Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/VezNFBW-Y-2tnk5So-yoTB-E68Y.roa
File:                     VezNFBW-Y-2tnk5So-yoTB-E68Y.roa (raw, json)
Hash identifier:          ZrqSJimdUh2YvbGYc66nUc49fbMxaODKe0Fz+XmXwt0=
Subject key identifier:   55:EC:CD:14:15:BE:63:ED:AD:9E:4E:52:A3:EC:A8:4C:1F:84:EB:C6
Certificate issuer:       /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial:       1C4E4C30
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/VezNFBW-Y-2tnk5So-yoTB-E68Y.roa
Signing time:             Sat 28 May 2022 10:08:13 +0000
ROA not before:           Sat 28 May 2022 10:08:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     43043
IP address blocks:        87.248.133.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 474893360 (0x1c4e4c30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
        Validity
            Not Before: May 28 10:08:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=55eccd1415be63edad9e4e52a3eca84c1f84ebc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b0:b8:ca:cd:cf:ce:aa:5f:c7:69:a8:be:bc:
                    af:be:3d:bc:df:04:c9:11:6f:4d:50:33:42:fb:ea:
                    7f:8e:83:0f:04:03:ed:23:2e:61:56:86:e5:9c:8b:
                    30:43:21:2b:7f:db:8e:14:a1:50:e8:1f:77:af:0d:
                    a1:d0:1c:83:bf:d8:1b:b8:8f:9b:50:b7:ec:fc:f0:
                    32:28:83:64:d8:f9:bc:65:f0:7f:f3:3d:89:24:b9:
                    b0:73:04:6f:c7:ad:2d:a7:c6:95:f5:5d:77:09:2a:
                    e6:54:c1:a1:11:e0:11:e4:33:83:83:a4:49:9b:57:
                    8e:2d:9f:e5:ea:62:cd:5f:a7:37:76:7f:68:d1:03:
                    09:42:73:5a:23:d7:62:0c:34:cd:d4:48:3a:a9:80:
                    94:35:fe:98:ee:70:e7:57:79:ef:51:c3:83:e2:cc:
                    a6:46:19:e9:03:fd:42:ac:e1:60:36:a9:9c:dd:b4:
                    5e:6b:1a:d5:92:40:85:0b:8a:2e:04:5a:fe:8d:8a:
                    9a:0e:98:5f:24:ff:c7:3d:e6:c0:05:a0:f8:0b:cc:
                    70:ac:ee:0d:5d:a0:eb:8a:03:7f:03:52:a0:a6:0c:
                    1e:37:64:e5:97:d9:9c:26:26:04:49:d6:36:eb:78:
                    03:40:17:bc:16:25:0c:30:4e:9f:fe:90:4d:6f:61:
                    c3:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:EC:CD:14:15:BE:63:ED:AD:9E:4E:52:A3:EC:A8:4C:1F:84:EB:C6
            X509v3 Authority Key Identifier:
                keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/VezNFBW-Y-2tnk5So-yoTB-E68Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.248.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:cd:fd:ce:88:41:ad:33:7f:a8:9e:52:43:0a:92:b6:9d:52:
         d0:8c:ba:b0:de:97:9b:60:98:9c:40:38:e5:9f:19:4b:b1:d2:
         20:a3:09:07:a6:77:5e:e3:57:03:24:c6:8a:1e:dc:64:77:dc:
         5a:d1:92:59:3d:88:50:0a:2d:7c:29:83:e9:da:c5:95:60:c7:
         05:c8:13:3e:0d:3d:b0:96:41:bb:8a:fd:9c:55:f7:77:94:82:
         be:c0:e0:7b:3b:04:e4:26:2e:ce:cf:4f:5e:9f:8f:cc:d7:cd:
         8c:7f:63:2e:4e:a9:3d:a4:4d:da:09:df:e1:9e:da:20:5a:15:
         e6:f7:44:4b:c9:95:a3:0c:11:ca:ef:dd:1d:79:9b:de:ed:29:
         92:81:2e:0d:58:69:0c:87:00:6e:9f:ec:e8:02:7d:63:47:cc:
         2c:70:ce:82:21:12:19:d5:95:89:fc:04:fc:9f:6d:50:1d:12:
         fe:08:37:9b:3a:37:7c:c6:cb:51:ee:b7:00:50:18:b8:10:46:
         f2:69:7c:71:bd:8f:e3:ac:78:b3:66:19:0a:9d:47:0a:af:53:
         9b:bd:19:44:5d:12:de:af:c1:ed:22:75:50:3a:b6:75:75:f1:
         f7:af:e1:17:01:be:0e:03:68:77:df:77:58:e2:68:98:12:12:
         fe:06:c4:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:26 2024 by rpki-client on console-ams.rpki-client.org