Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/L9qlNxxDfbsK120oIBEY0Nb5bDY.roa
File:                     L9qlNxxDfbsK120oIBEY0Nb5bDY.roa (raw, json)
Hash identifier:          Fitw7ozuO3yWnqR5MWFlY0Q/Xf8Kcgm7hYQcNaB3kzY=
Subject key identifier:   2F:DA:A5:37:1C:43:7D:BB:0A:D7:6D:28:20:11:18:D0:D6:F9:6C:36
Certificate issuer:       /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial:       1B3F66E3
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/L9qlNxxDfbsK120oIBEY0Nb5bDY.roa
Signing time:             Wed 25 May 2022 11:05:15 +0000
ROA not before:           Wed 25 May 2022 11:05:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     34353
IP address blocks:        81.181.13.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 457139939 (0x1b3f66e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
        Validity
            Not Before: May 25 11:05:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2fdaa5371c437dbb0ad76d28201118d0d6f96c36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:15:3c:47:1b:e9:63:87:8c:a3:72:b0:6f:04:
                    4a:52:67:a1:47:fa:46:09:e9:84:69:d4:af:a3:f9:
                    4f:74:be:5c:b4:0c:47:7a:33:68:08:40:3d:2f:35:
                    29:c7:94:6c:82:5b:d0:db:8c:66:a2:3a:94:0e:06:
                    1c:cb:d4:ba:d3:c9:14:d3:9e:40:c2:87:5d:96:01:
                    3d:48:f2:6d:04:68:c2:fb:73:a6:97:dc:17:ff:e2:
                    92:d5:c7:7d:9c:16:87:a4:c9:83:29:cc:3f:ec:39:
                    97:41:d8:1d:e7:ca:63:04:b9:49:ce:07:18:ac:7b:
                    0d:57:e9:b2:54:4d:6f:7e:97:8b:68:5e:23:13:a5:
                    bc:cb:bf:6b:8c:7e:61:4a:d4:39:42:be:d8:ef:86:
                    7d:32:3c:36:16:5e:8a:60:fe:27:b6:ae:e9:12:53:
                    a6:11:b0:f7:17:87:24:cc:52:ab:04:6c:db:22:74:
                    3d:55:9b:ea:36:32:45:d7:f8:a4:62:08:a8:40:c7:
                    bb:4d:03:a6:26:92:bb:19:e3:57:e3:09:aa:8d:a6:
                    2e:90:39:98:ea:2e:86:68:47:0a:f4:54:a1:63:54:
                    8a:b1:b2:39:81:d3:df:e3:5a:1a:bf:79:64:c3:e3:
                    60:cb:d2:c1:f5:4c:bd:7f:37:d6:2b:30:17:ee:fb:
                    b2:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:DA:A5:37:1C:43:7D:BB:0A:D7:6D:28:20:11:18:D0:D6:F9:6C:36
            X509v3 Authority Key Identifier:
                keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/L9qlNxxDfbsK120oIBEY0Nb5bDY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.181.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:86:e7:58:98:f7:ec:84:31:1c:75:0b:0f:7e:07:24:d7:ee:
         02:48:d8:9f:e9:4d:c0:63:17:94:61:c4:3c:88:9c:ee:14:af:
         b6:64:e3:9f:e2:2c:91:70:62:06:c3:12:64:e9:99:56:54:36:
         a1:3c:a7:8e:99:d2:a6:d0:e4:11:23:e2:0e:cf:aa:b5:a3:ca:
         0c:18:5c:a6:80:cd:4f:ae:38:63:a4:e0:df:ee:dd:6e:fb:15:
         54:5e:42:55:9f:8c:db:6f:ee:2f:d5:0b:9e:ef:2a:fe:ce:85:
         cd:f1:b6:44:65:8a:10:b1:67:b6:28:91:fd:09:65:a0:aa:57:
         de:e5:3f:9d:23:d3:f8:e0:e2:cb:c0:95:cc:eb:21:1c:23:3c:
         04:a7:12:7b:be:86:5c:65:14:fb:32:e3:5e:75:94:5b:c8:23:
         b6:14:7e:d0:18:2b:01:c9:35:e3:b0:b8:d5:af:51:bc:1b:b4:
         7b:32:73:c6:c5:9e:c8:58:ea:63:1b:a6:6b:7f:43:2a:e7:a6:
         b6:90:16:72:a6:5c:35:d8:5f:d7:44:06:a0:ba:4d:7f:28:59:
         3d:ba:c9:6b:4a:7b:4d:0a:66:d9:ef:8b:70:77:6f:84:e9:bc:
         e8:29:e8:be:48:d8:3a:7c:a4:3f:32:fb:ec:b6:bf:2e:56:f9:
         bf:f4:a9:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:04 2024 by rpki-client on console-ams.rpki-client.org