Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/fKDDU16LRhZ-5d7cuqaIUkcCNvA.roa
File:                     fKDDU16LRhZ-5d7cuqaIUkcCNvA.roa (raw, json)
Hash identifier:          Z6UNMPnswYrsg+5aEygnUAFH9lJdW9oYW4+CUevVqHo=
Subject key identifier:   7C:A0:C3:53:5E:8B:46:16:7E:E5:DE:DC:BA:A6:88:52:47:02:36:F0
Certificate issuer:       /CN=66ef31adac663855b3ddd1931c44cf8064d6a6eb
Certificate serial:       0A5E169A
Authority key identifier: 66:EF:31:AD:AC:66:38:55:B3:DD:D1:93:1C:44:CF:80:64:D6:A6:EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zu8xraxmOFWz3dGTHETPgGTWpus.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/fKDDU16LRhZ-5d7cuqaIUkcCNvA.roa
Signing time:             Tue 24 May 2022 13:58:14 +0000
ROA not before:           Tue 24 May 2022 13:58:14 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     16509
IP address blocks:        193.160.155.0/24 maxlen: 24
                          193.160.154.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 173938330 (0xa5e169a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66ef31adac663855b3ddd1931c44cf8064d6a6eb
        Validity
            Not Before: May 24 13:58:14 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7ca0c3535e8b46167ee5dedcbaa68852470236f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:42:ec:8b:a0:80:20:2c:81:dc:82:1f:01:24:
                    86:58:a1:51:e9:a6:21:6d:31:ef:73:ab:28:d0:f9:
                    57:2b:57:3b:92:60:0b:76:ed:4e:e8:ed:d9:cc:5d:
                    1e:2b:42:b3:b7:b8:e3:47:bf:c8:d7:78:72:6c:44:
                    95:dd:1a:ac:83:6b:14:b8:40:5f:ac:62:49:39:ea:
                    9f:1f:3e:3a:45:4e:aa:0a:bd:27:d5:45:e4:9d:05:
                    ec:0d:0e:30:65:8f:a6:c1:02:17:d3:f0:74:68:ef:
                    ac:80:e9:ad:51:ed:b1:24:1f:10:1f:d6:6a:77:ef:
                    78:26:72:d8:4e:2e:6a:ce:8d:c7:b4:ae:c5:ec:89:
                    e6:68:11:f5:f9:df:0c:64:d2:da:b9:8c:d3:36:f4:
                    fc:88:13:26:74:3a:c7:17:e6:c0:c8:78:c0:ab:a4:
                    26:4d:f0:d4:36:66:1d:e3:ad:16:b1:71:08:25:d0:
                    20:ee:26:61:49:41:10:40:3e:74:21:9a:d8:35:5a:
                    6d:a6:a1:c4:b2:af:8e:3b:73:60:40:16:bd:8c:99:
                    5b:4b:c6:d1:a8:68:28:86:91:3a:29:83:42:07:ea:
                    5e:0f:fe:ae:96:0e:57:0c:5d:d3:a6:f3:64:48:4a:
                    6c:f2:db:52:76:38:c6:75:54:56:77:6c:65:19:f7:
                    3c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:A0:C3:53:5E:8B:46:16:7E:E5:DE:DC:BA:A6:88:52:47:02:36:F0
            X509v3 Authority Key Identifier:
                keyid:66:EF:31:AD:AC:66:38:55:B3:DD:D1:93:1C:44:CF:80:64:D6:A6:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zu8xraxmOFWz3dGTHETPgGTWpus.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/fKDDU16LRhZ-5d7cuqaIUkcCNvA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.160.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1e:f0:f1:d3:5b:25:a2:48:bd:14:db:c1:1a:38:e5:bf:38:ff:
         0b:1a:88:68:69:d4:61:83:cf:7d:b9:b5:bb:d2:48:fa:3d:56:
         79:8d:f0:29:17:cf:31:2c:38:d9:3a:e4:f9:3e:56:ce:10:30:
         13:be:13:01:f1:4b:f4:8f:52:44:8d:3e:36:c6:65:63:47:62:
         91:a1:5a:e5:50:ef:59:62:b8:ff:b7:17:b0:50:9e:12:45:f1:
         6c:3a:0a:65:3e:98:8c:1c:f9:d4:6e:a1:63:4b:0a:5a:a0:6b:
         d9:a1:2c:d9:27:35:3b:af:c4:91:8a:ed:ab:38:b2:cf:cb:69:
         13:21:07:89:04:7e:81:a4:9b:cc:08:e0:c9:08:46:83:b8:e2:
         85:6f:99:e8:f8:7a:3d:65:2c:37:fd:1e:16:9c:c8:63:2f:b5:
         cc:ef:a6:ff:59:74:18:cf:a5:6b:aa:03:2f:37:f9:3c:8d:c3:
         8b:b1:42:82:fd:7c:86:52:f9:ff:4b:1d:cd:a8:1d:b1:e1:dd:
         8d:05:94:64:ee:8a:8a:58:93:68:aa:ee:68:24:18:54:79:eb:
         12:3c:c6:63:97:0a:ee:59:81:8a:25:42:5f:20:40:59:91:2e:
         9a:dc:d8:73:0a:39:fe:38:26:dd:db:85:58:a7:b4:1a:58:94:
         3b:71:e0:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:01 2024 by rpki-client on console-fra.rpki-client.org