Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/n59A9ixF1DAmjg8t-F9po_Pylck.roa
File:                     n59A9ixF1DAmjg8t-F9po_Pylck.roa (raw, json)
Hash identifier:          JfTxQD1CLFVvLs9KE8TUZiJ59FsFO7AJd4BeVmJCzXY=
Subject key identifier:   9F:9F:40:F6:2C:45:D4:30:26:8E:0F:2D:F8:5F:69:A3:F3:F2:95:C9
Certificate issuer:       /CN=8777b5b36f66e13c4388c9934da507856515d073
Certificate serial:       01831C39F41A79891A9A94217DDFC0FE7E42
Authority key identifier: 87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/n59A9ixF1DAmjg8t-F9po_Pylck.roa
Signing time:             Thu 08 Sep 2022 08:31:43 +0000
ROA not before:           Thu 08 Sep 2022 08:31:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     62383
IP address blocks:        188.210.92.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:1c:39:f4:1a:79:89:1a:9a:94:21:7d:df:c0:fe:7e:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8777b5b36f66e13c4388c9934da507856515d073
        Validity
            Not Before: Sep  8 08:31:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9f9f40f62c45d430268e0f2df85f69a3f3f295c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:5b:1a:32:11:a0:bb:ab:1c:b9:ed:bf:fc:28:
                    d6:6c:54:d3:8a:7c:36:68:2f:1f:1c:d3:83:73:f7:
                    b8:ad:94:32:07:97:39:6c:81:fa:59:b1:3a:d1:80:
                    8c:10:4e:98:df:d9:73:7a:d1:fd:d8:74:b8:a9:c4:
                    2d:90:89:ca:d5:df:ac:2f:cc:95:c0:de:11:be:1f:
                    0f:27:d4:06:86:8a:f2:a8:80:24:df:f9:c6:9d:32:
                    08:6a:e2:07:2d:58:de:ae:b3:c3:32:65:f8:20:fa:
                    80:15:2d:d3:32:6b:8b:7f:d6:7c:f6:bb:6e:8b:15:
                    37:93:76:47:d2:ac:6c:cf:7a:6d:f7:eb:b4:fa:c4:
                    9e:85:6e:80:c0:f0:86:4b:59:d3:8c:85:c8:9b:34:
                    d9:05:60:6e:9e:06:8c:a0:67:77:bc:44:44:01:c7:
                    a3:cf:9c:dc:69:06:7d:c0:73:29:86:dc:79:dc:d9:
                    46:3c:3e:05:a8:53:44:3b:77:af:98:50:81:54:95:
                    77:37:9d:eb:38:0f:a4:6f:2b:c1:5e:f6:0c:8e:7c:
                    0c:ec:45:50:5e:c6:c4:f9:37:ad:c4:ae:1f:a5:34:
                    df:8c:e8:b1:fe:12:7d:ff:d7:65:6a:de:21:f1:75:
                    a0:bc:1e:2b:ff:e6:3f:db:d6:29:35:b5:2f:66:71:
                    83:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:9F:40:F6:2C:45:D4:30:26:8E:0F:2D:F8:5F:69:A3:F3:F2:95:C9
            X509v3 Authority Key Identifier:
                keyid:87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/n59A9ixF1DAmjg8t-F9po_Pylck.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.210.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:b8:76:48:8d:f3:8f:cf:04:29:60:66:cb:1d:dd:2b:ef:f6:
         d9:cb:6b:fb:d3:c5:10:bc:4f:cb:09:49:0d:e1:97:99:2b:d8:
         e6:9a:19:d6:d3:06:75:e3:e2:38:30:d7:c8:6f:40:68:42:82:
         41:1b:3c:b6:9c:6d:cd:4c:30:41:89:6f:0c:8f:1d:8a:e8:50:
         02:8e:7a:31:39:3c:68:b5:f4:28:3a:38:ae:b5:6c:4f:54:65:
         d7:57:ef:87:b5:0b:13:9d:cd:58:3f:67:1f:dc:be:90:b5:a6:
         21:ff:ed:6c:e5:c6:de:e7:63:1d:27:c4:c9:13:69:86:ab:2b:
         c0:89:03:d0:b4:b1:46:18:df:4c:fe:f9:50:a7:8d:9e:d3:d2:
         f3:11:70:15:88:d7:bb:66:69:cc:ab:96:36:7f:a3:86:c3:00:
         24:d5:23:65:38:f2:49:4a:fd:be:4f:e0:47:ec:8d:24:32:74:
         fd:e4:57:bc:05:f6:40:3f:fc:ae:c5:b9:89:2b:6f:69:2f:45:
         fd:23:a1:44:29:95:e6:b8:3b:df:ce:0b:ab:00:81:3c:53:68:
         67:01:4f:a0:50:cf:f1:2b:d1:89:03:82:75:7d:96:57:fc:22:
         95:0c:31:c1:bb:17:aa:d4:dd:20:e2:54:62:71:6f:30:5b:fd:
         17:4f:f1:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:29 2024 by rpki-client on console-fra.rpki-client.org