Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/Vwfw_RLF51JLgOLdqLIVllvV85E.roa
File:                     Vwfw_RLF51JLgOLdqLIVllvV85E.roa (raw, json)
Hash identifier:          akG+AprCaNnberDPrmK/7AS9b8QyGFPkuYK5wNa13co=
Subject key identifier:   57:07:F0:FD:12:C5:E7:52:4B:80:E2:DD:A8:B2:15:96:5B:D5:F3:91
Certificate issuer:       /CN=cc40d96242b082efe5b4f2258820b3059396198d
Certificate serial:       1C830B90
Authority key identifier: CC:40:D9:62:42:B0:82:EF:E5:B4:F2:25:88:20:B3:05:93:96:19:8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zEDZYkKwgu_ltPIliCCzBZOWGY0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/Vwfw_RLF51JLgOLdqLIVllvV85E.roa
Signing time:             Fri 18 Mar 2022 13:23:08 +0000
ROA not before:           Fri 18 Mar 2022 13:23:08 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     39210
IP address blocks:        185.235.148.0/22 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 478350224 (0x1c830b90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc40d96242b082efe5b4f2258820b3059396198d
        Validity
            Not Before: Mar 18 13:23:08 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5707f0fd12c5e7524b80e2dda8b215965bd5f391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:00:9a:0c:e4:e9:20:10:1e:6a:43:d3:0f:ce:
                    ad:50:0a:01:22:23:5a:57:4e:b4:f7:32:16:aa:66:
                    6d:6e:e2:06:32:58:2c:e4:0e:9c:1d:b1:7f:a9:27:
                    be:d3:3b:31:ad:35:7d:53:0d:17:09:95:3b:8c:7c:
                    ad:92:60:85:3d:3b:28:66:46:7d:a8:c7:48:e7:b1:
                    a8:b0:92:5d:ba:06:9a:73:d2:c2:82:0f:a4:1e:42:
                    42:da:2c:05:2d:96:ba:fc:8f:3f:26:06:fd:c9:f7:
                    48:9f:d7:9a:ce:1b:91:88:1f:f2:40:d8:e0:90:a9:
                    df:f6:9b:d9:df:b8:22:93:04:d3:15:42:ab:79:e2:
                    0a:d0:e2:9b:f0:e8:7f:51:3e:31:ca:2b:68:c3:3d:
                    d6:3f:f7:b7:0f:02:31:5b:79:36:32:01:69:e0:d7:
                    68:5e:f9:cb:14:61:af:76:13:90:4f:cf:d2:bb:48:
                    f6:ee:90:86:61:39:38:61:d4:24:69:ce:e3:46:b3:
                    7b:60:c4:a7:43:1d:d0:98:09:70:7b:ea:77:ba:b2:
                    da:0c:24:ce:01:4d:22:80:db:ea:d8:c6:bb:99:5e:
                    ca:1b:a3:6f:57:21:a3:4b:ac:0c:83:79:70:c5:71:
                    96:46:16:9c:7e:1e:5c:fe:fb:78:e5:15:ae:67:84:
                    be:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:07:F0:FD:12:C5:E7:52:4B:80:E2:DD:A8:B2:15:96:5B:D5:F3:91
            X509v3 Authority Key Identifier:
                keyid:CC:40:D9:62:42:B0:82:EF:E5:B4:F2:25:88:20:B3:05:93:96:19:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEDZYkKwgu_ltPIliCCzBZOWGY0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/Vwfw_RLF51JLgOLdqLIVllvV85E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.235.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         aa:f1:48:62:b9:dd:25:1b:a5:79:0b:ac:06:6c:42:1d:bd:48:
         34:cc:ae:ea:57:5c:e5:12:68:ce:24:1b:d7:34:8a:6a:6f:69:
         1a:32:f3:06:8d:32:7d:62:42:89:a6:d3:8f:3a:32:27:3f:e2:
         2f:9e:74:0e:31:5c:f8:87:67:6d:fd:40:15:5f:50:8d:c3:91:
         2f:08:f2:bd:a4:c3:f1:eb:c7:e3:f4:c2:c7:5d:06:f0:1d:20:
         2f:71:62:7a:e9:ac:fd:58:e5:57:02:6f:8b:2b:88:46:be:cf:
         e8:67:50:d2:42:d7:3e:08:3e:ac:59:dc:2f:7a:b9:3d:14:64:
         7b:1b:7e:00:19:27:47:d1:0e:92:12:9e:b0:40:1d:9f:45:07:
         06:6b:c2:55:e8:5c:bc:e5:a6:c1:60:47:af:7c:84:64:4a:12:
         6b:1a:68:5c:e6:c2:e1:aa:d4:1f:c9:29:0a:b8:6d:af:52:d9:
         89:54:cd:2a:83:9f:27:37:2a:c8:d3:91:af:5a:ad:8c:47:a7:
         f8:65:50:f4:a2:b2:db:e8:d3:e5:65:a9:1c:60:3d:a9:20:e2:
         c9:c2:b9:f8:69:94:48:8b:fc:a7:d7:38:64:f5:75:b2:dd:5a:
         2b:3d:63:b0:d7:f0:e7:fe:c3:06:e8:85:06:27:2c:cb:cd:2b:
         29:f4:ea:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:03 2024 by rpki-client on console-fra.rpki-client.org