Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/hO3UStNw_p20TFEjxOfNeJgA3Uo.roa
File:                     hO3UStNw_p20TFEjxOfNeJgA3Uo.roa (raw, json)
Hash identifier:          cr828MQKmx7FOD91PVz+O9EpYlRleBjvRKmCuZz6rSU=
Subject key identifier:   84:ED:D4:4A:D3:70:FE:9D:B4:4C:51:23:C4:E7:CD:78:98:00:DD:4A
Certificate issuer:       /CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Certificate serial:       03F1A63C
Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/hO3UStNw_p20TFEjxOfNeJgA3Uo.roa
Signing time:             Wed 19 Jan 2022 15:32:52 +0000
ROA not before:           Wed 19 Jan 2022 15:32:52 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     46562
IP address blocks:        188.74.180.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66168380 (0x3f1a63c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26
        Validity
            Not Before: Jan 19 15:32:52 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=84edd44ad370fe9db44c5123c4e7cd789800dd4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:25:2e:db:5b:5b:56:9d:57:8c:2f:1d:13:ce:
                    91:5b:0b:08:6f:35:5c:84:1d:6b:34:ed:89:ff:17:
                    86:71:7e:37:93:ef:25:92:10:c9:8b:5a:21:5d:b5:
                    aa:c5:0f:dc:ba:e9:95:39:9e:6c:1d:e8:14:38:db:
                    31:12:49:38:f3:66:3d:77:d8:08:84:00:54:65:5f:
                    62:fa:73:30:c8:e9:6a:35:cc:db:2d:65:4b:a7:c6:
                    db:c5:10:3f:8f:33:94:19:62:a6:7f:4a:27:8e:95:
                    89:52:c2:b9:68:7a:98:19:fc:af:11:c8:3b:99:2a:
                    3b:dc:87:0d:ce:83:f6:57:8d:32:48:16:56:81:08:
                    0a:b9:53:17:45:51:3e:cf:ee:9b:e3:ff:41:e0:1c:
                    a4:3d:81:42:47:96:ad:2a:85:7c:3d:3f:fe:25:60:
                    38:ae:1d:be:3f:06:64:1f:c6:74:0c:73:ed:b5:54:
                    64:d9:80:cf:26:71:bc:12:77:25:e8:8c:93:5c:18:
                    18:aa:77:73:cd:ea:ec:5d:47:2d:a8:06:74:d8:b2:
                    c8:da:cb:a5:6a:a6:19:32:51:e9:26:11:0f:a2:0f:
                    d1:a5:57:16:47:f7:2c:1b:22:17:f7:60:83:3d:a4:
                    1f:bb:8d:d6:f1:3f:b8:2c:e9:0f:22:8f:f9:e5:45:
                    44:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:ED:D4:4A:D3:70:FE:9D:B4:4C:51:23:C4:E7:CD:78:98:00:DD:4A
            X509v3 Authority Key Identifier:
                keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/hO3UStNw_p20TFEjxOfNeJgA3Uo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.74.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:49:c4:14:b0:be:ec:08:4e:f8:30:7a:c3:d9:16:40:33:94:
         62:d6:23:2a:28:ed:74:f7:e3:c6:df:ac:1e:b6:2e:21:b2:d1:
         59:9f:fc:fb:2b:60:f3:9a:7d:0c:d8:67:88:00:48:20:b9:5c:
         f1:35:ab:39:74:43:38:ba:30:07:d0:e2:64:59:ec:db:59:ea:
         b8:51:59:cc:e6:f6:c7:a2:a4:58:82:31:56:9e:1f:8a:97:79:
         5a:83:71:a7:af:2c:28:7a:bd:d7:4d:65:20:51:b3:67:4e:0f:
         41:bc:92:f7:f6:1b:1a:ba:2f:10:d4:8e:cc:85:dd:e5:37:92:
         ff:66:76:1c:31:57:b4:7d:98:79:7f:92:01:75:5d:72:1a:a0:
         46:4c:ad:57:75:c8:bb:c9:2f:2a:27:2e:7e:de:52:78:48:9d:
         bd:d4:ad:ce:be:31:82:5c:07:99:4a:df:95:b6:88:76:60:7c:
         42:7d:3f:d2:6d:58:0f:f9:5a:93:48:d4:e3:fb:70:f5:8b:d7:
         5d:01:9d:51:1a:9e:99:d2:1c:23:08:ea:09:5c:94:af:ef:46:
         05:9f:93:b0:e7:6d:73:37:55:7d:fd:73:70:dd:20:ba:30:68:
         88:05:b3:cb:18:fc:df:39:f4:0e:82:f8:51:d5:46:06:59:10:
         2f:cf:dc:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:50 2024 by rpki-client on console-ams.rpki-client.org