Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/eAIlkDyIg_PrH9dC1v_a-N3_ZdA.roa
File:                     eAIlkDyIg_PrH9dC1v_a-N3_ZdA.roa (raw, json)
Hash identifier:          IS6Cw9S4pY4lgjMF7KHvemkn2YOHe7qMgZ5RqnnhBOo=
Subject key identifier:   78:02:25:90:3C:88:83:F3:EB:1F:D7:42:D6:FF:DA:F8:DD:FF:65:D0
Certificate issuer:       /CN=c83670987d01d41ee2b564698c8271f50dee4ce1
Certificate serial:       0207C2
Authority key identifier: C8:36:70:98:7D:01:D4:1E:E2:B5:64:69:8C:82:71:F5:0D:EE:4C:E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/eAIlkDyIg_PrH9dC1v_a-N3_ZdA.roa
Signing time:             Thu 10 Feb 2022 08:10:19 +0000
ROA not before:           Thu 10 Feb 2022 08:10:19 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212097
IP address blocks:        185.230.102.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 133058 (0x207c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c83670987d01d41ee2b564698c8271f50dee4ce1
        Validity
            Not Before: Feb 10 08:10:19 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=780225903c8883f3eb1fd742d6ffdaf8ddff65d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b9:13:18:97:41:ad:97:22:05:dc:15:5b:9c:
                    0f:25:0a:4d:20:d4:6f:b0:2b:06:aa:13:5f:1f:ea:
                    81:36:0d:ec:87:af:5f:8c:6d:49:54:8a:77:24:eb:
                    2e:a2:e7:1a:7a:3a:62:66:ec:d8:c1:58:ef:3f:c3:
                    25:2e:8f:a7:ed:ec:23:21:32:12:7a:e9:54:5c:c0:
                    66:b7:3b:f7:85:d8:dc:1f:88:e6:17:53:d3:1b:f4:
                    73:09:43:d9:34:a3:11:3b:0e:85:b4:8b:45:f6:f7:
                    93:86:72:8d:a7:46:76:c2:1a:7e:ac:d0:fd:34:52:
                    91:6a:7b:e3:36:3d:8e:17:c7:af:7f:74:11:69:52:
                    62:30:7e:aa:65:1a:4d:73:c1:cd:82:f3:b1:e1:2a:
                    da:ae:04:61:c5:3e:b5:bf:66:df:1f:67:cd:cb:35:
                    9c:77:f6:2c:19:17:61:3b:50:e1:51:b3:59:bc:e8:
                    37:d6:dd:65:1b:76:78:b6:f2:0e:67:cd:52:a5:78:
                    23:a8:43:a8:60:8d:d4:e3:26:58:23:61:ba:04:c7:
                    d5:f4:57:b3:05:f3:8f:fe:7e:8f:ba:ed:d2:87:59:
                    83:e1:41:8f:a0:8c:53:60:62:54:0e:db:d0:d9:1a:
                    c0:d9:c7:f4:4c:6e:c1:c9:9f:47:77:85:ef:2a:f7:
                    b3:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:02:25:90:3C:88:83:F3:EB:1F:D7:42:D6:FF:DA:F8:DD:FF:65:D0
            X509v3 Authority Key Identifier:
                keyid:C8:36:70:98:7D:01:D4:1E:E2:B5:64:69:8C:82:71:F5:0D:EE:4C:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/eAIlkDyIg_PrH9dC1v_a-N3_ZdA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.230.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:b4:75:ab:1d:91:9c:fc:94:f0:31:42:0f:9f:62:69:5d:38:
         f4:d9:95:fb:23:20:12:6a:26:01:2a:84:b9:35:bf:0d:56:63:
         a1:59:8d:3b:ed:dc:c4:a3:0a:44:7c:07:6d:84:6d:16:5c:e6:
         48:c7:31:c4:08:0e:5b:c8:6c:15:b1:b2:20:37:f3:f3:ed:8f:
         92:25:ff:58:f7:8d:75:1e:ea:f5:1d:9c:93:6a:1f:99:8b:e7:
         49:b9:47:7d:00:75:31:b2:ca:9b:4e:41:32:0f:a7:2c:50:3e:
         c0:da:48:43:1b:cb:01:f0:bc:bb:94:c5:33:74:5e:e1:7d:3f:
         a9:54:a9:a3:51:8f:fd:4e:6c:77:f5:51:28:b3:19:8a:6c:2c:
         ce:94:90:2a:5e:c6:80:e5:31:bd:33:84:ec:c1:80:09:75:01:
         f9:2c:93:40:af:a7:e1:ff:7a:36:58:6c:6f:7c:36:dc:4a:bc:
         11:1d:8a:31:42:8c:5c:56:7d:56:af:15:31:fd:72:44:39:44:
         f0:85:c2:fe:aa:b6:14:45:ab:a6:ff:75:75:2d:fb:fa:4e:67:
         30:68:73:42:82:83:82:8d:3d:ee:b7:3a:1f:c4:6a:6e:8c:61:
         98:a5:30:9f:a9:44:5a:60:c4:b1:d1:64:48:b7:c0:5f:0b:6a:
         66:79:4f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:21 2024 by rpki-client on console-fra.rpki-client.org