Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/7XpMYW8VPpw-yPVSneIozCYcu0A.roa
File:                     7XpMYW8VPpw-yPVSneIozCYcu0A.roa (raw, json)
Hash identifier:          dhVDgtzc8xkbx8EB78ezZVfh+6n2pxkbgOZUwmehdes=
Subject key identifier:   ED:7A:4C:61:6F:15:3E:9C:3E:C8:F5:52:9D:E2:28:CC:26:1C:BB:40
Certificate issuer:       /CN=e6135d639768a3a63ed9c5ff40af5ed01df741cb
Certificate serial:       03931F3B
Authority key identifier: E6:13:5D:63:97:68:A3:A6:3E:D9:C5:FF:40:AF:5E:D0:1D:F7:41:CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/7XpMYW8VPpw-yPVSneIozCYcu0A.roa
Signing time:             Wed 23 Mar 2022 14:58:28 +0000
ROA not before:           Wed 23 Mar 2022 14:58:28 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203714
IP address blocks:        176.53.180.0/23 maxlen: 23
                          176.53.182.0/23 maxlen: 23
                          185.207.2.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59973435 (0x3931f3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6135d639768a3a63ed9c5ff40af5ed01df741cb
        Validity
            Not Before: Mar 23 14:58:28 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ed7a4c616f153e9c3ec8f5529de228cc261cbb40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a9:2f:b0:6b:c2:27:11:7c:06:8b:5b:90:91:
                    99:49:1e:6f:0a:73:ca:d9:95:63:db:5f:40:47:29:
                    fc:67:11:71:8d:9e:57:43:91:be:0a:ee:a3:f3:6a:
                    7b:63:a4:03:4a:4a:be:56:e5:70:62:a2:21:86:76:
                    7c:2e:12:e9:a0:ae:bb:c0:6c:4e:f8:f9:bd:e0:81:
                    a7:ba:e6:06:16:f0:28:ae:54:b8:09:95:b8:e1:e1:
                    69:41:01:04:a3:84:fe:81:e9:58:e1:a2:8b:c5:95:
                    eb:92:e7:f2:2f:14:b7:b9:89:2a:ff:d4:5e:1b:6d:
                    6e:8c:96:be:cc:20:38:44:57:ce:09:ea:ac:5f:29:
                    d7:7a:db:1a:6a:fc:99:56:05:2b:ca:da:0a:5b:9a:
                    eb:96:e1:61:aa:de:88:3b:bb:fc:fe:32:62:7e:70:
                    a2:89:08:ea:8f:24:e1:70:8e:0e:79:b2:4c:52:e0:
                    b5:86:54:04:7b:d0:74:67:2b:31:0d:bc:79:f4:67:
                    80:21:d2:ab:a3:c1:0b:b9:3b:d8:a1:e5:63:39:27:
                    c0:12:8d:bc:f2:a7:70:c8:b5:e6:11:d3:f3:64:bb:
                    74:93:6d:f7:ca:96:94:2f:66:f3:2d:6d:ee:72:1b:
                    dc:bd:46:04:8c:47:75:1c:7d:92:3c:d6:bf:13:85:
                    60:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:7A:4C:61:6F:15:3E:9C:3E:C8:F5:52:9D:E2:28:CC:26:1C:BB:40
            X509v3 Authority Key Identifier:
                keyid:E6:13:5D:63:97:68:A3:A6:3E:D9:C5:FF:40:AF:5E:D0:1D:F7:41:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/7XpMYW8VPpw-yPVSneIozCYcu0A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.53.180.0/22
                  185.207.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:89:d4:cd:d8:ce:4d:0d:d6:2e:1d:80:6b:62:03:b3:e9:54:
         d3:d5:68:c7:b7:9d:a9:eb:08:76:75:49:93:f7:66:1e:61:3d:
         8a:8d:76:39:a5:db:c9:7d:3b:28:fe:b2:80:fa:3d:d2:a8:27:
         ab:61:1d:d8:34:bb:96:f2:b0:2d:29:8b:bc:2f:3f:13:f8:5a:
         d4:3f:04:85:2d:33:bd:fe:ed:01:3d:6b:b5:d3:2d:92:35:8a:
         0c:cd:d5:0b:30:77:d4:6d:29:5c:34:cd:ef:eb:2c:04:82:bc:
         2f:4f:9c:e1:ad:70:6b:86:4d:d2:64:3f:ba:93:44:e7:69:5c:
         0d:f3:4b:17:09:b2:6d:0d:a4:12:1e:55:e5:63:a1:c3:74:5a:
         e4:92:b4:93:f3:8b:49:b9:27:4d:43:93:d4:20:f8:02:ce:41:
         08:b1:67:1e:e8:be:b6:a4:68:83:07:4a:6c:86:d8:2a:21:c6:
         3e:55:19:90:7e:eb:c1:3f:f0:c5:7b:9c:18:dd:41:1f:92:d1:
         76:11:f3:63:0d:34:00:09:88:a5:d9:5f:ba:f5:71:c8:ae:56:
         54:b5:17:e4:9d:dc:5a:1e:1e:40:ad:3f:8a:09:4b:17:3a:3f:
         41:ad:41:6a:a6:82:8e:9b:2b:36:d1:90:5c:d2:d5:4c:d0:72:
         9b:89:d5:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:20 2024 by rpki-client on console-ams.rpki-client.org