Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/TvXrYcifP9w5Hd7DoYEOch4CXD0.roa
File:                     TvXrYcifP9w5Hd7DoYEOch4CXD0.roa (raw, json)
Hash identifier:          NfN1ltw8YYicAaiF0GXLNJ7W9ArylHEGd23aQS2zhuY=
Subject key identifier:   4E:F5:EB:61:C8:9F:3F:DC:39:1D:DE:C3:A1:81:0E:72:1E:02:5C:3D
Certificate issuer:       /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial:       04DE3A4F
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/TvXrYcifP9w5Hd7DoYEOch4CXD0.roa
Signing time:             Sat 09 Apr 2022 17:17:50 +0000
ROA not before:           Sat 09 Apr 2022 17:17:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     270026
IP address blocks:        141.136.57.0/24 maxlen: 24
                          141.136.56.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81672783 (0x4de3a4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
        Validity
            Not Before: Apr  9 17:17:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4ef5eb61c89f3fdc391ddec3a1810e721e025c3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c0:3f:29:b6:e3:e0:3e:c8:8b:36:ce:26:ee:
                    77:6b:b6:7c:7a:f9:07:3c:b9:6a:75:d4:63:86:cc:
                    c3:82:67:4d:c4:4e:30:8c:03:28:ea:6e:9a:23:81:
                    48:0b:49:f3:9a:52:bc:c6:ae:eb:21:da:03:f8:52:
                    5d:84:64:d4:c0:be:7b:7e:74:5b:0c:5b:2f:ad:07:
                    ec:84:6f:f8:1a:5e:ff:2f:28:4c:00:86:d8:da:b6:
                    73:62:d8:d9:4a:00:58:a3:c0:4a:05:74:c3:c8:18:
                    22:49:90:1d:1d:d4:b0:71:ac:03:08:9f:1a:c7:3d:
                    c9:7c:48:4c:fd:37:17:dc:a8:1b:27:1b:37:9e:fa:
                    3e:0b:43:3d:56:c3:a3:29:e3:d6:a2:23:14:c2:c4:
                    8d:43:73:4b:62:37:17:aa:df:c9:c2:eb:ca:8f:f7:
                    01:06:8e:a5:77:ba:7b:b9:7b:41:25:36:e5:88:6c:
                    3a:cc:ae:3c:98:1f:43:01:fd:d9:29:3f:8a:db:e4:
                    8d:8e:f7:9d:e5:8b:71:29:62:71:5e:82:d1:76:37:
                    70:6e:8e:91:49:08:c9:37:05:25:b2:c9:82:70:ac:
                    26:72:05:a1:83:13:fe:63:fa:b5:f1:56:94:20:b1:
                    62:30:32:b5:b8:e4:fe:08:57:e4:57:98:59:bb:a6:
                    4a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:F5:EB:61:C8:9F:3F:DC:39:1D:DE:C3:A1:81:0E:72:1E:02:5C:3D
            X509v3 Authority Key Identifier:
                keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/TvXrYcifP9w5Hd7DoYEOch4CXD0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.136.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a6:ab:ab:01:4f:11:c4:88:07:10:28:07:ca:8f:c6:86:93:57:
         9c:22:0f:1a:92:a9:d9:49:c1:18:20:da:00:2b:26:e6:24:c7:
         b4:33:06:3d:4a:14:d9:94:61:6e:93:91:b9:3f:8a:ad:4d:0e:
         69:aa:f6:ce:00:19:6e:fb:a0:b6:a4:e4:87:20:45:44:81:09:
         81:04:8a:dc:ca:27:d4:73:ee:48:c5:ad:b6:84:35:b0:ef:2b:
         a3:7a:bc:b5:0e:29:51:11:9b:27:96:c5:97:83:31:81:fd:26:
         d4:98:02:7c:17:25:f8:d6:70:d3:1c:c8:4f:00:4f:39:52:1c:
         b2:a5:5f:8b:b2:5f:27:9e:05:21:34:68:f8:ac:a3:19:85:41:
         b7:b9:f6:31:f3:0e:2c:21:08:61:c3:a1:b7:fb:43:18:c2:94:
         43:c1:ba:37:9e:8e:71:b1:ff:46:34:a8:00:b8:f3:18:07:4b:
         cb:ca:4e:86:ec:89:3f:bb:6a:9a:47:00:44:1c:8a:28:1c:de:
         80:ee:48:d2:28:60:71:db:3f:a1:0b:e6:f0:00:28:90:e0:ce:
         d2:64:2b:32:ce:11:f2:16:1c:1e:28:e4:ab:14:d0:53:e0:9d:
         38:83:e5:9f:3d:92:fc:60:bd:c7:19:3c:2d:d9:d8:3f:2b:2e:
         60:2f:a2:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:56 2024 by rpki-client on console-fra.rpki-client.org