Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/119b31-774c-4a40-87a0-758fba5a3951/1/W9CAkRa4l_85g6eawiRuap4iyZc.roa
File:                     W9CAkRa4l_85g6eawiRuap4iyZc.roa (raw, json)
Hash identifier:          hMLBPJkyqziaCe2yQp9fd8/SoFrFcfJPzS/050jIKLk=
Subject key identifier:   5B:D0:80:91:16:B8:97:FF:39:83:A7:9A:C2:24:6E:6A:9E:22:C9:97
Certificate issuer:       /CN=a81b324ec026121ffe5dca77f0e94a6c087e70d2
Certificate serial:       0139D43B
Authority key identifier: A8:1B:32:4E:C0:26:12:1F:FE:5D:CA:77:F0:E9:4A:6C:08:7E:70:D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qBsyTsAmEh_-Xcp38OlKbAh-cNI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/119b31-774c-4a40-87a0-758fba5a3951/1/W9CAkRa4l_85g6eawiRuap4iyZc.roa
Signing time:             Sat 01 Jan 2022 12:03:59 +0000
ROA not before:           Sat 01 Jan 2022 12:03:59 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     12319
IP address blocks:        82.116.160.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20567099 (0x139d43b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a81b324ec026121ffe5dca77f0e94a6c087e70d2
        Validity
            Not Before: Jan  1 12:03:59 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5bd0809116b897ff3983a79ac2246e6a9e22c997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:df:13:f7:92:9a:f2:21:f8:fb:98:17:8e:8c:
                    c3:d4:59:c8:dd:c7:44:15:2e:87:24:9c:3b:34:e7:
                    b5:4f:2e:b5:82:57:ca:10:13:a5:9e:6a:04:ed:01:
                    66:49:6f:98:b6:42:36:23:0f:8f:de:fe:f7:47:c5:
                    cf:1e:ff:46:c6:3d:fe:e0:60:00:a1:8c:5d:c5:fe:
                    e6:32:5f:f3:af:06:5e:55:5e:8c:d8:b5:c4:15:7c:
                    6a:10:8c:d9:37:e0:95:92:11:1e:8c:ef:e6:6a:42:
                    d9:51:78:18:61:8e:a2:f4:9c:33:b7:ea:ea:7c:c2:
                    09:c1:a1:3b:7e:f3:d9:f3:12:b6:95:9f:57:ea:7b:
                    9f:aa:65:4c:5c:bf:69:95:e7:93:17:73:3f:58:97:
                    a5:b2:8e:62:23:9d:0a:d6:be:5c:27:28:93:13:32:
                    1c:0b:09:4b:90:c3:98:fd:e4:0e:29:ca:3a:5f:82:
                    1a:47:29:41:32:0c:89:e4:e2:45:37:f9:cd:a4:4f:
                    9c:42:f4:ed:bb:af:62:53:2e:38:3c:8c:06:24:dd:
                    a9:2c:d5:30:fd:7b:5f:d0:2d:a4:20:5d:19:82:89:
                    f7:94:7e:77:08:13:29:53:cf:5b:06:8b:9e:04:08:
                    3e:07:c1:04:24:03:fa:2e:23:f4:5c:18:8b:cd:0a:
                    19:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:D0:80:91:16:B8:97:FF:39:83:A7:9A:C2:24:6E:6A:9E:22:C9:97
            X509v3 Authority Key Identifier:
                keyid:A8:1B:32:4E:C0:26:12:1F:FE:5D:CA:77:F0:E9:4A:6C:08:7E:70:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBsyTsAmEh_-Xcp38OlKbAh-cNI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/119b31-774c-4a40-87a0-758fba5a3951/1/W9CAkRa4l_85g6eawiRuap4iyZc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/119b31-774c-4a40-87a0-758fba5a3951/1/qBsyTsAmEh_-Xcp38OlKbAh-cNI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.116.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         47:59:ff:9b:e9:0a:f6:a2:f9:6a:7f:6b:9e:a4:2b:50:b1:a5:
         f5:2f:ee:ca:ce:80:d9:57:83:d4:e2:36:50:6a:03:f4:2d:62:
         d1:09:09:80:15:20:b9:14:d6:45:4c:8d:86:92:5e:23:a0:3c:
         20:ab:41:f4:86:27:a6:2f:32:5d:0f:9c:ec:1a:d5:cf:ca:e0:
         87:aa:d7:9b:d4:ac:b0:e4:3e:0b:ca:d9:f6:07:a4:4e:5c:83:
         1d:c5:bc:7a:d0:f0:53:16:16:ec:e1:34:41:70:3b:9b:6d:36:
         d2:ec:d1:22:8d:11:54:58:14:55:d2:e5:1b:a1:be:19:91:37:
         3e:22:f7:27:18:03:35:35:9d:37:4d:a2:7e:12:e1:ab:8c:44:
         9d:90:25:45:3e:0c:23:58:6c:d5:c6:0c:9e:ba:f8:d4:b8:7c:
         c0:be:e1:51:28:86:ec:3a:9a:a7:bb:22:a0:27:00:39:4a:d9:
         40:7c:b6:ee:e6:b5:3b:9a:c5:c3:fd:3c:ca:cf:a5:9b:c3:63:
         9b:02:08:40:e1:72:a9:ef:fa:2d:a9:5d:29:83:79:56:da:49:
         88:bb:85:86:26:3a:b6:2a:6d:74:12:05:82:e7:f5:82:ea:98:
         44:f7:b5:45:fe:f3:17:dd:2d:71:09:b1:85:4d:32:ac:de:47:
         b6:44:ec:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:02 2024 by rpki-client on console-ams.rpki-client.org