Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/tHaRYtk6SvsWMEwxtLw7rdfdqog.roa
File:                     tHaRYtk6SvsWMEwxtLw7rdfdqog.roa (raw, json)
Hash identifier:          rQiNlFYJyQcrELgq8arr8X1/ne/u7fEhB8doaHVLRYk=
Subject key identifier:   B4:76:91:62:D9:3A:4A:FB:16:30:4C:31:B4:BC:3B:AD:D7:DD:AA:88
Certificate issuer:       /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial:       01850F9EF4281C794FDF50F51421EEED814B
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/tHaRYtk6SvsWMEwxtLw7rdfdqog.roa
Signing time:             Wed 14 Dec 2022 07:52:33 +0000
ROA not before:           Wed 14 Dec 2022 07:52:33 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207724
IP address blocks:        185.239.0.0/24 maxlen: 24
                          5.159.49.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:0f:9e:f4:28:1c:79:4f:df:50:f5:14:21:ee:ed:81:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
        Validity
            Not Before: Dec 14 07:52:33 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b4769162d93a4afb16304c31b4bc3badd7ddaa88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:40:a6:e6:6c:0e:82:dd:10:0c:68:08:ee:93:
                    2c:83:04:17:ca:20:f4:79:5b:65:04:92:36:47:7a:
                    2c:98:26:b8:ae:15:36:8f:f5:ae:c8:45:58:a9:3d:
                    82:88:1a:95:70:80:50:5b:e0:8e:c0:6c:8e:8b:fd:
                    75:11:ab:e2:94:80:58:63:2c:ce:f9:7e:46:49:55:
                    d8:f8:c0:c1:d2:65:08:75:9f:a7:c9:36:9b:58:6f:
                    d0:7b:be:77:ec:af:4e:c1:a5:9a:8a:14:c1:de:fa:
                    03:1e:c4:09:a0:e0:45:1b:b7:c7:e9:03:00:8f:fe:
                    3d:9e:37:74:50:d0:0f:e9:28:a0:06:a6:45:b1:09:
                    4a:d5:68:f2:53:54:93:a9:d7:31:69:97:f7:05:e3:
                    12:64:26:6a:85:3b:33:c1:d6:d7:b8:4f:6c:37:fb:
                    a0:c0:90:ba:c4:62:82:0b:75:18:47:ea:33:e2:b1:
                    9f:23:fb:7b:98:34:27:ab:a7:cb:e4:f3:18:f5:14:
                    bd:c7:2c:3b:00:cf:71:d9:ec:a6:51:d6:12:94:39:
                    37:36:1b:4f:18:55:75:ad:8b:12:8d:f2:90:c6:59:
                    ac:8a:c8:c7:73:0b:b3:3f:20:a0:b9:f3:04:a6:81:
                    0b:8d:c1:85:76:28:9f:7b:54:5e:96:03:f9:e6:77:
                    61:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:76:91:62:D9:3A:4A:FB:16:30:4C:31:B4:BC:3B:AD:D7:DD:AA:88
            X509v3 Authority Key Identifier:
                keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/tHaRYtk6SvsWMEwxtLw7rdfdqog.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.159.49.0/24
                  185.239.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:81:96:0d:fd:0d:18:c2:74:57:a6:28:95:d7:fb:8f:f5:92:
         9a:49:b2:f9:5b:c1:ad:98:17:77:fc:52:45:51:69:68:42:18:
         dc:44:2d:e1:ec:47:8d:b4:8c:43:5f:ef:f0:c4:de:a5:71:e3:
         28:73:52:93:c0:c0:4a:4f:1d:8e:54:00:93:39:a4:53:25:be:
         42:bd:e2:2e:35:ef:c0:4a:81:0a:29:db:2e:cb:9f:0a:9c:b7:
         f3:07:00:97:e6:ff:2d:d1:66:62:61:04:5a:c3:ac:b5:32:c1:
         b9:4d:72:89:e7:03:b7:50:df:be:5c:52:b9:a1:05:b3:ed:5f:
         15:7c:8f:81:cd:dd:ec:8f:55:1f:93:fb:c4:5b:f6:03:6b:2b:
         cc:76:10:6a:c6:fd:1f:84:e8:b0:c3:06:de:39:7e:5f:62:58:
         ad:ba:90:ce:69:da:32:f6:f6:c6:c0:62:c0:9b:80:79:9e:b7:
         e6:be:01:24:9e:c3:e9:c3:20:cc:16:48:48:17:41:b7:67:d3:
         0c:08:84:69:2b:12:69:ca:67:65:7a:cd:d3:eb:ec:7a:bb:c1:
         73:5c:96:8c:de:8c:9f:53:d6:a4:71:99:80:f2:ee:b4:ef:7b:
         e2:3c:be:bf:4e:c7:d3:4c:bd:22:e0:3b:e3:f1:82:1a:f4:a8:
         e3:b7:95:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:51 2024 by rpki-client on console-fra.rpki-client.org