Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/_OY2PddnAO5rBRRVHaqd3bLA7MQ.roa
File:                     _OY2PddnAO5rBRRVHaqd3bLA7MQ.roa (raw, json)
Hash identifier:          sm3FS4JxjMMyUnSMCeNg9MCqiQMVlnzjrxv8RZ3AtFM=
Subject key identifier:   FC:E6:36:3D:D7:67:00:EE:6B:05:14:55:1D:AA:9D:DD:B2:C0:EC:C4
Certificate issuer:       /CN=76a75826e991225a429ff8a1e7ffdc80466420df
Certificate serial:       09911AB9
Authority key identifier: 76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/_OY2PddnAO5rBRRVHaqd3bLA7MQ.roa
Signing time:             Sat 01 Jan 2022 04:03:24 +0000
ROA not before:           Sat 01 Jan 2022 04:03:24 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60824
IP address blocks:        129.233.192.0/24 maxlen: 24
                          129.233.194.0/23 maxlen: 23
                          129.233.193.0/24 maxlen: 24
                          129.233.196.0/24 maxlen: 24
                          192.44.7.0/24 maxlen: 24
                          153.96.60.0/24 maxlen: 24
                          192.44.14.0/24 maxlen: 24
                          192.44.16.0/24 maxlen: 24
                          153.96.70.0/23 maxlen: 23
                          192.44.22.0/24 maxlen: 24
                          192.44.19.0/24 maxlen: 24
                          153.96.72.0/22 maxlen: 22
                          192.44.27.0/24 maxlen: 24
                          153.96.88.0/22 maxlen: 22
                          153.96.28.0/22 maxlen: 22
                          192.107.236.0/24 maxlen: 24
                          192.107.235.0/24 maxlen: 24
                          153.96.32.0/21 maxlen: 21
                          153.96.204.0/23 maxlen: 23
                          153.96.206.0/24 maxlen: 24
                          153.96.114.0/23 maxlen: 23
                          153.96.128.0/22 maxlen: 22
                          194.113.96.0/22 maxlen: 22
                          2a03:db80:4810::/48 maxlen: 48
                          2a03:db80:4814::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 160504505 (0x9911ab9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76a75826e991225a429ff8a1e7ffdc80466420df
        Validity
            Not Before: Jan  1 04:03:24 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fce6363dd76700ee6b0514551daa9dddb2c0ecc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5c:9c:80:51:5a:37:82:e0:d6:c6:d0:58:74:
                    ea:2e:0b:0d:ca:e5:4e:0b:60:55:2f:c6:4e:4a:be:
                    44:cb:89:3c:37:4c:2e:c0:1f:cc:dd:22:51:bf:99:
                    1c:54:2c:c0:0f:a4:8d:ae:6b:bd:ac:10:05:fa:7b:
                    82:b9:4a:4d:1e:c6:40:be:d8:d4:a6:e3:d4:54:81:
                    c2:de:59:89:ef:86:d2:db:4e:c9:02:74:51:b2:7e:
                    10:e1:7e:8d:33:60:ba:1c:46:29:58:9b:69:fc:43:
                    6e:2d:49:60:39:0d:fa:ad:45:35:f2:57:a2:8f:74:
                    12:e4:03:bd:ee:b5:34:34:6c:1a:0d:ea:f0:53:88:
                    fd:9f:a2:63:69:7f:fd:f5:39:fc:9f:86:26:28:08:
                    6a:42:3f:30:e3:ae:86:86:23:55:ae:98:cd:89:29:
                    b7:9e:9b:67:88:ee:70:60:2f:d0:02:ae:ec:68:9e:
                    cb:ae:7a:fe:a5:b5:5c:96:91:86:56:7c:0f:eb:a6:
                    12:a5:94:a5:2a:c1:fd:1e:1c:fb:8e:1d:f3:0d:32:
                    5c:a4:e1:9b:11:a5:33:41:86:88:4b:f9:d4:0c:0c:
                    74:11:0e:9a:fc:9c:39:94:1d:85:a9:c7:ff:de:c2:
                    fd:4a:fd:3e:09:9c:b8:b3:b5:15:f1:b2:6a:66:06:
                    e9:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:E6:36:3D:D7:67:00:EE:6B:05:14:55:1D:AA:9D:DD:B2:C0:EC:C4
            X509v3 Authority Key Identifier:
                keyid:76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/_OY2PddnAO5rBRRVHaqd3bLA7MQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.233.192.0-129.233.196.255
                  153.96.28.0-153.96.39.255
                  153.96.60.0/24
                  153.96.70.0-153.96.75.255
                  153.96.88.0/22
                  153.96.114.0/23
                  153.96.128.0/22
                  153.96.204.0-153.96.206.255
                  192.44.7.0/24
                  192.44.14.0/24
                  192.44.16.0/24
                  192.44.19.0/24
                  192.44.22.0/24
                  192.44.27.0/24
                  192.107.235.0-192.107.236.255
                  194.113.96.0/22
                IPv6:
                  2a03:db80:4810::/48
                  2a03:db80:4814::/48

    Signature Algorithm: sha256WithRSAEncryption
         93:c8:f7:e9:8a:83:57:13:5a:77:5d:7d:37:d1:67:7f:97:b6:
         73:ec:fa:0b:8c:f3:4c:ce:49:3e:3b:13:a1:da:35:16:23:c2:
         32:cf:25:80:a5:06:83:d7:6e:f3:15:11:ec:cc:d1:50:32:3c:
         fb:52:aa:72:d4:4d:3b:2c:d2:c0:ee:4a:ed:12:f6:37:2f:51:
         d7:2c:c9:41:41:2f:b4:e4:88:64:d3:62:cb:1d:5e:93:32:5e:
         48:11:5e:ff:93:30:71:4c:fb:03:8f:1d:ed:74:a7:31:ef:89:
         4e:6a:80:f6:05:1c:5b:77:1f:99:64:27:29:1d:89:f1:b5:87:
         eb:10:07:6e:f1:11:e3:df:5d:6a:c6:11:f4:b3:fa:a4:0e:f6:
         c5:85:c8:e0:02:a8:16:68:08:23:09:12:d6:d0:80:32:15:8e:
         6d:ab:2e:08:72:34:56:9d:7a:cd:21:9d:14:da:85:8b:9f:ec:
         b8:17:d2:7a:15:3a:2b:87:1b:de:e9:cc:b8:9c:f7:14:8b:1c:
         1f:fc:af:16:54:6e:b1:95:2c:44:cc:c1:04:3d:36:80:93:8f:
         98:e4:84:ba:5f:67:ce:89:f6:74:79:fb:33:3b:bd:55:ea:c3:
         fa:f0:ce:f1:37:18:2a:e6:7d:f2:aa:d2:69:ec:55:ff:a4:fc:
         8e:61:8b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:43 2024 by rpki-client on console-ams.rpki-client.org