Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/Twkci76EMQfe8RtlyrTQ9xkzeFU.roa
File:                     Twkci76EMQfe8RtlyrTQ9xkzeFU.roa (raw, json)
Hash identifier:          qdF8fxvINZ3JiSbCdOq/tU2J7s4rePIJPsWzWyx4dWg=
Subject key identifier:   4F:09:1C:8B:BE:84:31:07:DE:F1:1B:65:CA:B4:D0:F7:19:33:78:55
Certificate issuer:       /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial:       01822BF3061BF2D299CB115603817CF4DF78
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/Twkci76EMQfe8RtlyrTQ9xkzeFU.roa
Signing time:             Sat 23 Jul 2022 16:45:23 +0000
ROA not before:           Sat 23 Jul 2022 16:45:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204968
IP address blocks:        81.31.231.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:2b:f3:06:1b:f2:d2:99:cb:11:56:03:81:7c:f4:df:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
        Validity
            Not Before: Jul 23 16:45:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4f091c8bbe843107def11b65cab4d0f719337855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:99:f2:a0:93:c0:b2:7f:98:c2:cb:29:4c:cd:
                    23:17:cf:6e:5b:c8:4e:b9:bf:39:b2:ff:ee:e4:2f:
                    db:cb:3f:8b:f1:f5:3a:27:c4:f2:8e:66:e8:40:6d:
                    da:6b:f9:d4:92:c7:b7:55:fd:a5:98:c1:2c:62:8a:
                    ef:68:25:b8:ae:af:aa:7e:ae:e5:8a:5f:57:17:51:
                    ba:fe:f1:0c:4b:89:c8:d9:bd:3d:f2:fb:20:f7:a0:
                    fb:d2:ef:02:4d:c8:6a:c7:db:77:d6:07:47:cb:e2:
                    94:4a:9f:e7:4c:44:bc:2f:20:8e:8d:83:b6:cb:b7:
                    d2:47:c7:6c:38:63:d6:37:2b:62:ed:71:7d:8b:d9:
                    23:e0:65:35:cb:18:c2:7a:b5:80:4c:26:fd:2a:8e:
                    ae:a7:29:9c:70:3b:2a:5d:2e:16:c9:f0:a2:31:1f:
                    55:77:14:c3:01:8b:2c:65:da:52:d5:71:8b:69:56:
                    52:b4:aa:46:4e:25:28:70:51:c9:46:51:73:eb:72:
                    cf:e9:5b:73:4d:1a:51:d6:98:8f:34:ba:c9:e2:36:
                    17:d6:9d:f3:73:7b:b9:d3:fb:85:57:f4:8d:d6:be:
                    50:e3:7e:ac:d1:dd:f7:c1:a9:61:61:6f:04:58:49:
                    50:e9:43:e6:ed:31:ce:7e:52:2b:44:c7:38:af:d1:
                    03:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:09:1C:8B:BE:84:31:07:DE:F1:1B:65:CA:B4:D0:F7:19:33:78:55
            X509v3 Authority Key Identifier:
                keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/Twkci76EMQfe8RtlyrTQ9xkzeFU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.31.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:24:ea:cb:1d:3a:f7:8e:e9:f4:bc:a8:19:de:c3:c6:37:ae:
         5f:fc:77:5c:6d:d7:91:81:70:fe:90:b3:d5:98:60:d4:d1:f3:
         c1:f4:54:8e:0a:b3:14:29:4e:04:ce:90:cd:d2:22:8c:0f:e0:
         6d:fb:d2:17:81:5e:51:0a:84:2f:e4:c0:9b:2e:2b:05:79:17:
         f9:50:3a:8f:49:64:dc:73:95:96:0c:e8:78:0d:31:65:c6:28:
         1d:52:3c:4b:14:41:39:17:2a:1b:6c:bc:6c:13:d5:71:5c:6f:
         2d:55:e1:11:ff:d9:6b:9a:ab:c6:7d:f0:58:af:7a:97:14:f2:
         91:50:dd:ef:9d:9c:62:ef:ed:a3:7d:1a:7e:5b:b9:df:03:c3:
         fd:5e:30:83:c7:e5:d2:b6:e9:e0:91:e8:ed:f8:a7:c1:69:63:
         25:5a:9f:9f:c1:00:02:ba:27:a5:b6:11:d2:ba:4c:b4:69:73:
         08:05:56:fe:c0:10:93:75:c8:71:2b:fe:02:71:12:93:be:ec:
         00:d3:1f:de:d0:fe:cd:89:71:85:29:6d:57:cc:81:54:c0:d6:
         ba:54:e9:bd:c1:48:ce:ca:dc:ed:d6:1e:4f:2a:b3:76:ac:20:
         35:3e:33:19:a3:25:0b:9f:e4:08:ef:73:bc:18:22:c9:45:38:
         7b:08:77:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:53 2024 by rpki-client on console-fra.rpki-client.org