Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/VhH3fFUaZDZUj4A7UfyK-dHJEUw.roa
File:                     VhH3fFUaZDZUj4A7UfyK-dHJEUw.roa (raw, json)
Hash identifier:          MTyUc87WO8qdWl8bKly7LI4fwyQmr3spNK7yKw7j1lQ=
Subject key identifier:   56:11:F7:7C:55:1A:64:36:54:8F:80:3B:51:FC:8A:F9:D1:C9:11:4C
Certificate issuer:       /CN=4384f6fa6decced5578a85a51e0bd65701ea34ec
Certificate serial:       089EDE48
Authority key identifier: 43:84:F6:FA:6D:EC:CE:D5:57:8A:85:A5:1E:0B:D6:57:01:EA:34:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q4T2-m3sztVXioWlHgvWVwHqNOw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/VhH3fFUaZDZUj4A7UfyK-dHJEUw.roa
Signing time:             Sat 01 Jan 2022 14:55:27 +0000
ROA not before:           Sat 01 Jan 2022 14:55:27 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     41327
IP address blocks:        5.183.110.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 144629320 (0x89ede48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4384f6fa6decced5578a85a51e0bd65701ea34ec
        Validity
            Not Before: Jan  1 14:55:27 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5611f77c551a6436548f803b51fc8af9d1c9114c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6d:70:93:a9:9e:47:28:90:50:fe:66:e9:5d:
                    7d:9c:2b:99:46:07:3a:f2:ca:83:23:44:52:dc:51:
                    3e:9e:f7:bd:68:de:53:61:fb:d4:0d:eb:34:2d:c2:
                    64:ec:d4:69:3d:e9:6b:4e:2a:90:97:55:6e:a1:33:
                    05:ae:c5:75:7b:af:af:b4:0b:25:34:3f:fa:f8:ac:
                    e9:29:f9:52:e3:9d:b1:d1:bb:d3:8c:ce:63:1c:b7:
                    3f:8e:66:b2:e3:3e:62:9e:ae:1f:26:2e:ec:7e:66:
                    6f:41:91:6f:e7:d4:83:29:fd:40:06:2e:fd:a1:61:
                    72:89:f1:48:60:99:10:af:8f:48:00:22:20:1e:ed:
                    68:0d:75:93:78:bc:8d:50:41:2d:5c:3a:ff:80:d0:
                    fa:35:23:7f:df:90:50:9d:cb:d9:50:77:5c:21:5f:
                    3c:a8:8e:64:38:bf:0d:e2:44:21:ea:87:b8:1f:9b:
                    24:c2:bd:3f:15:7a:dc:a2:43:4d:39:95:03:de:df:
                    a8:c5:a7:63:2f:7a:12:1b:52:20:a6:d9:af:a1:0d:
                    ec:9a:10:da:b5:14:7d:7a:f6:01:02:f1:b5:34:cc:
                    15:58:c3:75:29:ef:24:55:c9:30:4d:30:0e:c8:dc:
                    a4:0d:2e:26:15:12:d3:86:85:91:a5:9b:b6:5f:e0:
                    5d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:11:F7:7C:55:1A:64:36:54:8F:80:3B:51:FC:8A:F9:D1:C9:11:4C
            X509v3 Authority Key Identifier:
                keyid:43:84:F6:FA:6D:EC:CE:D5:57:8A:85:A5:1E:0B:D6:57:01:EA:34:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q4T2-m3sztVXioWlHgvWVwHqNOw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/VhH3fFUaZDZUj4A7UfyK-dHJEUw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/Q4T2-m3sztVXioWlHgvWVwHqNOw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.183.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:8a:88:1c:fb:f7:8c:34:45:29:43:56:36:63:fc:7a:91:95:
         bf:4f:07:ca:98:f4:0d:13:f1:53:f6:c6:01:03:50:0c:79:7c:
         87:7b:61:73:59:04:24:95:7f:79:cc:7e:67:f8:e3:46:3a:03:
         fc:40:64:43:7e:dc:f0:73:95:25:28:79:b8:55:ac:e9:09:4a:
         10:7f:23:66:53:aa:53:04:ec:7f:e9:63:b3:05:91:b7:b2:c7:
         fd:54:f2:b9:9f:48:bc:5b:ff:0c:26:68:25:a0:29:73:59:f9:
         97:03:80:12:35:e9:01:c8:42:30:d5:27:77:74:5c:72:d4:4c:
         65:3f:1d:0e:20:cf:51:17:3c:38:b4:de:35:ff:3d:3c:e6:33:
         05:2b:2c:f4:0c:c8:1e:43:02:d4:2e:6a:c5:0a:2a:ce:b7:5d:
         eb:01:93:db:40:5c:79:43:5f:34:10:16:b6:00:57:11:8a:76:
         ad:a8:2a:73:b2:21:40:17:b5:7f:fb:cb:ad:a5:4f:2e:00:63:
         5a:f4:94:10:3d:7a:d1:b5:ab:ab:cb:67:91:2d:a2:7d:2f:13:
         ed:8d:7d:0c:cd:c9:b7:4f:fe:ad:e6:fc:41:3d:54:e0:4b:62:
         5e:e7:72:ca:53:df:7a:2d:28:15:d8:54:af:45:04:c5:de:a6:
         68:8a:43:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:54 2024 by rpki-client on console-fra.rpki-client.org