Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/d82Cj4yECdNunMHhM7VpZgolNLE.roa
File:                     d82Cj4yECdNunMHhM7VpZgolNLE.roa (raw, json)
Hash identifier:          P9iXmhrZ58qU1GQylxyLMZxWvh+xiP2SmZwiDKYUExs=
Subject key identifier:   77:CD:82:8F:8C:84:09:D3:6E:9C:C1:E1:33:B5:69:66:0A:25:34:B1
Certificate issuer:       /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial:       0183C6CA178C35C3CB2B4EE655CC32897BCA
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/d82Cj4yECdNunMHhM7VpZgolNLE.roa
Signing time:             Tue 11 Oct 2022 11:24:36 +0000
ROA not before:           Tue 11 Oct 2022 11:24:36 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206050
IP address blocks:        188.132.160.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:c6:ca:17:8c:35:c3:cb:2b:4e:e6:55:cc:32:89:7b:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
        Validity
            Not Before: Oct 11 11:24:36 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=77cd828f8c8409d36e9cc1e133b569660a2534b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f2:6c:44:bf:4c:8e:79:f1:ca:5f:95:14:3b:
                    7a:b6:c3:04:c2:f8:ad:74:d2:e1:7c:5b:7b:88:4b:
                    f4:c5:5e:81:bc:7e:3f:e0:69:58:57:e5:a5:31:c1:
                    b0:ea:04:10:0e:2d:64:a8:3d:3c:5b:f1:76:27:ae:
                    1e:9b:39:c2:a9:ea:27:58:61:69:12:33:ed:4b:6f:
                    a6:d0:f0:45:05:87:a1:ee:84:40:17:24:01:99:6d:
                    04:6e:b3:3b:ee:50:a7:57:b0:8b:46:f7:59:40:b0:
                    7b:54:e5:b9:1a:16:9d:92:f0:b5:70:e0:54:ae:55:
                    fc:5d:66:18:95:d6:9d:6f:15:0b:15:6f:3c:17:86:
                    a0:2e:d5:d3:7e:09:c0:08:0a:1d:ea:5b:1c:8d:ee:
                    35:09:c1:54:3f:86:12:e7:3a:51:c3:39:34:a7:25:
                    e6:2d:6e:f8:6f:3a:00:46:dc:b3:56:8f:bd:ca:35:
                    2b:52:f0:fd:cd:24:b6:77:67:99:0d:ba:44:27:87:
                    0c:a0:fc:d9:9c:4a:97:7a:85:cc:5f:c8:8b:27:37:
                    81:3c:62:68:a4:99:17:47:b3:95:ee:b7:4d:6e:01:
                    70:ed:ea:a7:0f:11:7a:47:3b:8b:65:45:91:fb:45:
                    28:3d:d5:8b:22:75:2a:5a:0b:80:ec:7e:9f:60:1c:
                    48:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:CD:82:8F:8C:84:09:D3:6E:9C:C1:E1:33:B5:69:66:0A:25:34:B1
            X509v3 Authority Key Identifier:
                keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/d82Cj4yECdNunMHhM7VpZgolNLE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.132.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:1b:68:54:f8:fd:d6:b1:0d:92:20:59:33:0d:5a:8c:5b:74:
         bc:3e:ec:7f:8d:4a:21:80:59:d2:4c:f5:7d:8d:50:4a:34:b1:
         d0:81:98:89:16:70:d3:21:1f:3f:40:9c:7e:f8:04:c9:0f:17:
         26:94:19:50:62:23:85:d5:89:da:19:e2:7d:40:8c:67:36:43:
         55:69:61:f4:77:05:39:1a:f6:ed:44:5e:b3:ff:2a:81:f5:c6:
         23:b4:cb:41:3a:e3:08:73:23:4c:6f:a1:c7:e5:7e:5b:21:46:
         31:98:44:c9:0b:d9:ab:53:5c:dc:61:02:8a:eb:dc:82:f8:e2:
         31:3d:85:0b:e6:c2:c2:2f:91:a4:2a:94:fb:2f:7d:25:6e:4a:
         4b:4d:5e:74:91:e3:ea:f0:49:0d:ef:49:07:2d:62:5b:b8:ba:
         b4:38:d6:9e:31:69:9f:85:57:e6:32:41:11:84:ea:d0:62:42:
         6c:1d:ce:61:f9:d3:6d:09:69:ec:89:6c:89:34:f9:01:d9:63:
         e3:e5:12:d0:7d:b4:69:8b:5b:e1:73:d4:c7:54:6d:9f:85:c9:
         4a:b5:24:70:26:cd:74:48:00:b4:10:71:cb:aa:52:c2:eb:78:
         99:c8:99:cd:8c:af:12:6a:28:96:6d:71:f9:24:8e:5c:87:7e:
         b0:da:2a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:44 2024 by rpki-client on console-fra.rpki-client.org