Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/LPdHUbxK1t9YUJ7F3bLk5zbQAA4.roa
File:                     LPdHUbxK1t9YUJ7F3bLk5zbQAA4.roa (raw, json)
Hash identifier:          k4vVAPyr0re2n88bEiyG8cZHNfSU0mayVC4hR4JLtjo=
Subject key identifier:   2C:F7:47:51:BC:4A:D6:DF:58:50:9E:C5:DD:B2:E4:E7:36:D0:00:0E
Certificate issuer:       /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial:       0B563CB6
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/LPdHUbxK1t9YUJ7F3bLk5zbQAA4.roa
Signing time:             Sat 01 Jan 2022 08:58:33 +0000
ROA not before:           Sat 01 Jan 2022 08:58:33 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     31645
IP address blocks:        212.12.154.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 190201014 (0xb563cb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
        Validity
            Not Before: Jan  1 08:58:33 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2cf74751bc4ad6df58509ec5ddb2e4e736d0000e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:86:b6:06:a4:ad:a2:5b:91:17:f7:61:36:4a:
                    14:aa:24:3b:7b:0e:9a:a5:c0:87:a9:06:ca:32:d7:
                    e8:2e:59:d2:46:3b:f8:ce:72:f9:a8:47:cb:f7:59:
                    4c:a0:31:04:d6:28:c1:c2:b0:88:07:b8:82:44:bf:
                    56:88:55:43:1a:8c:27:3b:d3:8a:cc:5f:04:f2:94:
                    f1:89:f0:b2:8f:36:8d:47:4e:5e:16:b7:c9:f2:e5:
                    c7:5c:ff:5a:9d:66:25:9f:3b:0d:8e:a0:17:83:90:
                    b7:a3:11:47:b4:24:1b:e0:12:f1:ca:39:64:56:a5:
                    b2:34:ac:ec:52:8a:2a:a0:a1:43:99:2a:dc:15:39:
                    fb:60:8a:dd:7f:43:c3:6e:93:3c:18:2a:f8:d6:d1:
                    8c:f5:f0:cb:61:2c:d7:a0:47:f2:8f:f2:0d:26:8d:
                    13:4d:7f:ff:27:a6:c1:2a:8b:dd:fe:72:45:73:65:
                    1f:c0:d7:3d:f6:9a:71:4b:36:10:9a:24:1b:29:79:
                    cb:60:55:71:db:1a:de:dd:dc:af:b9:ba:94:ee:ad:
                    da:43:ca:57:42:a8:48:4a:0c:0d:e2:3e:10:b4:da:
                    59:8c:ad:00:51:fc:19:7b:5f:90:6b:ac:a2:e9:a6:
                    cd:7d:aa:87:2b:23:6c:3c:3d:a4:d0:d6:d5:42:9f:
                    9d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:F7:47:51:BC:4A:D6:DF:58:50:9E:C5:DD:B2:E4:E7:36:D0:00:0E
            X509v3 Authority Key Identifier:
                keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/LPdHUbxK1t9YUJ7F3bLk5zbQAA4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.12.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:89:32:de:5f:1e:32:b4:a6:ec:bb:88:3e:dc:18:d0:37:76:
         91:09:5a:cf:73:b5:14:3c:66:93:0a:2a:b9:89:dd:8f:af:b8:
         60:ad:73:3c:88:75:e8:83:0d:8b:37:7d:55:14:bf:8d:23:dd:
         7d:39:02:9a:cb:36:20:f2:eb:53:b0:b2:a0:e1:d0:60:40:8f:
         f6:62:79:c1:15:4e:d8:eb:51:d8:e7:4c:47:25:d6:b9:dc:c4:
         2b:7f:a7:43:aa:a6:de:12:45:40:95:c2:b3:aa:a5:d5:c5:f9:
         b5:7f:50:68:b8:07:d4:02:a0:48:e1:46:50:47:4b:34:2b:ad:
         98:60:5e:0c:3f:a5:ad:87:cb:b6:67:28:9a:61:a9:de:17:2f:
         73:84:62:b0:15:54:02:14:69:0b:c5:31:03:f6:b3:ad:b3:7b:
         d7:2f:83:f9:00:ef:40:ef:13:c6:8b:96:0c:6f:d4:d4:b9:74:
         df:c5:67:e6:ff:1a:54:00:0b:74:c6:29:19:8e:27:06:59:91:
         5c:6d:a0:d9:fa:eb:71:86:40:e0:fd:26:ab:25:05:a8:57:13:
         7e:34:00:f8:31:2d:a1:6b:25:57:36:9c:4c:f5:37:9f:d5:53:
         a3:94:be:e3:bd:90:31:4f:59:eb:90:6f:b5:5c:db:fe:9d:f8:
         ad:52:69:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:56 2024 by rpki-client on console-fra.rpki-client.org