Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/wpQoq0ZazFBLlnk3OlJj5XtZArU.roa
File:                     wpQoq0ZazFBLlnk3OlJj5XtZArU.roa (raw, json)
Hash identifier:          TtaWfG3nHvi9Nnp+jRpm+TpohI8btDKv/lcpV+9MUsM=
Subject key identifier:   C2:94:28:AB:46:5A:CC:50:4B:96:79:37:3A:52:63:E5:7B:59:02:B5
Certificate issuer:       /CN=caece41cbc2c30626ef2a28d1839f2d6c4757f3f
Certificate serial:       07025A04
Authority key identifier: CA:EC:E4:1C:BC:2C:30:62:6E:F2:A2:8D:18:39:F2:D6:C4:75:7F:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/wpQoq0ZazFBLlnk3OlJj5XtZArU.roa
Signing time:             Sat 01 Jan 2022 09:57:42 +0000
ROA not before:           Sat 01 Jan 2022 09:57:42 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3215
IP address blocks:        193.26.29.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117594628 (0x7025a04)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=caece41cbc2c30626ef2a28d1839f2d6c4757f3f
        Validity
            Not Before: Jan  1 09:57:42 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c29428ab465acc504b9679373a5263e57b5902b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c3:aa:70:d8:32:e8:1b:43:97:0f:e4:35:e2:
                    37:3a:b3:0e:64:58:47:10:96:ff:1f:a4:52:e8:c6:
                    68:9a:7f:17:64:54:53:1b:7d:92:64:d1:11:6c:26:
                    30:d3:9f:99:17:01:1e:45:37:dd:42:e2:c3:a9:2f:
                    78:5c:f4:16:9b:ee:f5:d3:70:74:dc:d4:59:e5:b8:
                    43:c3:7b:c5:c3:0f:2d:01:f8:f1:3f:b7:e3:21:e8:
                    46:d7:98:64:db:a1:3f:5a:15:c5:19:48:ea:34:14:
                    4e:dd:c2:cc:2e:0c:85:fe:e8:0a:65:1c:cd:9e:94:
                    5f:a0:b4:0e:62:f5:19:11:4f:26:54:1e:10:89:1f:
                    01:97:f9:60:c9:e2:f6:ac:a3:9d:96:e2:f2:cd:a0:
                    88:86:00:59:3c:6b:81:99:d6:f2:38:27:50:cd:7b:
                    5e:eb:b5:37:5f:44:91:3e:cb:8d:aa:7b:16:6b:20:
                    59:dd:7f:ed:57:eb:82:7a:48:7c:f3:61:cf:48:19:
                    dd:c3:bf:18:d9:42:c6:8f:c7:10:85:da:8d:81:4b:
                    1b:4e:aa:e5:1a:5f:2f:dc:83:44:dd:2c:dc:30:eb:
                    ec:fd:28:44:95:9c:2a:70:10:4b:f5:17:ae:33:de:
                    93:b9:82:c3:f5:77:0a:64:2a:30:e2:3d:9c:4b:c0:
                    f2:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:94:28:AB:46:5A:CC:50:4B:96:79:37:3A:52:63:E5:7B:59:02:B5
            X509v3 Authority Key Identifier:
                keyid:CA:EC:E4:1C:BC:2C:30:62:6E:F2:A2:8D:18:39:F2:D6:C4:75:7F:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/wpQoq0ZazFBLlnk3OlJj5XtZArU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.26.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:e5:69:96:4f:f0:cd:10:51:86:e6:ed:97:55:e1:a7:34:37:
         e1:c4:21:ef:aa:46:cb:4f:dd:90:62:ff:55:38:c6:6b:93:e4:
         b3:81:7c:a7:af:4d:89:19:cb:a8:41:22:c9:52:07:5c:54:41:
         77:77:c3:e1:21:1a:c8:94:1c:3c:d7:ed:fc:1f:19:d7:4f:4d:
         42:8b:be:bc:11:d3:32:b2:e1:fe:46:ae:60:62:25:c3:b4:33:
         a7:77:c5:07:c6:1a:d1:f0:44:ef:e5:40:c3:92:e4:4d:4a:bb:
         d0:d5:dc:c5:c0:60:33:02:57:6e:a4:e7:f5:eb:d2:e7:d3:9e:
         41:bc:25:a6:66:11:80:6d:3b:8f:90:44:f9:4c:9b:aa:9d:d7:
         f3:50:d4:82:79:71:69:04:e7:fd:d8:a8:35:a0:69:8a:12:29:
         df:bb:e5:65:ac:b6:85:62:48:20:54:3b:53:70:6a:21:64:f0:
         10:d7:6e:d8:5d:e1:07:80:4a:1e:cd:4d:cb:e4:32:cc:11:37:
         dc:d7:3c:14:85:51:d7:99:18:21:d2:75:fa:d9:b1:2a:58:5b:
         5a:6a:2e:fb:7a:e0:fe:f8:f0:75:a7:0a:49:06:be:11:34:31:
         ae:81:08:5e:1a:e1:1f:2b:f7:41:09:c4:2d:d0:28:2a:c2:06:
         5d:b1:3a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:12:13 2024 by rpki-client on console-ams.rpki-client.org