Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/zfwDoPg9b8xkmu0D9dJR9k5BhUY.roa
File:                     zfwDoPg9b8xkmu0D9dJR9k5BhUY.roa (raw, json)
Hash identifier:          iShbVxFnKP4xQtZwEAvHrh0TmqiDZWZCVMgamVNY248=
Subject key identifier:   CD:FC:03:A0:F8:3D:6F:CC:64:9A:ED:03:F5:D2:51:F6:4E:41:85:46
Certificate issuer:       /CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b
Certificate serial:       04DB3FF7
Authority key identifier: A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/zfwDoPg9b8xkmu0D9dJR9k5BhUY.roa
Signing time:             Tue 24 May 2022 13:33:13 +0000
ROA not before:           Tue 24 May 2022 13:33:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     43260
IP address blocks:        81.19.140.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81477623 (0x4db3ff7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b
        Validity
            Not Before: May 24 13:33:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=cdfc03a0f83d6fcc649aed03f5d251f64e418546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:35:f4:43:d4:10:a1:60:e2:c3:80:a7:77:05:
                    3e:ee:63:1e:6d:c8:46:ae:4d:af:76:54:33:a0:cc:
                    ca:87:16:b9:f0:5f:86:5f:a8:9e:ec:6a:c3:a5:c4:
                    67:05:31:1c:4e:7c:16:1c:50:c6:fe:06:f4:41:4b:
                    dd:f8:36:13:ab:e7:99:54:cb:0b:5f:43:b5:2c:3a:
                    a1:c0:cc:2b:0e:5e:4b:bc:e4:59:07:dc:83:04:80:
                    60:42:50:c6:2b:4f:30:a2:ad:12:76:07:85:fa:f9:
                    45:4a:cf:71:fe:ff:b5:37:6b:12:28:04:b3:bf:92:
                    97:8c:28:f9:38:68:fc:55:98:9e:90:a9:a5:10:d5:
                    4a:c5:b2:f9:9a:54:89:59:4e:92:1d:59:cf:ce:2c:
                    a7:3d:b4:2b:76:d3:2e:19:64:ee:5c:e9:24:a5:26:
                    83:57:52:88:99:90:e8:0b:17:74:08:e0:3f:72:eb:
                    69:7c:c2:a0:3b:53:48:19:68:fb:87:40:c2:f0:d8:
                    0c:a3:42:48:9b:c8:e7:1c:b1:3b:3c:18:f0:01:f9:
                    54:9c:2b:a4:7e:07:37:bd:65:49:07:02:3a:7a:68:
                    3b:07:d6:c0:c0:bf:21:14:75:97:a0:0b:ef:40:de:
                    79:86:7b:bc:c4:e7:da:f4:69:38:f5:65:c2:ef:4b:
                    f5:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:FC:03:A0:F8:3D:6F:CC:64:9A:ED:03:F5:D2:51:F6:4E:41:85:46
            X509v3 Authority Key Identifier:
                keyid:A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/zfwDoPg9b8xkmu0D9dJR9k5BhUY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.19.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:f9:36:50:4c:71:43:9e:af:72:2e:c3:a3:ad:ea:41:60:92:
         e2:6d:bf:0a:2a:27:9e:a3:d9:67:10:06:88:7e:bf:74:44:96:
         e4:22:2f:53:6e:70:76:9c:f4:50:ee:a9:4f:94:26:2a:83:57:
         7d:8b:24:d8:49:a9:c6:7e:74:34:3d:1f:25:b0:7f:eb:c4:df:
         d9:c9:d8:d4:7d:1b:16:71:85:30:67:2c:ed:cd:e9:0e:a7:d3:
         6a:06:be:1e:09:18:2e:f1:e2:35:29:b4:1c:b9:3a:a5:a3:1d:
         78:8f:ba:7d:18:97:80:56:98:50:45:a3:71:4f:ec:79:47:48:
         23:37:d0:f9:fe:15:08:c6:22:73:ed:d1:08:55:04:53:86:97:
         c6:ce:fa:9e:56:0b:d3:2d:b7:d1:a0:49:86:82:79:3a:8e:1c:
         7c:41:b8:3e:ee:6c:df:5c:8d:30:2d:d5:9b:6d:83:ed:91:40:
         41:5c:ad:88:5e:42:f2:13:80:ce:26:65:77:da:ea:5d:3c:5f:
         dc:ff:d5:c0:9c:4f:ed:44:58:f7:96:a1:96:19:20:7a:70:e0:
         5f:e3:a6:20:18:97:8b:b9:e7:8d:08:cf:4d:a2:79:14:84:d0:
         41:9c:a1:57:85:e0:14:b0:8f:0e:b9:dc:98:57:f5:c1:9b:2e:
         ed:40:d3:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:24 2024 by rpki-client on console-fra.rpki-client.org