Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/Kf93n2GVOOj1gDvduOYa1QxnLe4.roa
File:                     Kf93n2GVOOj1gDvduOYa1QxnLe4.roa (raw, json)
Hash identifier:          BVFlG8RNX9uFH+CSb9V0SfWYvPE7hiudviDb/KVnmcM=
Subject key identifier:   29:FF:77:9F:61:95:38:E8:F5:80:3B:DD:B8:E6:1A:D5:0C:67:2D:EE
Certificate issuer:       /CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Certificate serial:       030959CA
Authority key identifier: D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/Kf93n2GVOOj1gDvduOYa1QxnLe4.roa
Signing time:             Mon 11 Apr 2022 18:37:11 +0000
ROA not before:           Mon 11 Apr 2022 18:37:11 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207326
IP address blocks:        81.199.26.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50944458 (0x30959ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
        Validity
            Not Before: Apr 11 18:37:11 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=29ff779f619538e8f5803bddb8e61ad50c672dee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f5:04:da:36:44:1d:04:ee:61:64:b2:f0:c0:
                    1a:d2:a5:19:7b:db:be:d7:c4:b6:dc:80:6a:02:73:
                    80:26:a3:95:a2:d6:b4:44:82:e6:ca:04:ed:21:c4:
                    67:c7:1d:2f:03:9d:56:dd:03:0f:87:02:5b:61:06:
                    38:5d:8e:ab:a5:4e:97:0f:e5:14:c9:23:ae:ee:fc:
                    5b:6f:3c:ae:5b:34:51:7d:3d:37:8b:fd:e8:0e:5b:
                    73:1f:01:23:06:f3:f4:9e:74:f0:4d:58:d6:09:6e:
                    8b:c1:ad:69:c1:7a:42:f3:88:49:84:19:32:ca:23:
                    3f:4e:40:e0:43:73:b6:c6:fe:76:de:88:b0:be:bd:
                    d7:c2:f8:3a:24:9c:7d:d9:80:c1:34:bf:bd:2a:a3:
                    15:c3:7b:2a:1c:4f:d8:a5:23:74:2e:76:b7:74:82:
                    76:48:62:63:26:b6:5c:aa:e2:4e:fc:ad:a3:35:db:
                    66:34:64:60:cf:48:2c:23:33:85:eb:72:ad:7e:7c:
                    82:97:98:92:25:97:63:7e:34:e1:56:c1:e4:6f:52:
                    d5:ad:b5:98:a6:ad:da:ba:e9:d5:eb:de:9a:86:b8:
                    b0:ab:6c:51:59:5a:76:c9:0d:83:5a:12:3d:5d:60:
                    f9:e7:f7:cd:6f:37:cf:41:9e:3e:63:87:b8:83:2d:
                    45:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:FF:77:9F:61:95:38:E8:F5:80:3B:DD:B8:E6:1A:D5:0C:67:2D:EE
            X509v3 Authority Key Identifier:
                keyid:D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/Kf93n2GVOOj1gDvduOYa1QxnLe4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.199.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:55:79:dd:41:cc:cc:16:a2:e9:b3:21:8b:cc:90:3f:07:83:
         de:2b:2f:6b:2a:dd:1e:cb:b6:96:4c:24:ea:51:b2:a8:c9:36:
         5a:a1:1d:0d:fc:30:af:b7:9e:75:0b:b9:6d:37:7f:c7:e6:14:
         d6:95:9b:5b:4f:30:29:a3:f3:8c:8c:96:52:53:a3:4a:88:fc:
         3c:95:e1:4f:16:2d:4c:73:2a:2c:04:21:f6:e2:2d:b0:42:95:
         11:7d:e6:5a:21:9e:3a:a9:f0:84:e1:83:d5:e7:f1:87:c3:1e:
         1b:05:c0:e0:61:4b:eb:d2:54:9c:5d:45:4c:cc:6d:38:e9:d0:
         90:f3:ba:be:6a:5b:2b:c7:d6:cc:ed:73:10:dc:63:26:00:ae:
         ce:3d:da:f6:61:ab:0d:c5:f6:f1:82:2b:ad:23:1f:4f:d1:4d:
         c1:f2:78:f2:e7:e6:af:db:31:b4:5b:21:38:ea:bc:d3:53:e6:
         be:9d:df:9a:e3:95:a9:a6:3b:df:86:84:45:9e:3b:ec:84:b3:
         d4:5a:65:88:c5:fe:ac:13:a2:f6:ca:c9:76:42:e5:f5:4f:84:
         a6:9e:97:20:f9:d7:9c:7d:06:78:a9:65:c5:2d:88:51:9b:18:
         99:41:64:0e:76:11:06:f1:59:0b:fb:ce:7d:58:34:9d:61:5d:
         11:3f:50:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:48 2023 by rpki-client on console-fra.rpki-client.org