Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/eJsQrZQh7_dZPDrNBkgxcqJXPew.roa
File:                     eJsQrZQh7_dZPDrNBkgxcqJXPew.roa (raw, json)
Hash identifier:          dYuES5huHxFJm+aTgsMaJL1frW/gKHZEf3zYpWUmXuU=
Subject key identifier:   78:9B:10:AD:94:21:EF:F7:59:3C:3A:CD:06:48:31:72:A2:57:3D:EC
Certificate issuer:       /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Certificate serial:       01821A698366499E1086172E089785F226CA
Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/eJsQrZQh7_dZPDrNBkgxcqJXPew.roa
Signing time:             Wed 20 Jul 2022 07:01:38 +0000
ROA not before:           Wed 20 Jul 2022 07:01:38 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211984
IP address blocks:        213.33.79.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:1a:69:83:66:49:9e:10:86:17:2e:08:97:85:f2:26:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
        Validity
            Not Before: Jul 20 07:01:38 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=789b10ad9421eff7593c3acd06483172a2573dec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e7:3e:86:05:d3:0c:f1:66:9f:36:e5:23:08:
                    f9:c3:7c:55:07:60:77:c7:e1:6e:c9:55:0a:ab:08:
                    67:da:37:ca:8b:6b:dd:38:9a:56:eb:c8:1a:8f:c0:
                    14:5f:80:4b:14:9b:87:f7:c8:7b:3b:aa:d7:d3:64:
                    8a:72:d2:7d:84:3c:a1:4d:6b:cd:13:2d:6d:35:84:
                    17:25:1c:11:a5:d8:c0:8b:93:18:d9:e0:ad:8f:b7:
                    48:d7:d1:52:e9:5d:df:39:52:d3:0f:32:e8:7f:f7:
                    f7:88:da:fa:48:67:05:f6:87:d5:b2:12:9d:7d:fa:
                    02:cd:9f:86:b3:6f:88:57:4c:a8:35:76:da:64:0e:
                    f0:bd:b7:ff:a4:d5:7d:31:f2:8e:ca:66:60:11:07:
                    71:16:75:b8:e0:80:b8:c8:de:c1:69:f0:37:ae:da:
                    ed:f3:81:44:ae:ae:e2:2e:56:9f:29:9e:29:2d:2f:
                    8f:33:b0:16:aa:69:80:a7:25:ba:6c:e2:e6:38:32:
                    81:3e:73:04:30:11:7a:8a:18:38:9b:91:fe:46:8b:
                    cf:0e:6e:f0:8d:9e:73:36:1f:55:a3:72:2d:37:6b:
                    04:94:13:c6:46:93:e8:47:8c:11:53:ac:05:a2:c6:
                    d2:55:a5:f7:95:98:23:de:00:fb:60:2e:a2:6b:bc:
                    01:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:9B:10:AD:94:21:EF:F7:59:3C:3A:CD:06:48:31:72:A2:57:3D:EC
            X509v3 Authority Key Identifier:
                keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/eJsQrZQh7_dZPDrNBkgxcqJXPew.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.33.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:80:32:32:80:49:53:f0:b1:d3:45:2d:eb:a1:94:8b:5d:42:
         29:dc:fb:b9:25:44:51:89:82:0e:11:47:a3:6e:4c:33:23:72:
         69:4a:74:ef:b4:ed:7e:b3:85:82:80:f5:e0:8b:91:17:00:ae:
         5b:23:01:73:5b:da:94:02:60:a1:1e:9c:ac:c4:bd:5f:64:7b:
         fa:15:89:e6:bc:5b:55:36:d2:6e:00:b7:0f:96:3c:32:1f:53:
         bd:51:f1:6e:3a:85:d8:a6:a2:e4:1a:8a:9c:22:fb:0b:57:26:
         7a:6b:d2:cd:39:df:4c:2a:69:b0:f6:32:c0:c9:0a:95:01:f8:
         f0:23:b7:1f:ab:0c:61:2b:d8:6f:3d:f3:9e:51:f8:6d:cf:4a:
         7a:75:21:36:b0:46:ef:61:3e:91:9d:ca:2a:87:4f:1a:43:65:
         0a:5e:0b:c7:d0:0c:c2:86:c0:a6:77:c3:cb:46:cf:a4:7a:7d:
         f0:0e:d4:fc:a2:c2:56:94:34:88:1b:2f:8c:9a:b2:a1:5d:36:
         12:61:07:0a:87:39:c5:93:28:4d:90:4e:04:10:28:8b:5c:c8:
         dd:01:20:72:5a:42:66:2a:d3:bd:b5:85:41:7a:ac:bd:ab:6d:
         7c:48:b7:ca:e8:03:4b:1e:7b:92:8b:90:e8:c7:4b:d3:b4:7a:
         2b:0b:91:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:16 2024 by rpki-client on console-ams.rpki-client.org