Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/ueWRnfFerJxsYNrJ4-_1bZ6s2y0.roa
File:                     ueWRnfFerJxsYNrJ4-_1bZ6s2y0.roa (raw, json)
Hash identifier:          4PvgJiiTWTdZ7VX5cSgv+aUt8/a5+khGCvziIZgJ7Tk=
Subject key identifier:   B9:E5:91:9D:F1:5E:AC:9C:6C:60:DA:C9:E3:EF:F5:6D:9E:AC:DB:2D
Certificate issuer:       /CN=fd261d45319e8375187436da44bf5b9adb044a7f
Certificate serial:       0183129B2EDD97DBD3EA2C32FB20BF4EA42C
Authority key identifier: FD:26:1D:45:31:9E:83:75:18:74:36:DA:44:BF:5B:9A:DB:04:4A:7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_SYdRTGeg3UYdDbaRL9bmtsESn8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/ueWRnfFerJxsYNrJ4-_1bZ6s2y0.roa
Signing time:             Tue 06 Sep 2022 11:41:43 +0000
ROA not before:           Tue 06 Sep 2022 11:41:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207733
IP address blocks:        178.250.134.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:12:9b:2e:dd:97:db:d3:ea:2c:32:fb:20:bf:4e:a4:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd261d45319e8375187436da44bf5b9adb044a7f
        Validity
            Not Before: Sep  6 11:41:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b9e5919df15eac9c6c60dac9e3eff56d9eacdb2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:4e:cd:d9:e9:fd:7b:d4:c8:cd:16:f7:d7:e9:
                    c8:dd:de:f0:c1:db:34:35:47:bd:e7:b7:8e:5d:4c:
                    34:42:d9:e9:06:1f:ad:5f:f7:50:51:9e:9c:7e:73:
                    8d:0a:98:30:cb:d3:f1:02:48:97:29:f2:13:62:bc:
                    96:47:c8:56:09:cb:80:3e:3c:05:a3:f9:d4:46:74:
                    fd:d0:8b:93:fa:d1:ac:f2:a1:f0:e4:33:3a:f2:1c:
                    80:8c:09:a9:a9:d8:9b:67:88:37:62:3d:9d:a9:52:
                    4e:82:67:73:b7:d8:e8:33:49:1c:40:23:a9:11:2c:
                    ac:b8:5d:82:da:e0:ea:d6:38:93:98:33:85:78:d8:
                    44:68:9a:cd:69:73:03:54:70:36:b1:7e:d0:c0:1c:
                    0e:89:ab:27:7d:22:26:83:3b:55:d5:ba:e3:c6:d7:
                    7c:7e:e7:5a:77:e8:53:cb:c2:0f:db:bf:c8:16:56:
                    7c:a0:ec:c4:89:e8:b5:5e:4e:01:56:75:6e:fd:76:
                    36:3c:23:64:24:78:44:00:7d:79:ec:e0:03:13:4b:
                    6c:2b:06:f9:98:ea:58:f3:a7:6a:df:53:48:af:37:
                    cd:a8:ab:a7:32:c4:86:a3:52:fe:23:b8:70:49:2f:
                    9d:0c:9c:eb:e1:af:ad:6d:be:8c:e1:49:78:6f:25:
                    7f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:E5:91:9D:F1:5E:AC:9C:6C:60:DA:C9:E3:EF:F5:6D:9E:AC:DB:2D
            X509v3 Authority Key Identifier:
                keyid:FD:26:1D:45:31:9E:83:75:18:74:36:DA:44:BF:5B:9A:DB:04:4A:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_SYdRTGeg3UYdDbaRL9bmtsESn8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/ueWRnfFerJxsYNrJ4-_1bZ6s2y0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.250.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:e1:ae:64:c8:b9:02:17:23:78:a2:19:19:42:d1:2b:bd:59:
         b8:61:c8:3b:f9:a3:93:5c:2f:2f:e6:6a:5c:9f:ea:16:0f:04:
         3e:f0:2b:86:3f:d8:f7:a7:6a:08:a1:81:94:b7:6f:85:31:2c:
         f4:46:93:1d:4b:9d:fc:77:81:0c:88:ca:7c:0f:ae:7d:32:52:
         40:c2:68:6d:92:29:7a:c0:01:9b:ed:9a:0f:58:17:38:1f:e6:
         b6:1a:c0:ee:9c:cd:fc:27:17:80:6c:39:ba:2a:4a:54:e0:05:
         3d:05:30:77:c7:a8:3d:f2:0b:b2:56:36:dd:c4:2d:13:4b:a8:
         88:3d:fd:64:34:ad:88:7e:9b:f4:6e:65:52:c2:ab:45:42:96:
         13:13:3b:1a:a8:2d:23:a4:51:3b:f1:c1:38:e6:a7:8e:a2:1b:
         d9:0d:e2:4e:dd:f8:43:38:53:bc:11:64:6c:f3:30:14:ad:c3:
         e9:4d:78:10:20:31:a4:c8:dd:fd:04:c7:63:86:25:ab:68:8d:
         7f:05:17:18:13:98:c8:e7:9e:d8:0c:c7:bd:46:4f:0c:89:d7:
         11:02:88:f9:3e:2b:7e:9c:60:fa:fa:8a:c9:5d:1b:35:92:58:
         38:ca:f5:0d:ff:46:b8:7c:d6:66:15:5b:29:d6:79:cb:86:18:
         54:20:aa:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:10 2024 by rpki-client on console-fra.rpki-client.org