Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/pdVUEQHxY_df4PUd6PWckxrPox4.roa
File:                     pdVUEQHxY_df4PUd6PWckxrPox4.roa (raw, json)
Hash identifier:          uSiZp+emHAUX/GPVLE1RKaw1MKkUXhg2/dE/lKNKKP8=
Subject key identifier:   A5:D5:54:11:01:F1:63:F7:5F:E0:F5:1D:E8:F5:9C:93:1A:CF:A3:1E
Certificate issuer:       /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial:       1802A353
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/pdVUEQHxY_df4PUd6PWckxrPox4.roa
Signing time:             Tue 19 Apr 2022 13:10:03 +0000
ROA not before:           Tue 19 Apr 2022 13:10:03 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208356
IP address blocks:        188.72.90.0/24 maxlen: 24
                          188.72.91.0/24 maxlen: 24
                          188.72.88.0/24 maxlen: 24
                          188.72.125.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 402826067 (0x1802a353)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
        Validity
            Not Before: Apr 19 13:10:03 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a5d5541101f163f75fe0f51de8f59c931acfa31e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d8:8e:5d:06:27:1f:1f:ad:b1:fa:48:0a:10:
                    97:7b:59:4d:6e:d7:82:99:fd:0e:33:66:a5:61:32:
                    84:d3:26:fe:93:f3:1e:3b:28:36:d8:8f:8a:25:4e:
                    6e:6c:b5:60:06:af:74:44:f9:98:ba:e8:b3:2e:ba:
                    56:11:9e:62:55:e5:ac:4c:e4:25:1a:4f:20:47:a0:
                    6d:f9:e2:d5:97:26:d6:ae:25:22:e9:47:81:06:cc:
                    63:13:2b:ad:5e:da:72:17:6b:e2:d4:80:0b:5d:e2:
                    6f:dc:11:ec:7c:05:05:d9:cd:aa:7c:ba:20:fc:19:
                    a4:31:1d:46:6c:fb:c8:e1:fb:32:ea:94:45:ce:c9:
                    1f:f0:04:13:6a:d1:95:05:e9:45:d6:9d:24:f0:58:
                    ab:1e:6e:0a:0a:4d:79:dd:87:40:4c:47:31:75:93:
                    22:f5:0b:9d:65:b0:ec:fb:1a:af:51:6e:71:de:1a:
                    33:fd:74:45:8d:8f:4e:96:82:91:28:c6:42:29:31:
                    8a:76:70:a1:36:e8:99:8e:40:0a:2a:ee:00:68:bb:
                    41:23:ae:a5:0c:12:68:ba:de:35:07:5c:7f:6b:1d:
                    46:91:fa:49:e3:2f:1e:e5:26:e3:f0:e9:0f:05:fc:
                    23:1d:b5:a6:b1:f7:cb:b2:79:6c:1f:00:4b:70:26:
                    ac:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:D5:54:11:01:F1:63:F7:5F:E0:F5:1D:E8:F5:9C:93:1A:CF:A3:1E
            X509v3 Authority Key Identifier:
                keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/pdVUEQHxY_df4PUd6PWckxrPox4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.72.88.0/24
                  188.72.90.0/23
                  188.72.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:27:47:78:6a:8f:2d:fd:ba:90:03:94:42:45:ea:0d:1a:40:
         81:1f:ac:d2:21:fc:a9:90:b7:73:11:83:67:51:e4:07:04:7b:
         c5:10:8a:70:1f:e9:b5:a9:b0:77:4a:e9:44:37:30:32:de:cb:
         89:02:30:43:df:e1:2f:de:85:22:cd:c4:f3:c5:f8:b5:dd:b6:
         fd:86:01:7f:e7:ae:fd:d6:61:a9:45:36:c2:32:f5:6b:ee:1d:
         24:58:b7:26:b6:fd:02:ba:69:d7:c3:7a:24:52:5a:89:df:d7:
         21:1a:47:5c:a1:5c:e1:85:76:ba:41:5a:c6:42:86:22:a1:52:
         3a:7b:4c:3e:08:f2:de:02:eb:6e:a4:eb:12:16:54:81:92:05:
         ba:f8:c7:cf:f1:d3:a0:de:67:f4:6f:19:69:28:a1:08:6f:2e:
         3f:21:67:93:83:d5:a9:9a:60:2e:27:13:a3:12:1f:3b:e5:b0:
         36:28:0d:d4:5e:7b:bb:d0:f0:01:3c:3f:c8:98:75:b6:f8:e2:
         56:6e:e2:92:72:0d:99:e1:19:7e:a6:e4:a1:43:5f:c2:c3:9d:
         dc:c5:fb:63:f8:9a:54:55:a9:e5:70:26:c2:5e:f0:64:d0:73:
         07:6e:84:8d:1e:e4:5e:46:ed:7c:d1:b0:6e:26:f1:42:2a:7a:
         30:d6:d0:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:38 2024 by rpki-client on console-fra.rpki-client.org