Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/Rc64DoCdHn9IRlI2Nfk9ZOxiUZw.roa
File:                     Rc64DoCdHn9IRlI2Nfk9ZOxiUZw.roa (raw, json)
Hash identifier:          Mu/i6Wyk4PFR6zbOm1LsxnPb1FL63o94fGJ/JAU2/kg=
Subject key identifier:   45:CE:B8:0E:80:9D:1E:7F:48:46:52:36:35:F9:3D:64:EC:62:51:9C
Certificate issuer:       /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial:       0182749CB48904C2C97750395029BFA068F6
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/Rc64DoCdHn9IRlI2Nfk9ZOxiUZw.roa
Signing time:             Sat 06 Aug 2022 19:23:23 +0000
ROA not before:           Sat 06 Aug 2022 19:23:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206065
IP address blocks:        213.176.112.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:74:9c:b4:89:04:c2:c9:77:50:39:50:29:bf:a0:68:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
        Validity
            Not Before: Aug  6 19:23:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=45ceb80e809d1e7f4846523635f93d64ec62519c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:31:43:a9:3d:1d:0f:b8:78:82:ab:c9:98:86:
                    8d:69:47:7f:6c:e7:49:0c:1b:52:ef:4c:4f:8a:9c:
                    41:a5:f2:0c:ca:23:19:d1:cf:94:7d:4c:4f:51:56:
                    07:fe:93:3b:a7:14:ec:a7:f7:74:ed:bb:06:39:bd:
                    c6:45:a1:58:f0:b4:ce:88:a5:70:92:d3:d0:54:f7:
                    19:3d:54:bf:53:fb:9d:d7:eb:14:95:32:40:80:d8:
                    dc:58:58:58:a4:7e:ae:da:40:4d:01:39:5b:7a:30:
                    cd:74:e3:28:cc:a6:c0:f4:4e:ee:4e:c3:6a:ce:5f:
                    0e:5f:10:51:b6:59:62:5f:89:bb:90:87:b5:04:14:
                    f7:8a:29:7c:1b:7b:bf:0f:e2:d4:62:58:7c:87:81:
                    a4:5e:25:52:d1:93:65:26:ea:76:24:96:f8:21:9e:
                    d1:93:35:f2:30:cb:26:82:ec:64:d3:78:6b:cc:1a:
                    c4:2d:4a:05:69:19:3c:85:ad:e4:29:cb:35:cb:d0:
                    16:d0:fc:93:75:40:3d:83:58:ac:e0:33:8c:70:35:
                    e8:8e:b9:fd:69:1e:9b:63:e5:e3:0a:a2:53:d1:db:
                    07:21:52:d3:e1:f1:4c:d1:a8:b9:bf:55:4c:d3:84:
                    74:36:3b:5d:03:85:ed:b6:7b:6e:03:c8:e3:b5:96:
                    8e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:CE:B8:0E:80:9D:1E:7F:48:46:52:36:35:F9:3D:64:EC:62:51:9C
            X509v3 Authority Key Identifier:
                keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/Rc64DoCdHn9IRlI2Nfk9ZOxiUZw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.176.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3b:52:dc:b4:db:79:cf:57:79:8b:fe:16:cc:a6:ea:34:7b:61:
         fb:98:19:5c:5e:08:73:70:89:7e:6b:ed:58:4d:e1:75:29:14:
         13:9e:2b:6f:96:70:02:43:3e:d3:8d:ab:90:d2:0d:c3:b8:28:
         5e:c6:02:2d:06:54:4b:3e:b0:e5:4a:da:33:81:f6:8c:d8:35:
         0f:0c:c1:85:11:69:b6:bd:ee:b9:5b:b0:9c:3d:f7:ed:6f:b3:
         78:75:86:0b:18:50:54:33:01:2f:33:aa:35:dc:21:81:ca:97:
         88:1c:3e:31:4e:08:5f:02:de:a6:65:12:3e:8d:57:02:25:54:
         b5:4f:49:11:40:e0:1e:8d:e9:65:27:8d:60:ca:1f:e3:29:b5:
         43:47:a8:ea:1b:cd:ef:11:30:fb:99:8e:2e:74:d7:b6:fc:88:
         96:a8:50:78:be:fa:b2:10:09:ba:6b:c8:07:0a:15:ad:c6:57:
         45:9d:7d:c4:a2:c8:b3:14:6b:5f:f7:30:9d:10:10:b1:6f:9d:
         5c:eb:08:59:19:05:c1:48:d7:d4:be:a4:f2:bd:57:38:f2:b1:
         58:f2:91:b5:14:62:87:60:62:9f:10:bf:49:73:24:9a:c2:de:
         28:08:dc:67:72:6a:39:5f:5c:23:b3:18:11:da:68:89:27:4c:
         c3:b6:da:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:29 2024 by rpki-client on console-ams.rpki-client.org