Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/b041a6-2911-40dd-b6bb-1d08c267ed9e/1/1-Wd21boUdfNQ18ZeDAxfYrlsYtY.roa
File:                     1-Wd21boUdfNQ18ZeDAxfYrlsYtY.roa (raw, json)
Hash identifier:          wYUbfJsmSkjY1yqugU8ltHpFa83OIuWAXiH68KA0fmQ=
Subject key identifier:   F9:67:76:D5:BA:14:75:F3:50:D7:C6:5E:0C:0C:5F:62:B9:6C:62:D6
Certificate issuer:       /CN=ab0a843846156f08e2d8d7bfc91ab350534b9b8a
Certificate serial:       5C5080
Authority key identifier: AB:0A:84:38:46:15:6F:08:E2:D8:D7:BF:C9:1A:B3:50:53:4B:9B:8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qwqEOEYVbwji2Ne_yRqzUFNLm4o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/b041a6-2911-40dd-b6bb-1d08c267ed9e/1/1-Wd21boUdfNQ18ZeDAxfYrlsYtY.roa
Signing time:             Fri 28 Jan 2022 08:17:08 +0000
ROA not before:           Fri 28 Jan 2022 08:17:08 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210393
IP address blocks:        178.211.158.0/24 maxlen: 24
                          2a12:f480::/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6049920 (0x5c5080)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab0a843846156f08e2d8d7bfc91ab350534b9b8a
        Validity
            Not Before: Jan 28 08:17:08 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f96776d5ba1475f350d7c65e0c0c5f62b96c62d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ec:59:f6:90:04:3a:9f:d0:23:fd:9a:49:2e:
                    1a:6b:72:4f:b4:6c:93:97:29:56:7c:73:54:35:f6:
                    37:03:28:3c:3d:e1:ed:56:49:80:12:ed:45:c7:ff:
                    f2:dd:62:e9:59:fd:eb:89:39:17:95:85:f8:a2:e7:
                    5e:f8:5d:fd:62:01:1d:20:2a:75:61:4e:fc:92:11:
                    b3:ef:89:0c:c0:73:fb:35:93:c0:d9:76:d9:c4:ce:
                    3a:46:2a:c4:b7:ec:6e:5f:57:16:fd:90:25:8b:e6:
                    f2:82:a9:38:7d:dd:f5:9e:55:9b:5c:be:f4:fc:61:
                    7b:82:8a:01:7c:fe:da:f2:4b:bb:ca:87:84:9d:e1:
                    98:94:83:4c:e0:5a:54:e9:87:c7:b8:f0:7c:64:cd:
                    dc:95:17:01:db:18:71:59:53:d5:73:fa:37:6f:63:
                    a5:10:1d:67:2b:3a:9c:d0:26:e9:b6:a0:3c:1c:81:
                    8c:9f:f5:a3:6f:d6:0d:1e:1e:69:f0:d3:af:c8:85:
                    7e:65:73:9b:19:b8:85:97:23:c7:2a:19:a2:66:35:
                    d8:3b:d3:26:9a:3f:fd:bc:77:36:16:03:97:98:40:
                    54:cd:11:59:85:e2:3a:12:32:ce:73:97:b6:3c:70:
                    44:6f:73:94:68:73:bf:70:b4:c6:cd:73:a6:29:ad:
                    4c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:67:76:D5:BA:14:75:F3:50:D7:C6:5E:0C:0C:5F:62:B9:6C:62:D6
            X509v3 Authority Key Identifier:
                keyid:AB:0A:84:38:46:15:6F:08:E2:D8:D7:BF:C9:1A:B3:50:53:4B:9B:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwqEOEYVbwji2Ne_yRqzUFNLm4o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b041a6-2911-40dd-b6bb-1d08c267ed9e/1/1-Wd21boUdfNQ18ZeDAxfYrlsYtY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b041a6-2911-40dd-b6bb-1d08c267ed9e/1/qwqEOEYVbwji2Ne_yRqzUFNLm4o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.211.158.0/24
                IPv6:
                  2a12:f480::/29

    Signature Algorithm: sha256WithRSAEncryption
         7e:31:27:44:20:d9:18:7f:04:fe:80:6b:ed:0d:e6:3b:2f:d2:
         06:20:08:fe:c5:ee:71:8e:a6:44:b6:1a:9d:9b:49:06:bf:5c:
         30:7b:b6:20:51:bc:f0:30:21:f2:7c:82:99:5f:51:8d:91:4b:
         42:e1:09:a1:f2:78:74:08:6c:bc:81:23:ae:f2:dc:88:17:ac:
         81:53:49:a2:51:f2:f9:35:ac:fb:38:7f:b4:80:5d:d3:38:44:
         10:0b:f3:fd:e5:11:ae:02:86:11:cd:42:f1:ae:96:6c:0f:ae:
         7b:8e:d1:91:0c:f6:05:b7:f2:56:c2:77:c9:15:09:ec:e3:28:
         58:ef:b6:75:bc:9d:cd:aa:9a:85:64:de:7a:08:4d:19:c5:ba:
         6f:0b:9d:92:b6:20:18:6a:55:30:f5:44:47:33:50:35:f1:9f:
         42:87:4d:e4:80:67:21:24:f0:a6:12:03:ec:80:e7:9a:a0:c3:
         0e:25:d1:d1:10:76:8c:3b:b8:6a:30:c9:8f:1d:39:d9:00:3c:
         86:b0:7d:ac:0b:49:90:79:17:8e:49:c9:a4:9d:ba:57:d0:d9:
         7b:0e:94:7b:b1:83:0a:09:2c:f9:e8:27:fb:58:d5:55:5e:49:
         cd:0a:c1:b6:3a:dd:d4:c3:83:1f:1f:dc:34:02:f9:d3:f1:43:
         99:4b:88:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:17 2024 by rpki-client on console-fra.rpki-client.org