2:7e:42:da:b7:36:bf:be:
         47:d8:7d:2c:4b:af:eb:5a:63:6d:3e:c9:b7:ab:54:52:2d:3b:
         d1:49:20:78:12:b4:7c:04:d9:97:47:23:32:17:37:63:b0:cc:
         ab:92:2c:9c:72:49:f4:94:a5:8c:05:77:52:cc:45:b2:c8:b9:
         78:18:89:8d:42:28:cd:c8:3d:80:42:fd:c4:45:15:14:63:26:
         f1:23:c5:c4:e4:63:e4:7a:c7:04:d2:03:6c:f4:62:39:e7:07:
         93:5d:b6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:51 2024 by rpki-client on console-fra.rpki-client.org