Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/oywIYLO7VFi2po0Bm5Op0Bhub_Q.roa
File:                     oywIYLO7VFi2po0Bm5Op0Bhub_Q.roa (raw, json)
Hash identifier:          oIejc9Di8p64bXNbP6lWmgvyLhfvg4op44kzreCNvaA=
Subject key identifier:   A3:2C:08:60:B3:BB:54:58:B6:A6:8D:01:9B:93:A9:D0:18:6E:6F:F4
Certificate issuer:       /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial:       04864CAB
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/oywIYLO7VFi2po0Bm5Op0Bhub_Q.roa
Signing time:             Wed 02 Mar 2022 10:42:14 +0000
ROA not before:           Wed 02 Mar 2022 10:42:14 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     201617
IP address blocks:        148.81.230.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75910315 (0x4864cab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
        Validity
            Not Before: Mar  2 10:42:14 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a32c0860b3bb5458b6a68d019b93a9d0186e6ff4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b9:fc:04:f1:32:31:4a:f4:c7:e7:c6:57:78:
                    ea:a3:70:4e:ae:49:4e:2a:2f:06:bd:17:f3:ee:b9:
                    df:4d:ee:84:0a:40:d9:be:6a:8d:93:f4:21:38:d8:
                    30:1c:76:82:e1:3b:75:51:bf:1c:4f:a4:9d:1a:8d:
                    bb:36:25:58:c0:99:79:c2:2b:32:77:32:70:fd:96:
                    b0:cd:88:47:32:71:d4:d2:43:95:46:d5:6f:db:67:
                    38:14:20:54:0d:7a:19:79:a4:49:1c:23:f1:62:dc:
                    d9:87:33:de:e8:fc:af:f5:ef:40:d8:d6:54:ac:76:
                    f2:93:ef:3e:24:66:02:fe:0f:1f:78:31:5e:0d:51:
                    03:6b:b1:3c:4b:31:07:79:cf:cf:89:55:06:ab:f2:
                    13:47:a3:7a:86:af:1a:f6:17:74:98:16:96:65:95:
                    e7:68:9c:28:ef:28:95:ec:9e:4f:c1:35:58:18:a0:
                    75:19:be:e4:d3:bb:41:d1:b4:43:0d:62:a1:cb:08:
                    75:d3:46:a6:ec:80:46:e7:90:3a:fc:a6:59:10:61:
                    49:5f:6c:22:fa:92:17:2f:13:e6:11:7c:0d:89:94:
                    03:91:e4:9e:06:ec:7b:50:f5:29:62:e2:58:02:72:
                    d3:e7:00:0c:cc:4e:93:0a:cb:0f:0f:85:28:1b:df:
                    7a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:2C:08:60:B3:BB:54:58:B6:A6:8D:01:9B:93:A9:D0:18:6E:6F:F4
            X509v3 Authority Key Identifier:
                keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/oywIYLO7VFi2po0Bm5Op0Bhub_Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.81.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:b0:38:ac:af:e7:ba:ee:f0:ff:50:19:5f:6f:6d:f5:13:8b:
         d6:ea:89:0a:81:21:62:39:c3:f2:84:78:55:1b:31:97:0a:d2:
         71:df:71:1b:df:15:04:2f:37:40:fb:48:52:d7:2f:29:49:e9:
         4c:2f:eb:8a:43:ca:6a:9c:8f:00:74:30:51:78:16:41:1e:e9:
         c5:50:77:44:14:c4:1e:c9:2d:36:0b:6e:b9:9d:78:4d:1c:6e:
         cc:98:d1:67:b6:a6:8d:76:b6:24:1a:cf:2b:37:3a:19:82:b2:
         37:05:21:05:6b:2c:9e:da:1c:b7:11:7d:dd:5d:aa:1a:a2:79:
         e7:c1:9d:51:ec:e2:76:45:6c:96:47:b4:d0:41:c0:86:e7:85:
         fa:c6:0a:24:6a:8a:2f:b6:4f:e6:b8:d9:d9:16:46:93:c9:c4:
         91:a3:e0:97:95:f5:29:15:47:15:19:06:c2:e9:a6:b5:78:ff:
         9e:b2:80:74:63:e9:32:58:14:2d:c2:bb:0b:ca:14:01:ef:92:
         ef:db:b0:fb:99:e7:19:28:31:52:02:b6:fd:d5:03:4c:cc:d7:
         29:b1:8c:fe:d8:54:d1:8f:ab:de:87:7b:1e:13:86:3f:e0:e8:
         6e:b7:1c:c7:0b:14:7d:c6:92:e6:26:33:c0:c4:ab:de:89:4a:
         ac:2f:23:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:40 2024 by rpki-client on console-fra.rpki-client.org