Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/e3f562-5929-44ad-9cc9-d3134c66bf6c/1/Z4U-8wwbb2AVYhqFZEDL9cbrj2g.roa
File:                     Z4U-8wwbb2AVYhqFZEDL9cbrj2g.roa (raw, json)
Hash identifier:          dX9jkcbrNB5VUdv3hXTvt54fTvdmte4fv9wqgSGO16s=
Subject key identifier:   67:85:3E:F3:0C:1B:6F:60:15:62:1A:85:64:40:CB:F5:C6:EB:8F:68
Certificate issuer:       /CN=292c5d372319fa6175e56ca79883d12b0c6e38ec
Certificate serial:       01836032B06A4E1FD44CE0D561F1B0957B53
Authority key identifier: 29:2C:5D:37:23:19:FA:61:75:E5:6C:A7:98:83:D1:2B:0C:6E:38:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KSxdNyMZ-mF15WynmIPRKwxuOOw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/e3f562-5929-44ad-9cc9-d3134c66bf6c/1/Z4U-8wwbb2AVYhqFZEDL9cbrj2g.roa
Signing time:             Wed 21 Sep 2022 13:17:58 +0000
ROA not before:           Wed 21 Sep 2022 13:17:58 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207326
IP address blocks:        185.81.69.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:60:32:b0:6a:4e:1f:d4:4c:e0:d5:61:f1:b0:95:7b:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=292c5d372319fa6175e56ca79883d12b0c6e38ec
        Validity
            Not Before: Sep 21 13:17:58 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=67853ef30c1b6f6015621a856440cbf5c6eb8f68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7c:ca:4d:c0:63:ae:bd:93:8b:e4:fd:25:66:
                    9b:87:ea:09:8f:98:06:b9:85:04:44:6b:9c:0c:e9:
                    c1:00:10:68:02:ab:1a:40:8d:8d:93:ee:91:95:45:
                    9a:e4:1a:1b:1c:f2:a9:25:96:1c:46:c3:25:2d:64:
                    c1:e1:16:32:c0:d5:07:54:40:e4:a4:e1:c6:37:31:
                    88:87:4a:07:e4:28:af:cb:5f:f3:03:38:e1:d4:1c:
                    a1:9a:37:e0:b8:0a:a5:c6:91:89:c7:7b:1c:ec:93:
                    61:6d:5d:e2:23:6d:e2:20:ef:4b:26:25:e4:62:68:
                    d7:c8:29:c8:c8:38:9f:08:da:63:9f:53:0d:1c:18:
                    45:f1:d7:e5:07:b4:a0:e2:5c:45:fd:a2:f4:67:f4:
                    10:73:f8:91:00:cb:9e:49:5c:16:09:dc:10:00:e2:
                    94:f8:3c:76:32:b3:51:56:21:76:de:d1:2c:7e:34:
                    5d:bf:9e:09:ab:cf:39:1c:54:c5:a5:97:29:59:71:
                    d4:0e:fc:4d:33:18:24:80:ad:c2:38:32:77:53:db:
                    3b:37:42:2f:e2:6a:13:5c:58:2e:49:da:26:80:8c:
                    19:00:30:1e:6e:49:26:f0:e1:fd:a7:65:84:56:a0:
                    46:d0:f6:6c:a1:c8:2c:6a:dd:af:c6:97:56:d9:8e:
                    7c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:85:3E:F3:0C:1B:6F:60:15:62:1A:85:64:40:CB:F5:C6:EB:8F:68
            X509v3 Authority Key Identifier:
                keyid:29:2C:5D:37:23:19:FA:61:75:E5:6C:A7:98:83:D1:2B:0C:6E:38:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KSxdNyMZ-mF15WynmIPRKwxuOOw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/e3f562-5929-44ad-9cc9-d3134c66bf6c/1/Z4U-8wwbb2AVYhqFZEDL9cbrj2g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/e3f562-5929-44ad-9cc9-d3134c66bf6c/1/KSxdNyMZ-mF15WynmIPRKwxuOOw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.81.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:91:ff:3d:18:c5:07:c3:45:59:a3:f1:e4:46:41:4c:9d:62:
         da:c6:6f:fa:ea:e8:20:1c:10:4e:31:09:a8:1e:ab:f0:03:fc:
         c4:1a:23:af:1d:81:de:0e:b2:d4:43:bf:69:0a:c1:95:06:28:
         a6:c4:0f:51:e8:4d:35:a8:09:35:af:cc:d4:90:7f:07:2d:e9:
         0f:22:cb:a2:ae:11:e8:b2:bf:27:93:36:69:d2:bb:67:62:c7:
         ca:ac:a4:1f:b2:21:22:b3:49:d8:1f:90:38:eb:66:f3:db:9c:
         d9:7c:1c:39:2a:fc:87:0e:04:bf:6b:5c:a5:67:43:e9:a9:8a:
         d2:06:36:5a:2d:e3:86:32:7c:9a:94:31:62:c0:b8:6e:b0:dc:
         e2:20:50:d7:37:af:56:53:e5:0e:91:52:d1:e5:b3:a6:4e:ff:
         22:58:9e:68:b9:16:94:e9:33:b9:80:76:af:17:09:99:07:eb:
         e9:81:d7:c0:a9:e5:ee:ec:2b:72:44:86:f3:b3:d3:35:fd:33:
         e1:f0:11:8e:98:9b:9f:31:ab:91:a9:dc:a6:a8:1b:14:62:5d:
         25:51:5f:00:f1:c8:52:b4:2c:0e:f1:a6:5d:00:ec:5a:65:82:
         5c:85:50:dd:07:00:f7:0b:6e:cf:2f:0e:b9:93:9c:5c:df:45:
         60:5b:8c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:17 2024 by rpki-client on console-fra.rpki-client.org