Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/jAjJO8cxP1ePfGZ46DRPWaHKiq8.roa
File:                     jAjJO8cxP1ePfGZ46DRPWaHKiq8.roa (raw, json)
Hash identifier:          +TVoPNiBwZUSoiMzGK7oCashmxqQFA6yDehxcYVBkzY=
Subject key identifier:   8C:08:C9:3B:C7:31:3F:57:8F:7C:66:78:E8:34:4F:59:A1:CA:8A:AF
Certificate issuer:       /CN=ab8c6c58b607ff23ae7175a61682c75480f1e214
Certificate serial:       03B9318B
Authority key identifier: AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/jAjJO8cxP1ePfGZ46DRPWaHKiq8.roa
Signing time:             Sat 01 Jan 2022 14:05:03 +0000
ROA not before:           Sat 01 Jan 2022 14:05:03 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     31554
IP address blocks:        188.247.237.0/24 maxlen: 24
                          188.247.160.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62468491 (0x3b9318b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab8c6c58b607ff23ae7175a61682c75480f1e214
        Validity
            Not Before: Jan  1 14:05:03 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8c08c93bc7313f578f7c6678e8344f59a1ca8aaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a3:6f:69:6c:76:20:f2:29:5e:19:a2:6b:df:
                    b1:ab:fc:c8:4d:be:ed:f5:54:27:7c:5d:ac:c9:ff:
                    d9:cb:dd:c1:07:83:66:ce:22:c8:f5:0e:50:9b:fe:
                    fd:6c:4d:fe:da:7d:bb:a3:84:6c:30:61:9d:bc:31:
                    4f:a7:ff:26:16:c1:5a:87:4a:e1:4c:e3:ff:a8:64:
                    11:84:e3:9d:4b:8f:4d:aa:c3:1a:15:8b:b7:48:3d:
                    3b:72:be:61:9b:b2:e5:c5:d8:f4:c5:b5:84:06:e9:
                    d4:fe:80:ab:79:4b:71:88:b3:d0:ee:a1:2b:73:91:
                    58:95:33:7e:d7:42:58:0e:f3:b0:10:8e:dc:21:12:
                    65:0d:fa:66:0d:89:c2:49:ab:72:a7:7a:c5:68:0f:
                    ae:de:2d:aa:84:62:73:7c:b5:f6:0f:89:d0:06:01:
                    c5:c7:b4:9c:44:7b:b9:ef:53:1e:38:31:9c:40:6e:
                    06:29:0f:73:fd:6e:02:49:de:fa:91:d7:65:21:df:
                    6f:dc:6f:30:c6:f5:42:72:46:ca:fb:2b:78:17:d4:
                    cb:2e:95:41:0e:2b:9e:25:d8:13:ba:e2:a9:f8:71:
                    e3:ae:49:2f:9c:09:02:21:95:85:01:7d:09:f7:33:
                    c2:40:ee:2c:8e:c1:1a:62:cf:3b:4c:94:8d:d2:83:
                    bd:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:08:C9:3B:C7:31:3F:57:8F:7C:66:78:E8:34:4F:59:A1:CA:8A:AF
            X509v3 Authority Key Identifier:
                keyid:AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/jAjJO8cxP1ePfGZ46DRPWaHKiq8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.247.160.0/22
                  188.247.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:7d:2e:88:b0:c7:ff:82:2c:cf:7a:3f:93:05:53:e4:18:a8:
         96:15:98:de:26:f8:ca:f3:00:64:4a:2c:c2:39:4f:21:cc:7f:
         29:ad:ef:96:7e:0f:fd:15:6c:75:e1:b1:13:b2:5c:7a:84:30:
         66:4b:eb:2c:e3:f1:07:1e:93:f3:82:78:a7:c4:b0:83:c9:a3:
         cb:0c:71:9f:69:19:fe:a3:7c:d8:02:c0:e8:43:60:44:70:88:
         3c:fd:39:61:1e:4b:d9:28:9f:bc:c4:e8:ec:83:be:90:87:78:
         31:d4:42:3c:19:14:90:ef:a7:0b:12:ce:81:6d:d6:a9:58:05:
         99:9f:89:39:eb:69:11:c3:66:42:e9:ca:67:f7:db:7d:e4:93:
         03:35:10:cf:f5:6a:8c:1b:72:66:21:24:2e:fc:24:d5:3a:e8:
         08:e3:17:4a:41:c1:2b:5c:b2:0b:2c:fe:06:40:ed:44:cc:70:
         49:ca:4f:21:be:77:c7:2b:79:e6:ef:f0:b7:cd:a2:02:20:52:
         c0:7a:62:35:be:5e:2d:03:e3:45:6c:fa:60:44:85:08:a8:07:
         16:20:33:30:83:e2:f3:ec:eb:b7:e9:ad:9a:89:cd:92:14:5b:
         13:3e:13:d4:8a:71:11:dd:15:dd:5b:1a:6f:c3:ad:9f:38:70:
         eb:9d:22:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:23 2024 by rpki-client on console-fra.rpki-client.org