Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/W1eWbTx8vNa8XHoLHlXHi9YT2BU.roa
File:                     W1eWbTx8vNa8XHoLHlXHi9YT2BU.roa (raw, json)
Hash identifier:          XS3X/yFj5lNt415me8g4mdiu7wWHL46Tnx8E2DWYYJc=
Subject key identifier:   5B:57:96:6D:3C:7C:BC:D6:BC:5C:7A:0B:1E:55:C7:8B:D6:13:D8:15
Certificate issuer:       /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial:       0ACF64DE
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/W1eWbTx8vNa8XHoLHlXHi9YT2BU.roa
Signing time:             Mon 17 Jan 2022 18:47:17 +0000
ROA not before:           Mon 17 Jan 2022 18:47:17 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     35621
IP address blocks:        151.237.142.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 181363934 (0xacf64de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
        Validity
            Not Before: Jan 17 18:47:17 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5b57966d3c7cbcd6bc5c7a0b1e55c78bd613d815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:0a:23:99:5d:9e:9c:f9:e4:d9:68:c9:32:a8:
                    1c:3e:f9:a8:b5:7c:6e:3b:22:81:c4:4f:84:a4:46:
                    29:9f:9b:f3:7c:92:0b:56:bc:58:30:39:2f:a0:8f:
                    ca:02:14:c8:eb:13:dd:30:65:d3:fd:9e:1c:f4:48:
                    1e:ae:b2:e5:ca:a4:f9:06:63:a4:22:b7:17:18:ba:
                    b5:0d:ec:1a:99:5e:39:ef:ab:9c:4f:12:f9:b5:ee:
                    94:b0:82:b4:47:17:17:51:b0:08:aa:ee:6e:e4:fb:
                    3c:76:08:da:3e:d7:56:32:c4:6d:22:da:fe:4a:b4:
                    6b:02:e0:e5:9b:92:cb:cf:81:0b:d3:9d:e4:e2:ec:
                    7d:f4:b6:69:96:e3:b1:41:1f:71:be:a6:de:a4:73:
                    30:4e:10:fd:44:41:9f:61:ba:16:2a:6b:f7:cd:6e:
                    aa:1d:71:5a:09:32:ba:93:bb:b5:c8:2e:45:db:78:
                    b2:5e:49:86:9b:20:60:71:53:95:3a:52:18:2e:98:
                    5f:c4:24:69:5a:72:25:9d:a9:94:0a:f1:90:74:bb:
                    4e:77:d0:2b:65:a9:22:15:ae:96:e4:74:c7:85:b0:
                    1b:dd:64:8a:0b:1c:34:10:11:93:e5:30:7a:72:78:
                    95:96:ec:61:b6:85:08:10:58:82:85:e0:39:c9:25:
                    e6:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:57:96:6D:3C:7C:BC:D6:BC:5C:7A:0B:1E:55:C7:8B:D6:13:D8:15
            X509v3 Authority Key Identifier:
                keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/W1eWbTx8vNa8XHoLHlXHi9YT2BU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.237.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:2e:9e:65:b5:fe:75:74:7d:25:18:90:8a:03:4d:9e:b7:85:
         03:d5:8e:4b:e6:04:38:cc:a8:65:44:19:eb:a0:27:f7:c3:c8:
         d4:2b:43:c6:c4:10:b3:dc:b9:14:5c:ac:1c:df:f2:28:93:60:
         4b:22:88:e6:79:e8:f2:42:f1:d1:a6:a3:de:cd:e6:c0:59:a0:
         8d:ea:6f:18:a5:41:e5:6b:4d:fb:da:14:88:45:d8:d3:ea:6b:
         9f:8c:91:8f:8d:28:a7:35:dc:c1:14:a8:b5:52:77:fe:2b:6f:
         10:b3:11:1d:0c:7d:18:68:15:50:a1:d5:fe:f0:57:27:75:3e:
         81:17:3f:c2:e9:f1:69:3c:f8:a5:1b:45:27:7b:de:a8:e8:bd:
         f2:a6:b2:81:19:7f:ef:9d:a2:51:5c:a0:3d:36:80:6b:3e:39:
         ff:eb:51:e2:fd:ed:b7:aa:cc:72:12:c8:b4:8c:06:39:05:18:
         42:9a:8a:27:c8:b3:a5:4f:02:80:0e:b8:6e:df:2b:93:e3:47:
         4f:b1:b3:b6:c2:34:08:14:62:5b:b7:d5:f1:a4:23:dd:90:b9:
         55:68:02:6a:8b:19:68:a7:d4:69:11:bb:81:83:64:2b:dc:cb:
         45:ed:cf:55:14:18:94:1d:8b:09:74:67:6a:aa:9c:eb:ca:1f:
         41:a3:f5:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:12 2024 by rpki-client on console-fra.rpki-client.org