Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/T3-GLxkxEWaE70Xk5h7m_Di7bVY.roa
File:                     T3-GLxkxEWaE70Xk5h7m_Di7bVY.roa (raw, json)
Hash identifier:          hdgLUw95CV45L+K9h/dLGZhUol+3mh5XmTdO1c3fi/w=
Subject key identifier:   4F:7F:86:2F:19:31:11:66:84:EF:45:E4:E6:1E:E6:FC:38:BB:6D:56
Certificate issuer:       /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial:       1B6D2C2F
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/T3-GLxkxEWaE70Xk5h7m_Di7bVY.roa
Signing time:             Sat 01 Jan 2022 10:02:42 +0000
ROA not before:           Sat 01 Jan 2022 10:02:42 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49180
IP address blocks:        194.88.56.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 460139567 (0x1b6d2c2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
        Validity
            Not Before: Jan  1 10:02:42 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4f7f862f1931116684ef45e4e61ee6fc38bb6d56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:b0:82:c4:e9:02:ae:30:1e:f4:63:10:14:b4:
                    cb:1c:0b:bf:a0:12:50:6e:d4:53:4f:73:e2:c3:71:
                    29:2f:24:e1:47:69:9d:df:20:ca:1d:5f:33:e3:ba:
                    d9:e9:c2:d6:c6:6a:44:83:a7:72:95:b0:e8:71:6e:
                    4b:f6:20:22:88:29:88:1e:ab:18:60:c4:e4:fd:9b:
                    97:54:2c:69:e7:ea:96:6f:fa:6d:4e:69:c6:80:bd:
                    53:e7:12:fa:2d:52:c4:1e:73:20:8d:68:10:76:af:
                    af:c4:6a:bd:11:76:7a:61:fa:2d:51:b9:43:fc:f8:
                    82:86:df:a7:48:e9:f8:27:e7:8b:6b:80:d4:62:bf:
                    61:3a:14:a7:bc:20:d6:8c:44:fb:ae:d6:e2:55:ae:
                    a6:f2:f2:0d:73:82:f5:7c:7a:99:f2:30:5f:22:2e:
                    0d:5a:36:b2:f0:52:e6:58:ea:75:78:5c:3d:39:4a:
                    80:d9:a2:45:52:2c:99:c7:88:be:8e:d3:e0:99:c0:
                    0b:b5:9e:bf:b9:91:b7:10:25:83:e7:78:6e:83:eb:
                    a4:b2:40:16:8b:a0:dd:03:e6:65:0d:a1:57:f6:8e:
                    db:36:8a:86:a7:ff:93:14:21:07:1b:ca:23:48:8d:
                    a6:4b:57:e1:86:20:e6:85:ee:88:21:95:0e:00:26:
                    0b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:7F:86:2F:19:31:11:66:84:EF:45:E4:E6:1E:E6:FC:38:BB:6D:56
            X509v3 Authority Key Identifier:
                keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/T3-GLxkxEWaE70Xk5h7m_Di7bVY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.88.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:ee:b0:54:d3:e0:90:c1:82:9a:03:d6:23:2a:0a:f8:9a:63:
         2c:d7:c7:15:06:be:d8:31:49:34:87:20:bc:20:12:36:9b:d0:
         ca:86:6a:51:71:74:75:48:0c:a2:c6:39:aa:64:f9:7f:d4:d3:
         53:a1:39:8d:27:28:ac:42:05:e0:cc:36:00:91:0f:90:55:bf:
         88:41:65:f9:bb:d6:39:e8:41:43:a8:d6:b8:50:c3:cb:2e:ba:
         20:5d:22:ba:94:4b:4e:b5:c1:e8:7e:20:79:16:0e:c6:91:3e:
         2b:6c:1a:a2:df:8b:79:75:5c:1a:c2:f9:f0:53:94:5e:24:5a:
         ad:45:bc:32:c1:d1:8e:dc:e2:84:3c:80:b4:3b:9c:c4:99:10:
         ad:ec:37:01:4b:37:84:d7:aa:b0:68:f2:45:d4:c7:dc:87:1b:
         5c:1f:76:8d:29:6e:42:49:fa:d7:d5:05:f2:5e:1e:1a:88:17:
         02:ab:9b:40:f4:18:3f:ab:bb:db:22:54:31:76:56:57:77:b1:
         be:fc:07:bf:46:4c:50:53:63:37:d9:d5:69:cc:0b:a7:d7:f9:
         bd:2b:69:78:c1:fb:f0:1e:ee:87:e9:eb:44:bf:84:be:92:c2:
         5d:22:ee:31:36:3a:25:43:1f:30:26:b6:9d:65:4e:14:eb:03:
         2f:55:74:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:47 2024 by rpki-client on console-fra.rpki-client.org