Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/I1Ow3Wye4tOqApuqrNxBDRohxJ4.roa
File:                     I1Ow3Wye4tOqApuqrNxBDRohxJ4.roa (raw, json)
Hash identifier:          Vi68UVkV7fidsnsZARNHiauBCpBFFS2jnJH2eFcXBi8=
Subject key identifier:   23:53:B0:DD:6C:9E:E2:D3:AA:02:9B:AA:AC:DC:41:0D:1A:21:C4:9E
Certificate issuer:       /CN=3aba1172472ea80265d12982967de0a8b0bc5901
Certificate serial:       01820CE4616D57BA332A318A232FBA7C6EE4
Authority key identifier: 3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/I1Ow3Wye4tOqApuqrNxBDRohxJ4.roa
Signing time:             Sun 17 Jul 2022 16:01:09 +0000
ROA not before:           Sun 17 Jul 2022 16:01:09 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     399641
IP address blocks:        193.57.165.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:0c:e4:61:6d:57:ba:33:2a:31:8a:23:2f:ba:7c:6e:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3aba1172472ea80265d12982967de0a8b0bc5901
        Validity
            Not Before: Jul 17 16:01:09 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2353b0dd6c9ee2d3aa029baaacdc410d1a21c49e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:3e:d5:93:1a:5f:a6:ac:73:3c:17:8b:6f:e9:
                    74:d5:a0:ef:7a:de:c3:f4:71:5a:f0:4e:fb:58:9e:
                    8b:1e:17:82:0f:1c:b1:56:3c:a2:2b:fe:60:7f:ff:
                    33:d6:af:1a:0a:b7:d1:bb:08:bf:6f:5d:31:dc:44:
                    32:31:a0:22:6c:84:57:01:d7:1a:d0:92:f9:cb:6f:
                    9b:06:34:3e:35:7a:e7:da:ed:57:68:8b:c6:87:7b:
                    1c:21:6f:85:90:ff:0d:02:2b:ce:52:67:59:1a:1e:
                    09:ae:aa:cb:db:91:1c:bb:b7:13:18:28:c4:3f:4b:
                    19:82:40:ec:aa:2e:0b:eb:89:34:2d:63:74:25:f8:
                    fb:29:d8:3f:b6:db:05:c7:00:13:27:1c:bb:7b:6a:
                    df:24:92:23:1a:37:0b:a7:34:58:53:62:f0:20:02:
                    35:9e:1a:d1:53:b3:c6:a6:e8:84:b2:9c:4a:8f:6e:
                    0c:75:70:78:66:a6:97:d4:84:cd:4d:84:42:ab:78:
                    5c:bf:eb:56:ea:f0:3d:92:6a:44:6d:17:26:43:cb:
                    44:e7:5c:03:0c:70:e0:f8:2f:48:b1:4f:e9:38:9f:
                    6c:9c:9e:76:48:a3:05:8a:33:ac:8d:cb:75:93:ff:
                    ea:33:a4:e2:04:0c:8e:9f:d4:4f:91:02:37:99:73:
                    88:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:53:B0:DD:6C:9E:E2:D3:AA:02:9B:AA:AC:DC:41:0D:1A:21:C4:9E
            X509v3 Authority Key Identifier:
                keyid:3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/I1Ow3Wye4tOqApuqrNxBDRohxJ4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.57.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:61:7e:6f:f7:02:cc:6a:03:4d:b3:dd:0e:2f:37:35:38:71:
         ef:95:10:77:ce:dd:1a:a1:08:77:15:8f:f2:00:b3:91:82:04:
         82:a6:68:49:ca:3e:e7:54:a3:ca:8a:33:0c:f0:f9:09:23:ea:
         7f:63:68:9a:ee:ce:f7:cd:09:1e:82:3f:d5:5d:07:b7:ba:42:
         c1:54:67:d6:ec:b0:23:8a:67:90:fe:88:2a:7a:a5:a1:2c:c8:
         b6:1b:0d:37:52:32:91:4c:0d:1f:04:d9:b2:7f:ce:a5:9a:a6:
         86:f4:63:81:51:70:fe:7e:35:5f:bb:29:f0:85:b8:01:02:f8:
         98:66:8b:52:4e:4a:53:50:27:67:1c:32:52:1e:47:2d:cb:d4:
         5a:da:e4:15:a0:a6:bf:cf:28:80:bd:2a:55:4d:af:6f:5f:3e:
         6c:8c:9b:b1:df:36:f2:e0:28:26:47:90:1a:f3:a1:8a:56:20:
         cb:e2:30:d3:17:72:60:95:01:4a:ae:e2:cc:26:c8:88:0f:f9:
         b6:dd:81:db:12:f2:7f:70:1c:85:df:2f:61:23:97:10:0b:0f:
         e6:02:c5:ca:92:ce:bf:78:69:1f:4b:6b:20:80:81:f8:cb:4a:
         13:b9:ad:2d:5c:d5:7f:82:39:de:ef:fa:45:35:9e:e5:39:b2:
         58:c1:8d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:17 2024 by rpki-client on console-fra.rpki-client.org