Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/do9dYsi01p_gskDqka_aWzBeblM.roa
File:                     do9dYsi01p_gskDqka_aWzBeblM.roa (raw, json)
Hash identifier:          N73BDHO5jUzn0AqA3e/e5QO6fCrBzOK2d6KF/JhTnQ4=
Subject key identifier:   76:8F:5D:62:C8:B4:D6:9F:E0:B2:40:EA:91:AF:DA:5B:30:5E:6E:53
Certificate issuer:       /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Certificate serial:       01B60B8E
Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/do9dYsi01p_gskDqka_aWzBeblM.roa
Signing time:             Thu 27 Jan 2022 09:01:07 +0000
ROA not before:           Thu 27 Jan 2022 09:01:07 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1239
IP address blocks:        178.159.94.0/24 maxlen: 24
                          185.238.90.0/24 maxlen: 24
                          185.238.88.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28707726 (0x1b60b8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
        Validity
            Not Before: Jan 27 09:01:07 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=768f5d62c8b4d69fe0b240ea91afda5b305e6e53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:75:03:ae:eb:b8:10:40:05:c2:42:75:81:8f:
                    d2:e7:91:d3:fa:09:2a:10:af:85:59:85:77:f5:3a:
                    ee:c3:db:66:e2:dd:e3:6c:09:ef:ab:5e:65:cc:c4:
                    98:90:d8:0a:de:56:6c:17:cc:6a:45:c1:58:a0:0c:
                    58:ea:7c:1b:3b:be:9f:f1:2f:90:f2:cd:17:81:7f:
                    d6:13:b9:ab:65:15:22:de:1f:7c:98:9c:c5:9f:9f:
                    80:94:33:10:62:b0:d3:b9:99:92:47:75:a9:c4:41:
                    c5:45:23:d4:4d:da:37:a4:6e:29:a6:6c:30:96:27:
                    4b:1b:65:43:64:d8:6f:10:29:e5:68:24:54:7a:86:
                    85:31:c7:07:d9:4f:b4:0b:cb:5f:4e:d2:16:a1:78:
                    59:ee:d3:82:5b:23:31:92:f3:0b:5e:66:1f:b6:b5:
                    f3:45:e9:ef:fa:7d:70:0a:1d:66:df:bf:4b:9d:f1:
                    26:54:a1:39:59:b7:39:b6:f3:d4:da:a1:aa:0b:29:
                    b0:63:18:12:89:79:7c:0b:f3:8a:34:d8:f8:8d:e6:
                    9b:aa:37:5e:43:e9:f4:91:4e:cc:bb:09:c9:dd:b2:
                    77:65:dd:bb:6c:cb:2e:5e:e7:92:e0:e8:a2:8a:be:
                    5d:c4:72:38:f5:16:33:79:8c:9f:ef:5f:c1:5b:72:
                    e0:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:8F:5D:62:C8:B4:D6:9F:E0:B2:40:EA:91:AF:DA:5B:30:5E:6E:53
            X509v3 Authority Key Identifier:
                keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/do9dYsi01p_gskDqka_aWzBeblM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.159.94.0/24
                  185.238.88.0-185.238.90.255

    Signature Algorithm: sha256WithRSAEncryption
         d2:59:f2:45:06:20:9a:54:38:77:87:ce:0b:22:16:2d:ff:aa:
         d5:d3:55:52:7b:61:04:64:58:16:d4:60:0b:d4:d2:64:f9:26:
         f3:8f:9c:9e:b3:e2:08:41:15:d3:2b:97:72:43:eb:33:5c:15:
         fd:0c:cc:47:55:80:09:c5:31:a0:08:a2:8c:ff:b9:e8:35:b7:
         44:08:0a:89:94:7e:fc:98:34:28:e0:3c:4a:9f:95:84:4c:6c:
         fc:bb:07:2e:18:c5:0e:ea:07:77:52:df:38:24:d7:39:f7:d4:
         90:44:00:4f:b3:c4:a3:d7:ea:1f:36:77:95:af:34:c9:2b:0b:
         23:3c:5e:4d:91:99:99:55:78:3a:65:27:07:14:f3:42:7e:8e:
         80:f2:a8:d4:c0:1e:7a:50:b1:54:eb:e2:16:a4:9d:7a:38:f3:
         f5:c2:30:16:8d:5a:15:d6:12:7e:a2:f9:fc:ce:a9:7f:85:06:
         c7:82:2c:46:f3:85:2c:ce:a5:45:fe:cc:7a:e0:f7:fc:ad:8f:
         24:8e:d4:d2:df:e6:55:b3:64:4d:48:55:64:84:a8:a4:87:82:
         a3:45:cb:fc:fe:63:81:7d:84:27:e9:19:cd:bf:17:9c:50:ec:
         74:de:e3:35:15:14:5a:fb:b1:31:43:57:2b:6a:5e:b6:7f:7f:
         2a:25:72:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:18 2024 by rpki-client on console-ams.rpki-client.org