Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/c8092e-9f8c-4718-b770-c29b44de53a8/1/dBBwWUyuBdIindu--t6Rrv0JpJM.roa
File:                     dBBwWUyuBdIindu--t6Rrv0JpJM.roa (raw, json)
Hash identifier:          PKeLDLNyLIXi+Ze/uq8LahE7bRJ10YtoC+E50uTbeZA=
Subject key identifier:   74:10:70:59:4C:AE:05:D2:22:9D:DB:BE:FA:DE:91:AE:FD:09:A4:93
Certificate issuer:       /CN=5d39d15bd2fcc84771ba6aa29aa54428b21cef60
Certificate serial:       018389ECEC7A17C53C5D07BA3C1AFFE9F811
Authority key identifier: 5D:39:D1:5B:D2:FC:C8:47:71:BA:6A:A2:9A:A5:44:28:B2:1C:EF:60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XTnRW9L8yEdxumqimqVEKLIc72A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/c8092e-9f8c-4718-b770-c29b44de53a8/1/dBBwWUyuBdIindu--t6Rrv0JpJM.roa
Signing time:             Thu 29 Sep 2022 15:45:49 +0000
ROA not before:           Thu 29 Sep 2022 15:45:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     28851
IP address blocks:        213.250.192.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:89:ec:ec:7a:17:c5:3c:5d:07:ba:3c:1a:ff:e9:f8:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d39d15bd2fcc84771ba6aa29aa54428b21cef60
        Validity
            Not Before: Sep 29 15:45:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=741070594cae05d2229ddbbefade91aefd09a493
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:7c:99:31:30:d4:33:b3:d3:04:3a:ef:b9:98:
                    c9:f3:38:84:b1:ba:87:d8:1c:96:ae:f5:71:df:00:
                    0f:38:d4:cc:24:6f:ae:80:aa:b5:af:ae:b7:db:80:
                    d3:6e:12:d1:ca:d6:91:9c:57:ed:cc:5f:5c:0b:1b:
                    b8:f4:8c:23:54:d6:ce:f0:04:f1:3c:f2:c5:63:3a:
                    f3:ba:5f:4d:1c:cd:a9:44:7b:84:2d:ba:05:e2:a1:
                    eb:db:1e:59:b1:c3:65:85:54:19:62:51:ec:92:3c:
                    90:b3:42:7b:82:48:a3:de:e8:9a:91:89:ef:01:60:
                    83:67:72:f3:71:31:e1:31:70:07:e7:cb:af:79:9d:
                    89:8c:a6:bf:08:cc:73:0f:32:04:89:07:af:6b:c4:
                    c6:58:7e:91:7e:7c:47:b4:d3:c8:78:bc:9e:51:83:
                    73:c9:a5:bf:3b:a7:e1:66:fe:59:59:d6:55:9c:ec:
                    c1:aa:fa:5f:fb:1e:a4:5a:db:3a:b7:95:21:d7:45:
                    7c:72:08:15:a3:fd:a2:19:10:8f:a6:0a:eb:39:2b:
                    12:e5:1f:b4:6a:76:e4:8b:0a:c8:9e:46:35:dd:b6:
                    69:3e:79:69:a0:37:71:28:7f:2c:10:60:75:3a:87:
                    a8:04:c8:51:83:bf:03:94:f2:0e:f6:8c:86:66:c1:
                    62:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:10:70:59:4C:AE:05:D2:22:9D:DB:BE:FA:DE:91:AE:FD:09:A4:93
            X509v3 Authority Key Identifier:
                keyid:5D:39:D1:5B:D2:FC:C8:47:71:BA:6A:A2:9A:A5:44:28:B2:1C:EF:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTnRW9L8yEdxumqimqVEKLIc72A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c8092e-9f8c-4718-b770-c29b44de53a8/1/dBBwWUyuBdIindu--t6Rrv0JpJM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c8092e-9f8c-4718-b770-c29b44de53a8/1/XTnRW9L8yEdxumqimqVEKLIc72A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.250.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         6a:75:07:c9:1d:32:cc:bf:09:a3:d5:90:cc:73:2b:a2:6f:c4:
         9d:d2:d2:15:82:44:3c:e0:6a:4f:2c:2f:95:25:23:64:16:f3:
         cb:1b:92:e3:24:45:5c:df:9f:d2:7b:7d:1a:7a:78:ca:af:cf:
         4c:05:f2:05:ef:ad:79:1f:60:c0:be:96:01:96:87:f5:88:28:
         6e:01:17:ce:47:c7:68:24:2a:a7:ef:01:5e:7d:a4:4f:9b:6a:
         53:bb:15:94:13:27:69:e0:78:ad:01:a0:79:df:e5:d5:66:06:
         a8:44:6a:1f:10:0a:1f:7b:af:cd:16:65:6e:16:d5:36:8e:a3:
         20:b2:82:95:d5:1f:b1:56:f5:4a:f9:a4:68:7d:01:79:ef:90:
         c2:83:f0:7a:8e:95:51:0a:c1:cc:92:37:c8:49:54:91:b1:ef:
         d6:70:04:98:07:5f:25:70:44:dc:da:19:14:dc:cb:20:f6:80:
         6a:a7:59:f9:06:e3:06:00:f7:c0:ee:3e:c6:a0:a2:a6:93:ba:
         f3:49:e5:a0:c5:e7:15:f2:a2:22:8a:d9:97:54:bd:ef:40:a4:
         b9:f8:fa:48:3f:f1:9e:ae:66:a1:75:6f:9e:52:71:6e:2a:c8:
         d1:3d:c4:51:4b:6c:8f:62:4e:1a:52:df:4e:9a:bb:3b:d1:b5:
         a3:e4:56:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:49 2024 by rpki-client on console-fra.rpki-client.org