Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/1-PtvK-RDFQ_ubxHj163NjZ3DVpw.roa
File:                     1-PtvK-RDFQ_ubxHj163NjZ3DVpw.roa (raw, json)
Hash identifier:          AwnTKjw4XfY9W69NFnUdHLAY3vFQQYBDIRnf9ZaRzEI=
Subject key identifier:   F8:FB:6F:2B:E4:43:15:0F:EE:6F:11:E3:D7:AD:CD:8D:9D:C3:56:9C
Certificate issuer:       /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial:       0B5D9EF8
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/1-PtvK-RDFQ_ubxHj163NjZ3DVpw.roa
Signing time:             Sat 01 Jan 2022 08:58:37 +0000
ROA not before:           Sat 01 Jan 2022 08:58:37 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     47294
IP address blocks:        84.44.41.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 190684920 (0xb5d9ef8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
        Validity
            Not Before: Jan  1 08:58:37 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f8fb6f2be443150fee6f11e3d7adcd8d9dc3569c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9e:2c:b7:d8:4e:36:4e:24:f3:97:08:6c:3d:
                    67:dc:5e:cc:2e:55:3c:f3:59:1d:ad:65:67:a2:b2:
                    ff:40:37:14:ff:c2:e6:96:41:1e:23:38:e5:04:01:
                    bb:7a:b2:66:31:39:69:8a:3a:c3:4d:d5:94:52:21:
                    75:a7:09:38:a8:e0:cd:5c:e5:00:f0:41:7b:7b:00:
                    02:4f:15:45:96:66:51:c1:0d:b2:85:3e:38:2a:42:
                    6d:ed:37:f0:90:45:96:fc:6c:9f:b0:3f:c5:c7:c9:
                    04:32:67:db:28:47:0f:aa:d8:cf:86:df:ee:c4:79:
                    48:c0:ad:96:b4:f8:d1:cd:2e:de:0f:f6:e2:06:44:
                    dd:4c:f1:f1:86:c6:9c:f1:d6:14:f2:08:c1:5e:19:
                    0f:fc:64:b0:e5:7a:3c:e1:22:19:27:88:4c:b1:27:
                    c6:65:10:c2:65:13:0b:e0:49:d4:11:0a:42:58:11:
                    bc:8f:66:f7:c7:26:20:ba:d1:8f:2b:6a:c0:1f:a6:
                    ca:d7:6c:71:9c:25:68:a6:af:12:8c:49:2c:12:ba:
                    f3:e0:0d:1a:c8:19:a2:65:79:a0:8a:15:27:20:a0:
                    0d:95:29:58:00:60:aa:4e:8c:5a:a4:39:93:d2:fa:
                    00:05:64:c6:71:97:36:c6:81:d7:21:2c:8f:b0:7f:
                    b1:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:FB:6F:2B:E4:43:15:0F:EE:6F:11:E3:D7:AD:CD:8D:9D:C3:56:9C
            X509v3 Authority Key Identifier:
                keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/1-PtvK-RDFQ_ubxHj163NjZ3DVpw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  84.44.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:db:56:a6:ce:c8:54:d3:99:2a:3a:05:b9:ea:1b:32:40:d7:
         8e:ca:bf:3b:66:22:24:56:bb:a1:97:91:5c:3b:45:eb:21:3b:
         55:d2:71:1d:b3:a6:40:78:9e:40:c4:5b:c6:56:57:4e:a7:a8:
         44:b2:0e:03:82:23:5b:ba:a9:5f:1f:2a:59:40:bd:2f:2d:69:
         40:48:73:2b:c5:ea:64:48:0a:93:32:54:1d:9e:61:55:be:3b:
         b0:2e:c5:b8:a3:0d:d4:57:8e:b6:69:2a:47:dc:72:d2:36:2a:
         8a:75:a9:6b:82:92:21:d8:83:e6:55:ed:58:1d:fd:d5:aa:a3:
         32:d3:37:ff:52:cf:25:37:85:67:b3:22:6d:c4:ec:0e:8e:f2:
         48:c9:5b:45:23:a8:02:b2:e9:f1:48:cd:61:22:f5:ac:e2:9e:
         c9:70:fc:d7:77:2b:82:84:6f:c8:2e:83:13:c4:bf:4a:cb:e0:
         f4:3a:4f:ef:fe:2d:93:2c:da:37:10:c7:df:2c:42:ff:df:5d:
         86:0c:bc:17:85:69:0f:f6:68:0d:f5:d5:1c:a4:76:77:57:f7:
         06:36:7b:84:79:29:84:cb:07:92:6d:1a:cb:24:1e:dd:40:92:
         b4:e0:75:4a:3d:18:9f:3e:0d:00:25:89:59:5d:6a:0f:e1:4d:
         e4:6d:98:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:56 2024 by rpki-client on console-fra.rpki-client.org