Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/LW4PuJiPA67MqBLQZ0-OLHXBf-w.roa
File:                     LW4PuJiPA67MqBLQZ0-OLHXBf-w.roa (raw, json)
Hash identifier:          VkHM7a3E7NXbY6Lx954LCkGB5jlbeKQEBKSYd2Qi6Sk=
Subject key identifier:   2D:6E:0F:B8:98:8F:03:AE:CC:A8:12:D0:67:4F:8E:2C:75:C1:7F:EC
Certificate issuer:       /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial:       0351AAE0
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/LW4PuJiPA67MqBLQZ0-OLHXBf-w.roa
Signing time:             Sat 01 Jan 2022 16:04:44 +0000
ROA not before:           Sat 01 Jan 2022 16:04:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     213369
IP address blocks:        185.180.229.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55683808 (0x351aae0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
        Validity
            Not Before: Jan  1 16:04:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2d6e0fb8988f03aecca812d0674f8e2c75c17fec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:4a:da:f8:8d:2e:9e:d4:a1:55:dd:b4:27:48:
                    72:d8:43:48:63:fb:4b:0a:58:8b:5b:f9:b3:cf:82:
                    ca:79:79:61:f5:c9:34:cd:a9:9d:6b:5b:ce:4c:a8:
                    2b:92:7b:7a:38:fd:ea:4a:1d:cc:8d:d5:a7:34:26:
                    b7:8c:e9:5e:17:4e:04:9e:8f:81:5b:0c:66:7e:be:
                    65:3a:80:ef:8e:64:fd:e9:40:11:b1:7f:f9:e2:48:
                    e8:e0:5a:61:05:15:1a:e5:d1:f0:fa:68:34:cd:9e:
                    c8:7e:f2:e2:31:26:f6:3a:cd:2d:80:e2:ba:d6:25:
                    22:91:58:4d:93:d8:f3:3a:15:08:b8:05:31:ef:88:
                    b3:e6:49:17:44:ca:b8:8b:34:ce:7d:b9:7f:4c:9d:
                    58:be:84:94:83:15:cb:3e:b9:41:2c:b0:97:cf:46:
                    45:86:02:cb:d7:c4:ce:08:a7:b2:b8:13:25:c9:01:
                    38:85:da:07:94:39:6d:d2:4a:43:46:04:e6:17:ba:
                    fc:98:85:99:be:50:39:ab:35:d9:a9:40:75:1f:c7:
                    05:4c:cf:7f:29:03:1c:af:f7:ec:0f:e0:69:08:fa:
                    f0:41:35:17:b8:4a:d2:53:04:cf:c2:12:2c:d6:10:
                    52:5d:ed:3a:f5:fe:a6:c3:d8:a2:8f:3f:74:a5:91:
                    8c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:6E:0F:B8:98:8F:03:AE:CC:A8:12:D0:67:4F:8E:2C:75:C1:7F:EC
            X509v3 Authority Key Identifier:
                keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/LW4PuJiPA67MqBLQZ0-OLHXBf-w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.180.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:3c:f0:c6:d6:94:85:57:31:78:8f:09:09:71:7e:79:a1:7d:
         3c:17:dc:15:4a:45:a4:24:bd:1f:c7:f4:09:89:26:25:ca:ef:
         28:d2:f7:36:c9:d6:22:49:6b:8c:78:22:eb:90:1c:36:ca:3d:
         a2:f2:b2:90:8f:6a:82:08:82:e8:5d:50:c1:db:2c:86:ed:c4:
         11:d8:14:4d:97:40:a2:60:29:3e:19:45:84:3e:5e:b6:4f:f1:
         a5:c6:ad:d1:c2:97:03:70:d7:63:85:86:fe:2b:57:b5:0a:fe:
         43:86:0f:2f:ab:cc:77:c4:96:2c:09:41:1e:3e:5b:e8:3c:b2:
         12:b9:12:08:64:d4:a5:56:61:8c:26:5b:55:e4:00:ca:ca:84:
         58:17:48:b5:e8:a9:93:38:4b:e6:d4:d1:07:e3:23:f0:4d:82:
         1d:5b:c6:5e:6f:c9:45:db:e8:7e:61:b5:b2:75:2f:b5:61:84:
         ff:d9:0f:01:c0:32:43:dd:13:38:83:bd:88:57:14:5f:2b:01:
         de:f2:3f:28:21:74:a6:12:7a:53:0b:11:dc:19:0e:11:cd:0f:
         31:0e:95:87:9c:01:1a:83:5e:2e:55:73:52:c0:25:e9:e1:8e:
         37:97:af:fe:9b:79:7d:07:a9:01:20:61:5f:08:13:f9:d5:61:
         29:e1:b6:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:07 2024 by rpki-client on console-fra.rpki-client.org