Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/vYvv-QiZUrNcpuL-cu7wtGSUvuM.roa
File:                     vYvv-QiZUrNcpuL-cu7wtGSUvuM.roa (raw, json)
Hash identifier:          vFpvCheXVB9PjzDmJkuj0ovVut0OevpWeIL4G2Fqc+s=
Subject key identifier:   BD:8B:EF:F9:08:99:52:B3:5C:A6:E2:FE:72:EE:F0:B4:64:94:BE:E3
Certificate issuer:       /CN=608e6a6a54017dd3b9b2cce35fd5a9a7f2a45498
Certificate serial:       1AE3EC8B
Authority key identifier: 60:8E:6A:6A:54:01:7D:D3:B9:B2:CC:E3:5F:D5:A9:A7:F2:A4:54:98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YI5qalQBfdO5sszjX9Wpp_KkVJg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/vYvv-QiZUrNcpuL-cu7wtGSUvuM.roa
Signing time:             Wed 13 Apr 2022 14:11:07 +0000
ROA not before:           Wed 13 Apr 2022 14:11:07 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     48815
IP address blocks:        5.104.24.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 451144843 (0x1ae3ec8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=608e6a6a54017dd3b9b2cce35fd5a9a7f2a45498
        Validity
            Not Before: Apr 13 14:11:07 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=bd8beff9089952b35ca6e2fe72eef0b46494bee3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c8:11:c2:3f:f2:7a:91:2b:6e:07:f4:b3:20:
                    2e:6e:79:03:36:78:b4:9a:33:21:79:90:75:ff:79:
                    34:86:44:a5:e3:81:51:b4:bf:b2:99:6c:d0:41:49:
                    85:c2:0c:70:92:98:ed:5c:c0:b6:93:0b:51:cb:b8:
                    53:59:91:47:62:1c:8d:09:d5:c9:fa:ed:bf:2f:47:
                    49:1d:c4:45:33:2a:93:01:1d:1a:45:3e:9a:8f:e2:
                    58:02:47:17:b8:3d:8e:0f:8d:58:12:11:8a:dd:94:
                    5b:30:7f:bb:a9:c1:c6:04:45:1b:77:d7:21:37:31:
                    4d:07:b9:7d:a6:44:9d:fa:70:32:a2:ed:27:75:cd:
                    25:42:a0:6e:f3:a8:ae:7a:64:0e:0a:8b:2b:ed:ae:
                    e4:1c:5b:fc:45:dd:50:7a:93:26:bd:59:fe:3f:6d:
                    ea:77:69:b4:52:1d:cb:9b:64:51:3e:50:95:21:5d:
                    b3:1a:d4:75:bb:53:de:44:9d:7e:12:c8:37:fe:29:
                    db:1a:7c:d2:cf:62:93:7a:48:d0:33:ef:28:0a:03:
                    0e:ac:95:49:af:b9:58:69:4c:10:1e:82:42:4b:a5:
                    7b:19:9c:4e:3b:f3:b6:38:12:2c:21:21:33:78:5b:
                    8d:d2:bd:6c:a5:d1:1c:5a:a0:67:e8:54:fd:6a:ef:
                    ea:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:8B:EF:F9:08:99:52:B3:5C:A6:E2:FE:72:EE:F0:B4:64:94:BE:E3
            X509v3 Authority Key Identifier:
                keyid:60:8E:6A:6A:54:01:7D:D3:B9:B2:CC:E3:5F:D5:A9:A7:F2:A4:54:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YI5qalQBfdO5sszjX9Wpp_KkVJg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/vYvv-QiZUrNcpuL-cu7wtGSUvuM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.104.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:bb:50:0c:df:b8:3e:33:95:77:4f:88:80:48:77:a2:ac:fc:
         1c:08:84:17:30:e9:6e:c9:77:d1:db:af:cb:d3:e8:57:8d:92:
         94:03:cd:c3:62:1d:e7:d9:bb:51:04:e9:a2:26:3e:99:4a:0b:
         ce:3b:6a:de:62:b7:32:1c:f1:64:2b:f6:3c:df:54:ce:b4:51:
         61:85:c9:ec:ef:84:cc:cf:c2:13:ff:4a:71:93:09:5b:ed:91:
         c8:c2:00:aa:a2:91:15:15:fa:5a:f2:23:2c:9f:d5:04:b5:1e:
         a6:4e:47:64:53:d6:41:8f:32:8f:7c:7d:5d:87:1b:6b:d2:70:
         13:3b:a7:07:99:1c:53:8a:4f:41:c7:50:f7:52:12:26:a0:a7:
         7c:0f:7f:53:09:2e:09:8d:23:3e:f6:39:07:68:74:99:15:6a:
         3c:e5:ab:94:d9:2e:a0:3d:15:90:b8:f1:89:03:4a:4e:36:80:
         c4:5a:ba:1a:fe:fb:44:78:19:35:1b:6c:34:50:10:3c:f2:83:
         10:24:3a:1c:02:1a:bb:5b:21:ac:2f:ab:c5:c3:5f:8f:f3:ce:
         73:91:47:94:7a:fb:6c:92:e5:0c:53:ca:66:cf:08:b1:45:39:
         55:9e:9e:47:1d:00:0e:7e:dd:63:6a:64:14:fd:6d:59:5b:af:
         f2:db:22:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:50 2024 by rpki-client on console-fra.rpki-client.org