Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/Gfu3JATM8-jjKgnGpjZQ3g5GTgY.roa
File:                     Gfu3JATM8-jjKgnGpjZQ3g5GTgY.roa (raw, json)
Hash identifier:          1g8Oj7EDWm8DCP/RC5zKhnOwsQvst7dHUA9+TxIzW5k=
Subject key identifier:   19:FB:B7:24:04:CC:F3:E8:E3:2A:09:C6:A6:36:50:DE:0E:46:4E:06
Certificate issuer:       /CN=f71d4a4374df222ac3235b9602206d96bf1dac82
Certificate serial:       2DF910A2
Authority key identifier: F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/Gfu3JATM8-jjKgnGpjZQ3g5GTgY.roa
Signing time:             Sat 01 Jan 2022 14:58:14 +0000
ROA not before:           Sat 01 Jan 2022 14:58:14 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210278
IP address blocks:        51.186.0.0/15 maxlen: 15
                          51.190.0.0/15 maxlen: 15
                          51.182.0.0/15 maxlen: 15

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 771297442 (0x2df910a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f71d4a4374df222ac3235b9602206d96bf1dac82
        Validity
            Not Before: Jan  1 14:58:14 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=19fbb72404ccf3e8e32a09c6a63650de0e464e06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2d:26:71:bf:ce:e3:a9:af:0f:f8:4d:35:9d:
                    75:86:6a:98:ef:a3:dc:ef:9c:c4:a8:86:10:eb:e5:
                    bf:98:51:ce:d6:80:74:16:8e:b6:46:d9:e2:92:5d:
                    e2:02:47:35:2f:f9:a4:fc:4a:37:e4:a4:b3:47:6a:
                    e6:92:58:46:e3:14:88:bd:24:fd:c8:bb:93:98:0a:
                    ec:09:ef:93:40:b9:71:bd:21:92:76:31:44:ed:ed:
                    e1:96:b1:4a:5a:27:8b:84:b8:f4:33:7b:0d:14:b6:
                    bd:5f:27:40:e0:2c:9a:e0:ce:f1:20:12:47:28:3c:
                    de:2c:b2:80:71:5c:6b:61:32:6c:d8:25:98:86:01:
                    bf:a5:1a:eb:cf:87:20:64:5a:4d:3c:b6:51:74:39:
                    48:11:8e:30:04:2f:c0:61:bf:f8:59:d9:28:1f:15:
                    f7:b1:7e:80:18:b6:6f:40:a5:b1:61:5a:ba:87:78:
                    fa:78:43:28:0e:25:12:2f:e0:b8:1a:f2:ea:ba:32:
                    4b:10:8e:8b:fe:d2:58:5a:2f:f0:35:3d:ba:9d:2a:
                    5e:d4:c2:69:ef:94:07:80:8d:88:53:f1:ba:6f:8a:
                    d4:44:b5:08:02:2f:b3:80:38:b3:51:2d:d5:f1:65:
                    07:04:9b:4d:85:f9:b0:c8:e4:41:ad:c1:98:44:9b:
                    ca:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:FB:B7:24:04:CC:F3:E8:E3:2A:09:C6:A6:36:50:DE:0E:46:4E:06
            X509v3 Authority Key Identifier:
                keyid:F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/Gfu3JATM8-jjKgnGpjZQ3g5GTgY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  51.182.0.0/15
                  51.186.0.0/15
                  51.190.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         49:82:b6:56:56:d8:dd:9e:5a:eb:ff:9f:fa:a2:24:5d:cc:c0:
         a0:38:21:2c:30:f4:3e:ab:d6:79:99:0f:87:f5:1b:5d:61:b2:
         7e:3f:37:24:3b:3e:80:de:c0:f0:ef:96:da:cd:e6:10:a7:17:
         c1:d9:5f:f8:aa:df:28:f0:4e:8e:02:2c:d9:7e:a8:3e:10:be:
         ee:f5:5b:a2:b2:f1:39:66:f2:77:c2:ed:3a:04:67:be:af:83:
         5a:86:9e:66:c8:c1:8d:21:8e:1c:49:c7:22:90:4e:ec:24:60:
         7d:02:ba:ec:ae:fb:64:dd:da:26:ad:f5:0a:2e:ea:a0:3e:78:
         20:af:4b:95:f1:76:3b:26:ac:94:7a:67:69:e3:dc:7d:2d:df:
         ae:9a:b9:97:d9:7c:f8:76:30:d7:60:a9:4c:7c:c8:73:ab:f7:
         db:59:ae:c8:37:87:bd:97:cc:e4:4f:28:83:c9:ed:51:da:21:
         cd:09:42:9e:74:c5:ea:66:3f:c5:65:c7:1f:ba:11:9f:0d:8e:
         78:53:0a:b1:77:71:89:dd:a7:51:96:f3:5b:a2:1d:03:04:26:
         a1:6f:0e:d0:cf:2c:52:2b:9c:29:4f:ca:a5:03:7d:31:66:99:
         56:82:ef:97:07:82:e2:11:ac:ab:ed:00:3f:1b:09:17:bf:fc:
         4f:4b:7c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:06 2024 by rpki-client on console-ams.rpki-client.org