Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/KFeuenNVaBCNpGrQCjf26sTo7yY.roa
File:                     KFeuenNVaBCNpGrQCjf26sTo7yY.roa (raw, json)
Hash identifier:          tq+st3ecw1bJWY8/IcZKocYzKk9HHKRxI2iZC44mESU=
Subject key identifier:   28:57:AE:7A:73:55:68:10:8D:A4:6A:D0:0A:37:F6:EA:C4:E8:EF:26
Certificate issuer:       /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Certificate serial:       065BBD5C
Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/KFeuenNVaBCNpGrQCjf26sTo7yY.roa
Signing time:             Tue 19 Apr 2022 14:08:33 +0000
ROA not before:           Tue 19 Apr 2022 14:08:33 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61052
IP address blocks:        79.133.104.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106675548 (0x65bbd5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
        Validity
            Not Before: Apr 19 14:08:33 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2857ae7a735568108da46ad00a37f6eac4e8ef26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:3a:80:04:a1:9d:f9:ee:53:16:53:c0:63:80:
                    ec:2c:99:2f:84:7b:f9:68:08:95:d8:d0:83:64:6f:
                    d9:10:26:28:be:4d:3f:77:45:8f:93:04:6d:0c:57:
                    ec:ed:7f:d8:98:5a:70:4e:13:09:b4:43:80:7d:f0:
                    6d:57:a7:98:59:37:06:ed:52:f8:e7:2e:ff:1e:a1:
                    ed:b2:cd:03:d6:64:5a:a2:9c:d8:95:05:dc:e2:ee:
                    01:3a:29:89:7d:3c:66:b9:a7:e6:48:4c:c1:7a:8a:
                    b9:43:8a:88:68:12:8b:28:e2:d9:0e:d3:a1:84:d9:
                    32:7e:20:2d:5f:16:f5:ee:f3:31:95:36:01:b1:a7:
                    c8:dd:87:36:86:6e:91:6c:93:44:44:04:99:5c:03:
                    48:4d:3b:d0:c2:0b:1b:4f:51:4e:e8:1d:46:e1:3b:
                    e6:5a:8e:ae:d5:42:92:88:8c:ad:dc:f3:e2:fd:49:
                    64:76:ba:42:94:ac:98:45:f0:5c:31:87:fe:4a:96:
                    8a:ec:a8:a1:99:aa:66:6e:81:80:81:13:79:79:a7:
                    f3:28:e3:43:d3:85:94:7e:dc:f0:21:8b:52:fd:c3:
                    e5:af:f0:06:03:c2:04:bd:05:10:fe:bc:23:c8:90:
                    9d:b4:46:f2:a9:d4:72:24:4a:03:aa:7a:e8:d0:42:
                    8a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:57:AE:7A:73:55:68:10:8D:A4:6A:D0:0A:37:F6:EA:C4:E8:EF:26
            X509v3 Authority Key Identifier:
                keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/KFeuenNVaBCNpGrQCjf26sTo7yY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.133.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:b5:04:1f:43:7e:7a:fb:fd:49:d9:8e:32:86:56:6c:30:08:
         c7:54:f0:9d:7e:17:ed:17:1f:e5:27:36:76:f0:19:8e:c9:1c:
         da:f2:76:4f:a6:23:c3:61:2d:7c:ba:79:4e:85:91:c3:de:10:
         4b:b6:c9:d5:fb:71:18:b7:33:92:2a:7f:27:a3:e0:10:50:9f:
         ea:3a:ad:9d:4c:d1:41:8b:ad:ba:2a:d0:ee:17:8f:2d:3f:18:
         5e:47:ff:5f:b9:4f:15:09:98:d7:53:fb:7f:62:76:dd:a6:7c:
         a8:37:fe:b8:a9:bf:b6:05:91:ad:3b:86:d9:4a:d6:a7:1d:42:
         d0:2b:21:85:16:5b:a4:1c:5c:fd:36:77:7c:21:6d:45:27:eb:
         e6:51:de:8d:fe:13:03:8f:9b:f8:e5:a0:20:1d:05:45:f2:d2:
         0e:f6:de:ec:7f:80:2c:c6:11:5a:88:c5:77:1e:1c:51:38:d6:
         5c:43:76:94:85:3c:73:ac:0e:5e:ac:f6:0c:c6:c3:e6:f8:68:
         f3:f3:47:2b:9e:df:53:bc:de:2a:e1:7f:18:d7:d3:7d:31:9b:
         65:7c:e0:48:2f:d5:e9:04:46:da:ee:a7:64:b5:df:d4:0b:8f:
         43:e6:1f:e5:ec:88:2e:21:f0:33:a8:a3:ff:8d:30:21:5b:c6:
         e3:0f:68:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:30 2024 by rpki-client on console-fra.rpki-client.org