Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/8AgH6eanPTl8MesY8xWj2whvmjU.roa
File:                     8AgH6eanPTl8MesY8xWj2whvmjU.roa (raw, json)
Hash identifier:          mxfP/6fi6Vo/mfxoH1wQ5MjBqhNzR0u7Rv6ysNmylwA=
Subject key identifier:   F0:08:07:E9:E6:A7:3D:39:7C:31:EB:18:F3:15:A3:DB:08:6F:9A:35
Certificate issuer:       /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial:       018267E517B881A0D6B606C6E70B6C32574D
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/8AgH6eanPTl8MesY8xWj2whvmjU.roa
Signing time:             Thu 04 Aug 2022 08:07:23 +0000
ROA not before:           Thu 04 Aug 2022 08:07:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     134176
IP address blocks:        81.5.189.0/24 maxlen: 24
                          82.153.250.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:67:e5:17:b8:81:a0:d6:b6:06:c6:e7:0b:6c:32:57:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
        Validity
            Not Before: Aug  4 08:07:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f00807e9e6a73d397c31eb18f315a3db086f9a35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:50:87:d0:0a:c0:d9:77:1d:57:1e:9d:05:cf:
                    8b:98:3c:6a:42:f1:1f:06:dc:ff:a2:f1:c7:df:dc:
                    e6:e3:92:45:d4:fb:5c:45:17:3a:aa:6d:a6:5d:da:
                    d2:70:91:fa:e7:9f:71:70:0c:4c:b9:04:77:44:ef:
                    9f:d4:41:8e:2c:6b:e2:57:e4:36:a6:a9:4c:42:d6:
                    df:61:90:1f:ff:cc:d4:c0:61:01:95:21:8d:4e:79:
                    78:fa:58:37:81:6d:74:83:9b:df:ee:00:e0:28:a5:
                    d6:ea:cd:c9:cc:cb:c9:ce:3a:6d:44:be:e0:7a:74:
                    76:b8:32:40:4d:06:5e:0d:fd:7b:bd:02:2e:27:c5:
                    ad:68:f5:09:8e:5e:7c:7e:7f:f1:86:35:18:96:d0:
                    a1:77:de:73:7f:a8:83:76:0c:25:9c:a4:10:37:34:
                    18:e5:ef:8c:1a:bf:b8:dd:96:42:32:b0:47:84:21:
                    18:e8:a4:b5:2d:59:8d:9d:71:79:01:6f:c1:ce:41:
                    8a:17:c9:a9:bd:08:3f:53:0e:33:24:67:a7:f8:e8:
                    a9:bc:99:40:4c:19:e3:77:52:85:36:af:90:d6:21:
                    d6:b2:7a:39:81:01:f9:ab:b2:78:2d:f6:68:af:d5:
                    54:72:7b:88:42:58:62:df:5e:3d:dc:52:c6:04:60:
                    78:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:08:07:E9:E6:A7:3D:39:7C:31:EB:18:F3:15:A3:DB:08:6F:9A:35
            X509v3 Authority Key Identifier:
                keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/8AgH6eanPTl8MesY8xWj2whvmjU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.5.189.0/24
                  82.153.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:ef:25:01:7f:dd:ea:3a:26:f4:61:43:93:4a:80:47:51:64:
         25:c8:5e:17:71:ad:bb:61:14:75:81:d0:13:e3:b5:63:b4:80:
         24:0f:7b:eb:09:96:d3:cf:47:9d:7b:13:ec:92:61:4c:81:0e:
         cc:93:9c:b7:f8:9b:01:ae:00:e4:51:ee:c3:5e:68:75:24:a1:
         1e:b6:98:d9:aa:bd:be:8c:5d:0b:51:cc:b2:7e:fa:e8:c6:19:
         8f:c3:5c:69:6a:a7:e5:e8:80:84:b5:b2:11:f8:d8:b6:67:af:
         96:b8:b5:a2:16:7b:ba:0d:46:0d:47:bf:47:56:50:c8:a3:49:
         cc:73:b5:27:f9:84:bd:d8:4a:df:fb:59:38:fe:0e:2a:14:4d:
         2e:8e:85:50:62:f5:c7:22:4a:0d:5b:45:df:d9:f6:5f:83:b8:
         0b:11:15:23:35:68:d9:bd:ee:d1:78:a8:17:c2:64:8c:25:09:
         c9:e1:b0:a6:a1:f7:92:de:ca:9a:c7:a6:2e:43:73:b2:c1:6a:
         1f:36:a8:0d:b6:6c:96:52:da:51:92:f7:ce:54:b6:35:81:92:
         4f:5d:3e:f9:12:79:6a:c7:70:88:8b:be:4a:22:fb:57:1f:41:
         66:a3:23:10:9e:d1:da:59:53:05:10:c7:36:96:15:77:92:ce:
         68:87:08:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:14 2024 by rpki-client on console-fra.rpki-client.org