Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/536431-9cbe-43a9-8c1f-68ad2d111bac/1/VvvmcPtPHU_j6RvM6mLaPHGl9cI.roa
File:                     VvvmcPtPHU_j6RvM6mLaPHGl9cI.roa (raw, json)
Hash identifier:          YoAVH2V1/ogV2E9/bDGesiYfSGaDLO32Z2B+keZY3YM=
Subject key identifier:   56:FB:E6:70:FB:4F:1D:4F:E3:E9:1B:CC:EA:62:DA:3C:71:A5:F5:C2
Certificate issuer:       /CN=8200596bbf382d498bc5ec2b3fd65339e85b98f2
Certificate serial:       01F787
Authority key identifier: 82:00:59:6B:BF:38:2D:49:8B:C5:EC:2B:3F:D6:53:39:E8:5B:98:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ggBZa784LUmLxewrP9ZTOehbmPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/536431-9cbe-43a9-8c1f-68ad2d111bac/1/VvvmcPtPHU_j6RvM6mLaPHGl9cI.roa
Signing time:             Fri 25 Feb 2022 08:11:50 +0000
ROA not before:           Fri 25 Feb 2022 08:11:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     43104
IP address blocks:        193.200.224.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 128903 (0x1f787)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8200596bbf382d498bc5ec2b3fd65339e85b98f2
        Validity
            Not Before: Feb 25 08:11:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=56fbe670fb4f1d4fe3e91bccea62da3c71a5f5c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c7:4b:ed:5a:db:8e:59:12:2b:e4:bf:55:a7:
                    4e:0c:65:15:29:39:0c:63:51:8c:d0:c9:0b:43:e8:
                    d5:51:02:86:00:04:91:eb:4f:9d:fa:bf:57:82:df:
                    15:b5:cd:51:06:07:79:af:20:bb:44:d2:a6:1e:8e:
                    85:f6:b6:b6:3c:22:79:78:b3:45:87:6f:17:15:4c:
                    68:3d:17:3d:85:f9:8b:ba:3e:06:9d:36:dc:fe:87:
                    42:65:bf:ce:56:ab:aa:a2:3c:61:43:de:0e:54:0a:
                    a6:59:8a:bb:b5:1c:f3:ec:c4:ff:d7:01:24:f6:ff:
                    b0:82:8d:86:8c:dc:ae:69:8e:f8:bb:22:c8:cd:03:
                    aa:7c:34:54:ff:28:0f:48:e1:81:7d:f9:3e:6c:7d:
                    be:3a:e9:c0:e9:9d:8e:b5:ce:d4:a2:aa:2a:e0:04:
                    e3:30:98:77:cc:10:9a:34:c4:23:8f:8c:d9:e0:62:
                    85:d4:38:64:aa:cb:82:cd:73:13:d5:e6:d9:33:56:
                    90:f7:48:55:57:1a:07:6a:16:25:93:9f:94:ab:94:
                    73:58:6e:38:37:81:98:87:02:27:9d:ae:ea:2f:ae:
                    d6:10:88:93:ee:6a:37:20:bc:e5:08:eb:e4:10:63:
                    06:4b:b9:59:d9:20:f2:20:75:bd:ca:3b:85:3d:5d:
                    f8:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:FB:E6:70:FB:4F:1D:4F:E3:E9:1B:CC:EA:62:DA:3C:71:A5:F5:C2
            X509v3 Authority Key Identifier:
                keyid:82:00:59:6B:BF:38:2D:49:8B:C5:EC:2B:3F:D6:53:39:E8:5B:98:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ggBZa784LUmLxewrP9ZTOehbmPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/536431-9cbe-43a9-8c1f-68ad2d111bac/1/VvvmcPtPHU_j6RvM6mLaPHGl9cI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/536431-9cbe-43a9-8c1f-68ad2d111bac/1/ggBZa784LUmLxewrP9ZTOehbmPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.200.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:d1:3c:89:a7:d9:3c:d2:5f:39:2e:5c:e1:b6:5d:07:1c:85:
         d6:35:f9:61:49:c3:bd:da:07:24:d5:9d:ee:41:25:a6:aa:9f:
         11:ab:2a:3e:b0:14:d5:15:94:6b:bb:f4:86:c4:7d:bf:ef:62:
         8d:70:dd:b6:77:bd:28:83:fc:b5:32:2e:d5:4f:ae:52:35:b2:
         cd:92:c7:a8:a3:12:04:3d:af:b6:95:44:da:94:bd:b6:7f:22:
         25:b5:a8:ae:6c:38:7f:28:25:0b:78:26:50:73:53:c6:b6:fb:
         5e:f4:ac:71:7a:63:7f:20:cc:e1:8c:88:34:e3:c1:e3:94:29:
         54:e7:fb:d9:70:4e:b0:43:93:31:ee:f4:d7:dd:26:16:05:2f:
         c9:b8:b0:e5:65:4e:32:e4:21:f2:f1:a0:2f:29:7e:d2:75:c3:
         be:a9:ae:ee:0f:15:24:64:e7:e4:e0:bd:0a:3a:a5:a8:b8:03:
         f8:47:45:d2:1a:be:5e:f8:6a:01:c5:00:18:eb:25:d3:cc:dc:
         c0:30:9d:26:71:0a:e9:42:5f:29:b3:b2:a3:f1:d8:8f:28:6d:
         bb:12:41:70:68:e1:06:ca:2c:1f:08:9a:23:17:f5:68:ac:ab:
         0a:f3:4c:42:35:79:b5:7c:60:b1:d9:ce:75:0c:be:99:df:f4:
         24:3b:cd:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:43 2024 by rpki-client on console-fra.rpki-client.org