Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/Dv-tHfLr1QXYYVx0G3_H9rHwHxc.roa
File:                     Dv-tHfLr1QXYYVx0G3_H9rHwHxc.roa (raw, json)
Hash identifier:          EX0zEtAoTMvf+Tc6GMEX+HwGpGdGbx7pUpNDI3qAERw=
Subject key identifier:   0E:FF:AD:1D:F2:EB:D5:05:D8:61:5C:74:1B:7F:C7:F6:B1:F0:1F:17
Certificate issuer:       /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial:       0181D1D2E8EBBCEA3516E0EA9CEE5FF9712E
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/Dv-tHfLr1QXYYVx0G3_H9rHwHxc.roa
Signing time:             Wed 06 Jul 2022 04:44:29 +0000
ROA not before:           Wed 06 Jul 2022 04:44:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     59432
IP address blocks:        81.28.252.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:d1:d2:e8:eb:bc:ea:35:16:e0:ea:9c:ee:5f:f9:71:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
        Validity
            Not Before: Jul  6 04:44:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0effad1df2ebd505d8615c741b7fc7f6b1f01f17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ad:b3:73:b7:bc:59:60:f4:bd:05:14:45:b8:
                    d3:ab:8a:5a:3a:14:bb:c9:c1:95:ad:1f:74:89:9f:
                    a5:c3:b9:20:a7:54:d1:cf:81:65:28:8f:5a:4b:ef:
                    e2:86:97:71:c5:13:d8:6f:c6:95:58:f1:27:7c:ec:
                    ff:8e:57:0b:e8:5c:a7:d5:4e:c5:67:1e:45:95:a3:
                    54:20:60:14:dd:46:91:33:63:dd:dc:52:f9:11:49:
                    b7:70:1f:d7:94:83:51:a4:e2:ae:29:38:b0:46:34:
                    29:b2:b9:0c:22:0f:c4:5e:f9:d5:0a:22:ef:8e:ba:
                    11:4b:73:37:b9:e8:8e:92:bd:f5:3e:ad:98:ee:69:
                    01:ff:c8:d4:00:dc:ed:be:4a:2d:57:1a:59:b7:61:
                    23:d2:64:48:6d:9a:95:9e:81:61:fe:90:d0:bc:37:
                    45:13:d7:1a:97:b6:38:7b:4d:e0:0e:8f:ba:3e:34:
                    9e:fe:f6:78:a1:fc:dc:9b:7a:15:42:62:a3:f3:3e:
                    46:e9:cb:7b:63:df:41:be:6d:f6:ca:41:35:e5:62:
                    8a:88:4a:a8:b2:41:73:05:b2:66:a8:f7:d3:47:fd:
                    e4:72:ae:30:e5:d8:2a:68:4f:15:2b:8e:0e:41:74:
                    0f:41:e5:98:8e:7c:fa:93:30:9e:c2:e7:ad:9c:e8:
                    84:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:FF:AD:1D:F2:EB:D5:05:D8:61:5C:74:1B:7F:C7:F6:B1:F0:1F:17
            X509v3 Authority Key Identifier:
                keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/Dv-tHfLr1QXYYVx0G3_H9rHwHxc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.28.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1f:cd:8a:7c:82:2d:7a:d0:85:38:d9:ff:a3:3f:47:5d:00:64:
         94:89:48:f2:38:aa:51:96:38:dc:25:99:5e:81:29:b2:bb:0a:
         2a:8d:dc:63:f3:dd:7d:09:ae:8c:6a:e6:13:17:7d:18:48:16:
         30:f9:f5:84:a6:b2:63:8f:38:bb:41:9c:c5:51:11:86:70:fa:
         8e:1d:69:31:ee:f1:c6:11:c0:ab:19:04:80:d2:a3:7f:9f:7b:
         d2:c9:2a:95:53:c1:ae:84:4d:2a:a8:40:48:16:62:84:27:f1:
         1f:27:03:f3:21:8d:97:00:56:81:48:11:54:ae:65:8d:f2:44:
         e2:90:f1:1b:5b:8b:11:33:75:b4:48:9c:af:e9:ae:d5:0a:fc:
         fa:25:f3:49:ca:66:c7:ca:76:57:ec:e7:60:f4:2e:b6:e3:44:
         bf:83:6d:5a:db:71:6c:ba:33:9f:8b:3f:f8:39:d1:04:e2:cc:
         2f:71:c9:97:73:b5:27:81:c7:23:e6:55:e6:01:52:86:ee:a0:
         54:e8:9d:91:25:79:4f:83:69:93:d0:91:46:88:e0:76:d9:4f:
         b3:ad:92:5f:36:54:15:49:e3:31:ec:21:53:42:e8:d1:c1:2c:
         bb:58:9c:85:c7:e3:f7:dc:67:e6:3b:19:d0:8a:ba:eb:a5:7e:
         6f:10:36:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:00 2024 by rpki-client on console-fra.rpki-client.org