Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/DpeN-kT-sBb5NtxBLgWtilEpZBs.roa
File:                     DpeN-kT-sBb5NtxBLgWtilEpZBs.roa (raw, json)
Hash identifier:          G59poXhIjPVRKlZxMkv+bj/6P1p6Kn0sgfBtnrHb6lI=
Subject key identifier:   0E:97:8D:FA:44:FE:B0:16:F9:36:DC:41:2E:05:AD:8A:51:29:64:1B
Certificate issuer:       /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial:       0B6E204E
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/DpeN-kT-sBb5NtxBLgWtilEpZBs.roa
Signing time:             Sat 01 Jan 2022 08:58:47 +0000
ROA not before:           Sat 01 Jan 2022 08:58:47 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     202557
IP address blocks:        31.145.140.0/24 maxlen: 24
                          212.98.242.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 191766606 (0xb6e204e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
        Validity
            Not Before: Jan  1 08:58:47 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0e978dfa44feb016f936dc412e05ad8a5129641b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d0:60:58:0b:0b:25:87:21:f4:3e:69:4a:98:
                    00:a7:1d:f7:09:09:d1:93:6b:fe:4b:f7:9b:99:d1:
                    32:fc:d0:d9:d5:7e:2b:17:6f:d2:45:eb:15:f9:3a:
                    9f:16:09:3e:a8:50:ed:36:f5:f5:e7:97:71:6e:45:
                    79:d1:ae:c4:08:35:e3:41:0c:4e:2b:77:79:93:12:
                    48:27:31:8a:b3:11:0e:eb:43:90:3e:ad:6d:d0:1a:
                    64:48:35:d7:65:47:51:cd:4b:5d:9a:eb:13:3c:a0:
                    81:b4:84:97:5e:23:ed:9d:b7:07:ba:03:c7:de:b3:
                    8d:0e:c3:c8:b2:1f:c5:9c:fb:50:ef:8d:be:bd:e1:
                    af:7b:45:e3:b5:67:2c:6a:6a:df:61:15:db:55:98:
                    7d:11:29:c0:e8:f6:5a:24:9f:73:af:ed:64:e0:b9:
                    70:ff:81:91:37:a4:c1:8f:42:97:86:8a:08:35:34:
                    dd:21:c0:b0:93:03:02:83:51:80:7c:b1:53:be:b7:
                    3b:cf:26:af:83:39:ad:b2:fa:92:d8:8a:33:d1:17:
                    a0:32:0c:62:e5:b3:90:8a:ea:87:83:b4:da:49:67:
                    e8:3f:ed:9b:25:7d:a0:fa:af:64:a6:74:c1:5f:56:
                    6b:87:5e:5c:9a:37:d6:d5:5b:3e:55:50:da:c0:1c:
                    96:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:97:8D:FA:44:FE:B0:16:F9:36:DC:41:2E:05:AD:8A:51:29:64:1B
            X509v3 Authority Key Identifier:
                keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/DpeN-kT-sBb5NtxBLgWtilEpZBs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.145.140.0/24
                  212.98.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:6f:60:4b:66:3d:8d:b2:77:fb:90:48:2f:e8:6d:5a:a4:14:
         95:bd:b0:69:6b:a4:86:70:c3:ff:53:e8:46:cc:5b:b7:58:66:
         e1:7c:c7:34:22:30:30:30:ba:52:d2:ff:b8:a8:a4:3d:09:59:
         c8:18:db:22:cc:a0:79:ba:51:d8:81:99:ed:fb:2d:54:b1:75:
         2d:9a:8e:5b:fb:69:1a:4f:d4:4c:55:c4:21:73:94:03:f2:f8:
         f5:45:e3:c8:6d:11:20:47:e1:ab:2a:be:fe:54:8f:e2:eb:53:
         34:b0:d7:66:ee:98:5e:ad:68:c4:bf:a9:f7:f8:5e:91:5a:0d:
         7f:bb:98:7c:44:4e:21:ad:9c:d2:ee:85:0a:89:b3:24:3a:b0:
         85:89:6f:27:5f:c5:cf:62:19:90:f4:9d:d3:dc:3c:b6:45:c3:
         dd:c0:1e:ac:28:b9:25:12:ce:af:ad:2f:5d:c7:9a:28:93:71:
         d3:09:4a:a2:84:18:57:7d:9f:22:61:a8:a1:47:6b:2a:f0:17:
         b0:df:d6:d8:b8:b3:e8:78:59:5c:a8:28:b0:9e:0e:50:16:3c:
         15:06:9d:2b:88:02:cf:6d:25:50:7d:f4:b1:0a:be:c4:b9:57:
         47:c0:8e:ef:b1:11:db:2b:dd:36:22:50:ea:df:56:d3:1b:f8:
         89:0b:a1:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:37 2024 by rpki-client on console-ams.rpki-client.org