Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/a41c6d-f142-4c25-8997-63fae389a4db/1/A4HvMvWgI4eOhg-hiOVeKhsyRtE.roa
File:                     A4HvMvWgI4eOhg-hiOVeKhsyRtE.roa (raw, json)
Hash identifier:          pYKyl5Frk+QFUIzTIkOvArXomiBWUY/yUELbotSsfLI=
Subject key identifier:   03:81:EF:32:F5:A0:23:87:8E:86:0F:A1:88:E5:5E:2A:1B:32:46:D1
Certificate issuer:       /CN=5701528c2a2e2c46913c0b28ca3570f3880f1a56
Certificate serial:       0185626D321E63B95E067B739760CDA2409B
Authority key identifier: 57:01:52:8C:2A:2E:2C:46:91:3C:0B:28:CA:35:70:F3:88:0F:1A:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VwFSjCouLEaRPAsoyjVw84gPGlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/a41c6d-f142-4c25-8997-63fae389a4db/1/A4HvMvWgI4eOhg-hiOVeKhsyRtE.roa
Signing time:             Fri 30 Dec 2022 09:46:41 +0000
ROA not before:           Fri 30 Dec 2022 09:46:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     33813
IP address blocks:        193.242.124.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:62:6d:32:1e:63:b9:5e:06:7b:73:97:60:cd:a2:40:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5701528c2a2e2c46913c0b28ca3570f3880f1a56
        Validity
            Not Before: Dec 30 09:46:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0381ef32f5a023878e860fa188e55e2a1b3246d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:48:70:b6:b0:ba:2b:73:80:af:bb:d6:13:09:
                    c1:49:d9:7d:03:08:89:e4:83:bc:a4:e9:09:7a:d1:
                    e9:e2:12:42:68:89:4a:83:ea:a0:1d:93:78:a2:2e:
                    e2:0a:57:89:d3:31:5c:8d:a0:6e:bc:b3:9d:e3:99:
                    a3:16:31:82:b3:51:41:5d:06:65:a9:47:48:61:69:
                    cf:9c:e5:76:a1:1e:ce:47:a8:e1:3a:f0:d0:3e:18:
                    4c:bd:e1:83:c3:83:a8:47:9b:3e:e7:47:a2:5e:af:
                    01:db:26:a2:03:0f:24:0f:f0:30:6a:f1:90:27:b5:
                    01:d1:7f:bd:e4:d8:18:bf:0e:74:41:86:3d:4e:d3:
                    59:8e:96:88:dc:87:31:67:09:3f:08:f0:3f:49:28:
                    46:4a:a1:48:e5:6c:ca:be:b8:d6:97:ab:f6:c3:1c:
                    b8:f7:a1:aa:37:18:ce:38:1b:78:46:8e:47:82:2a:
                    aa:3e:d4:33:1d:88:1d:8d:7c:b5:10:ad:8f:df:f2:
                    07:4e:50:42:29:bd:2a:44:ca:01:cd:93:fa:71:5d:
                    53:64:90:d0:f1:5d:2f:5f:7c:81:e2:c3:ec:44:85:
                    fd:08:c4:f1:74:4b:2e:d5:78:2a:e3:39:3c:1a:82:
                    cd:fc:58:8f:89:61:f4:7c:76:93:de:3b:95:9f:01:
                    7c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:81:EF:32:F5:A0:23:87:8E:86:0F:A1:88:E5:5E:2A:1B:32:46:D1
            X509v3 Authority Key Identifier:
                keyid:57:01:52:8C:2A:2E:2C:46:91:3C:0B:28:CA:35:70:F3:88:0F:1A:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VwFSjCouLEaRPAsoyjVw84gPGlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a41c6d-f142-4c25-8997-63fae389a4db/1/A4HvMvWgI4eOhg-hiOVeKhsyRtE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a41c6d-f142-4c25-8997-63fae389a4db/1/VwFSjCouLEaRPAsoyjVw84gPGlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.242.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:2a:7a:c1:86:1d:72:98:af:1f:c3:3b:5b:12:11:ad:51:51:
         1d:1f:91:2c:e4:48:f1:31:d9:a6:65:49:ba:16:9f:88:35:26:
         8f:fc:f1:99:b8:5b:37:b7:55:f5:a0:c7:c1:f9:2b:fb:cf:5f:
         7b:5b:3a:c7:c4:0d:6f:66:78:5c:1f:a2:b1:f7:3b:76:af:88:
         25:33:67:e0:37:a3:1d:7c:e1:cf:b8:39:e6:31:4f:aa:3b:f6:
         4e:c8:bc:b2:d7:00:b0:0e:80:1f:7e:48:8e:45:c1:c1:4a:d2:
         15:3e:7b:21:9c:be:76:23:8b:4e:5f:3e:b7:51:73:f3:52:96:
         62:4c:67:52:5b:b3:bc:4e:a1:52:a8:0b:02:7c:c7:83:62:c3:
         50:86:60:6d:82:e8:3f:c4:26:3d:7a:cc:6b:ed:7d:68:9f:df:
         ac:12:0a:4f:88:3d:9d:8a:f2:b6:65:65:ec:63:c0:82:a6:23:
         1d:bf:13:6e:43:57:ed:75:49:4b:63:d0:8c:a1:92:a4:d4:f9:
         83:a1:13:74:e9:8a:ba:85:88:71:e4:67:b8:1d:b3:8a:59:8e:
         54:e5:7a:90:ac:aa:0c:41:97:43:53:11:cc:2c:b4:06:c6:e9:
         82:50:57:88:39:4d:cc:4f:e1:e0:a4:d3:fa:57:b8:c6:d0:fe:
         6a:82:55:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:36 2024 by rpki-client on console-ams.rpki-client.org