Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/dta4UZ9I6cLpGwUwPbZ_gl4z9gE.roa
File:                     dta4UZ9I6cLpGwUwPbZ_gl4z9gE.roa (raw, json)
Hash identifier:          vuoeW6H4mXQlToKnmWw57utmsMXay1D08KmNmFPJP74=
Subject key identifier:   76:D6:B8:51:9F:48:E9:C2:E9:1B:05:30:3D:B6:7F:82:5E:33:F6:01
Certificate issuer:       /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial:       01820D6CAE57BAB2118D198C0B75C7789DAB
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/dta4UZ9I6cLpGwUwPbZ_gl4z9gE.roa
Signing time:             Sun 17 Jul 2022 18:30:02 +0000
ROA not before:           Sun 17 Jul 2022 18:30:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212238
IP address blocks:        178.253.16.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:0d:6c:ae:57:ba:b2:11:8d:19:8c:0b:75:c7:78:9d:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
        Validity
            Not Before: Jul 17 18:30:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=76d6b8519f48e9c2e91b05303db67f825e33f601
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5d:59:4f:3e:ce:b7:a4:fc:85:46:45:a3:bc:
                    26:3d:c6:bf:bc:44:1a:03:33:bf:03:fa:28:05:71:
                    f7:33:40:30:fb:42:93:58:f8:d2:86:da:df:06:00:
                    6d:b7:3e:17:a8:40:66:93:df:7a:08:ff:29:c9:1a:
                    7d:b9:e0:4a:cd:9f:9f:b5:c5:dc:c0:05:fa:32:0a:
                    00:86:fa:75:62:5c:27:46:bb:98:d4:c5:38:90:9c:
                    5d:82:58:a3:a1:44:49:f7:1a:09:89:ca:db:20:c3:
                    c3:2d:81:e2:ca:e5:a7:bc:06:f8:e1:0b:ad:8f:d2:
                    ff:18:fa:57:68:1a:c3:65:5e:80:3e:cd:06:09:34:
                    fa:97:1b:14:b7:ca:02:6d:c4:a6:8d:de:56:32:15:
                    8b:e4:fb:6b:6c:6a:eb:5f:86:1f:f8:e4:11:d8:85:
                    e8:a4:16:fc:fa:ed:ed:9a:ea:98:10:e9:f3:6d:65:
                    97:fb:c0:df:b1:b6:62:1e:e8:54:ce:46:ef:df:22:
                    c2:44:d9:b1:8b:60:a3:0e:54:52:53:8c:0e:13:06:
                    94:65:3d:09:96:38:87:3d:d3:8b:01:41:7d:9b:3f:
                    ba:3a:1c:03:fe:45:ec:e5:67:8d:14:2c:a5:00:23:
                    37:bc:f4:dd:da:d5:97:dc:cf:3e:b9:b2:2b:0b:c4:
                    e1:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:D6:B8:51:9F:48:E9:C2:E9:1B:05:30:3D:B6:7F:82:5E:33:F6:01
            X509v3 Authority Key Identifier:
                keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/dta4UZ9I6cLpGwUwPbZ_gl4z9gE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.253.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:f6:9d:0e:bc:2d:fa:82:3b:c7:61:67:39:97:e9:2f:e3:56:
         31:ea:76:e4:fc:0b:18:8b:6b:dd:2d:45:83:c8:bc:84:94:04:
         80:3b:35:b1:48:a7:aa:5d:15:a4:95:65:75:00:de:b6:78:8a:
         ef:fb:7b:07:bd:15:67:e4:54:fd:b6:e7:c4:9f:3a:66:78:59:
         3d:7c:c9:e1:a1:5e:a3:fd:73:ec:72:85:d6:63:36:98:a4:1a:
         75:47:32:98:cc:17:cd:e3:f2:5d:a2:00:b8:85:c8:a9:bf:d9:
         5c:bc:d3:4e:7e:23:d6:d9:96:70:62:df:e3:84:98:03:59:12:
         6d:0c:12:4b:91:ce:74:ae:6f:7d:a6:55:b0:0e:b1:c7:2b:cd:
         e5:cd:62:c2:a0:66:06:4c:5f:2b:99:0e:52:cc:d6:16:60:0a:
         da:03:a0:89:e7:ec:60:41:e7:52:04:1f:7a:7a:c8:03:f4:39:
         b8:45:84:7e:fe:f1:28:7b:eb:5a:9c:33:ee:34:f2:3f:f8:1f:
         9f:48:0c:22:6b:b9:4d:85:e2:8f:1a:d6:d3:46:9b:92:fc:08:
         c5:48:07:bf:ec:3f:00:82:aa:a3:83:75:9e:e7:32:9b:2f:42:
         26:7b:10:1d:eb:c2:e5:5c:26:eb:5d:d4:f3:38:21:dd:ea:f9:
         ef:c4:ee:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:19 2024 by rpki-client on console-ams.rpki-client.org