Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/DgbdOuFeNSsmiB723ddp4oLJCTU.roa
File:                     DgbdOuFeNSsmiB723ddp4oLJCTU.roa (raw, json)
Hash identifier:          TyV7z53YQJj8e5u8POemhqeCUR00Vvgr9PvLPWoHHUs=
Subject key identifier:   0E:06:DD:3A:E1:5E:35:2B:26:88:1E:F6:DD:D7:69:E2:82:C9:09:35
Certificate issuer:       /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial:       01827C9A00ED970B856453B4CE2176AD23A2
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/DgbdOuFeNSsmiB723ddp4oLJCTU.roa
Signing time:             Mon 08 Aug 2022 08:37:23 +0000
ROA not before:           Mon 08 Aug 2022 08:37:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     34353
IP address blocks:        81.181.13.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:7c:9a:00:ed:97:0b:85:64:53:b4:ce:21:76:ad:23:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
        Validity
            Not Before: Aug  8 08:37:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0e06dd3ae15e352b26881ef6ddd769e282c90935
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:7f:10:64:3b:b7:8b:93:a4:2c:3b:16:d0:10:
                    24:56:12:95:fb:4d:b0:9d:53:ad:75:1e:fb:23:92:
                    f4:3f:da:4b:fb:2b:fc:90:a5:2c:be:0b:fd:4c:10:
                    ac:6c:21:be:e9:1b:af:e4:ca:2f:0a:bf:27:19:81:
                    c9:39:31:17:bd:a3:e4:20:fd:d6:b9:a0:8d:dd:21:
                    ce:5b:21:cb:8b:ab:0c:38:68:f5:45:d1:2a:e4:b0:
                    ac:2d:eb:40:08:56:88:61:25:71:29:9b:39:9a:f1:
                    3a:02:ef:8f:80:30:70:8a:1f:71:7c:fe:41:d6:40:
                    f5:36:e5:7d:97:cc:19:bb:20:52:57:e5:75:49:3b:
                    3c:21:95:96:d4:7a:cc:5d:ec:08:f7:56:dc:04:6d:
                    e4:d6:7b:67:d3:a9:de:13:56:99:99:d7:87:3c:9b:
                    0e:43:c1:ec:21:a0:e6:97:2d:62:b8:03:ad:a0:92:
                    2b:42:58:7d:44:0f:2a:da:1e:11:92:90:42:36:ea:
                    ad:de:18:ed:47:a2:00:7f:1a:a4:c8:29:11:a2:59:
                    53:09:15:79:87:48:2a:c9:06:4e:36:08:5f:6a:a3:
                    39:98:0a:64:98:63:ec:b7:02:1a:63:a2:1f:6a:76:
                    77:2f:2a:80:7b:ed:8b:02:2a:87:57:3a:99:ed:70:
                    19:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:06:DD:3A:E1:5E:35:2B:26:88:1E:F6:DD:D7:69:E2:82:C9:09:35
            X509v3 Authority Key Identifier:
                keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/DgbdOuFeNSsmiB723ddp4oLJCTU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.181.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:73:47:59:5f:0f:96:66:33:59:7b:ff:c7:3a:eb:66:41:9a:
         a9:d4:05:b5:a0:bd:a3:27:bc:62:47:54:74:09:05:6c:95:83:
         a3:3d:74:93:40:8d:7b:dc:1f:be:49:e7:df:aa:b5:b9:7c:e8:
         34:9a:98:b2:57:cc:6e:a5:f7:b2:fd:ba:53:70:ee:64:54:cc:
         79:67:6a:3b:de:9d:32:eb:6d:e1:0d:a2:08:73:ee:76:e0:cf:
         89:a5:39:c3:b5:d6:f5:04:aa:87:3c:c7:95:3d:9b:82:7b:2c:
         88:dd:8a:3c:78:d6:ea:c9:a3:bd:5a:b4:83:9a:cd:7d:d2:10:
         72:7a:7b:13:3f:50:69:cd:0e:3c:44:52:3b:4d:c3:3e:97:81:
         0b:05:18:06:8d:de:ac:29:ce:b5:a7:04:5c:4f:74:ee:57:5b:
         d3:93:6a:aa:8b:c7:3c:33:e0:66:28:7e:c0:fe:2f:5f:86:4d:
         38:0b:cd:7a:72:ea:b6:c0:2e:3e:c6:f6:c7:67:98:7e:0f:83:
         1e:fc:9f:71:b6:cc:88:54:3c:f4:c4:02:56:23:ce:da:bf:bd:
         03:fc:30:4a:fc:9a:c6:17:7e:b2:a3:81:90:fd:1a:6e:e0:fa:
         5a:ae:f5:9d:46:d4:5b:b0:79:16:cd:eb:81:b3:6c:ae:51:a5:
         3f:d4:89:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:21 2024 by rpki-client on console-fra.rpki-client.org