Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/ENtr1aOS7VaNGOYaDxu0h__rVCw.roa
File:                     ENtr1aOS7VaNGOYaDxu0h__rVCw.roa (raw, json)
Hash identifier:          ePrn20HRR1+QXCZt9yKoNWwiMoKHoj42piaFx/q8R+w=
Subject key identifier:   10:DB:6B:D5:A3:92:ED:56:8D:18:E6:1A:0F:1B:B4:87:FF:EB:54:2C
Certificate issuer:       /CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b
Certificate serial:       0183A2404A463436942DD68DC7E6843E9E08
Authority key identifier: A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/ENtr1aOS7VaNGOYaDxu0h__rVCw.roa
Signing time:             Tue 04 Oct 2022 09:07:45 +0000
ROA not before:           Tue 04 Oct 2022 09:07:45 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207967
IP address blocks:        81.19.134.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:a2:40:4a:46:34:36:94:2d:d6:8d:c7:e6:84:3e:9e:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b
        Validity
            Not Before: Oct  4 09:07:45 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=10db6bd5a392ed568d18e61a0f1bb487ffeb542c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:28:7e:c6:f9:34:59:e8:aa:d2:0e:f1:f2:ad:
                    83:81:27:ad:80:69:21:38:4c:ec:39:a2:65:f7:f6:
                    6e:b1:e2:ad:ca:a7:b3:ef:70:25:cf:26:5d:b6:44:
                    76:9e:8d:a8:a4:4b:20:49:8c:25:4b:62:7b:a3:76:
                    85:6f:e2:d8:8c:a4:c0:c7:8b:ad:6b:01:c2:a7:e5:
                    bf:29:24:08:0b:b1:86:c6:7b:ac:db:ac:f3:41:fc:
                    3b:9c:09:33:7b:62:40:77:cd:fc:84:23:97:72:8d:
                    01:92:ed:73:d1:8f:47:66:91:78:98:8d:1c:24:69:
                    42:5e:67:2c:4b:82:e4:3b:3e:f7:61:5a:62:a3:cb:
                    8f:c8:f6:01:b3:fa:23:f9:be:66:19:34:31:4b:5d:
                    80:f4:04:7b:87:8d:73:6e:4f:fc:50:fa:a8:9d:9a:
                    08:a6:06:e6:a2:c4:c7:20:1c:21:b2:cc:5e:fb:51:
                    76:94:de:e9:7c:f7:f9:e5:49:86:10:ec:8f:ec:6a:
                    f4:7a:1b:74:b7:63:33:56:06:d1:d1:bb:ba:9c:00:
                    4b:02:d3:4f:63:f1:b8:82:3e:1b:44:b0:b2:85:f9:
                    13:84:f0:b5:53:b3:fc:e2:38:85:f4:4b:15:e4:4c:
                    18:57:5f:88:aa:4f:65:68:f6:14:16:05:52:e1:65:
                    e4:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:DB:6B:D5:A3:92:ED:56:8D:18:E6:1A:0F:1B:B4:87:FF:EB:54:2C
            X509v3 Authority Key Identifier:
                keyid:A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/ENtr1aOS7VaNGOYaDxu0h__rVCw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.19.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:7d:49:04:1f:f4:e2:6e:06:f1:a1:ab:d2:95:96:18:62:c3:
         ba:5d:fd:15:18:e7:ce:70:6b:e9:80:83:87:7a:2a:50:ce:81:
         d7:a1:b4:69:15:a9:a2:df:8e:53:e7:55:63:00:7f:e4:90:df:
         b5:e5:7f:0b:ef:9a:4c:23:e5:d8:d2:7c:e2:46:4b:95:75:b5:
         af:21:48:3c:0d:20:87:bf:15:dc:43:53:b0:6f:ee:47:b0:54:
         25:08:8a:6e:7b:0b:55:e7:58:7c:3d:65:da:32:7c:34:9d:9f:
         66:36:96:8b:f2:af:a0:57:97:7c:d8:c2:ba:8b:3d:44:32:63:
         94:a0:8d:fe:0f:b0:97:6f:9d:9d:af:0c:b5:0c:34:35:96:66:
         74:02:0a:da:06:e7:e5:28:61:36:09:b6:a3:85:31:6b:7e:55:
         cc:9b:14:73:d7:1f:18:58:57:51:05:6a:f3:e2:af:85:2d:9c:
         81:4c:69:a0:89:09:60:c1:e9:fe:7b:63:6e:f2:16:84:d4:23:
         17:87:06:c7:64:2c:aa:7f:74:ee:ae:a3:d5:66:44:81:2c:cc:
         cf:14:95:3b:9c:ae:c4:ed:3f:8f:5f:a6:34:28:e8:db:09:af:
         c0:9c:0f:bb:a2:6a:95:7d:2d:b7:df:ac:2f:f4:4c:d3:b7:e2:
         3d:9d:db:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:24 2024 by rpki-client on console-fra.rpki-client.org