Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/EaJccuTRXwN5zf4bToQa1gl2cgE.roa
File:                     EaJccuTRXwN5zf4bToQa1gl2cgE.roa (raw, json)
Hash identifier:          hezbLxUYRc8XIW2Mks9yCa/Cj1uFMbla/xzyv8TL4xs=
Subject key identifier:   11:A2:5C:72:E4:D1:5F:03:79:CD:FE:1B:4E:84:1A:D6:09:76:72:01
Certificate issuer:       /CN=7a05ea59805f94be185282039bbae2fa8a9253f5
Certificate serial:       37C776CA
Authority key identifier: 7A:05:EA:59:80:5F:94:BE:18:52:82:03:9B:BA:E2:FA:8A:92:53:F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/egXqWYBflL4YUoIDm7ri-oqSU_U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/EaJccuTRXwN5zf4bToQa1gl2cgE.roa
Signing time:             Sat 01 Jan 2022 04:03:39 +0000
ROA not before:           Sat 01 Jan 2022 04:03:39 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     39479
IP address blocks:        213.187.10.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 935818954 (0x37c776ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a05ea59805f94be185282039bbae2fa8a9253f5
        Validity
            Not Before: Jan  1 04:03:39 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=11a25c72e4d15f0379cdfe1b4e841ad609767201
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:17:bd:f4:96:79:d8:ca:68:31:4c:b4:0f:b4:
                    ce:0e:ae:3e:c9:6a:7a:ee:2c:36:2d:9c:e2:e9:97:
                    44:1a:38:0c:8e:76:a7:e8:c3:ca:4d:e7:ff:66:2e:
                    51:fb:8b:5f:a5:b9:81:a6:3a:66:18:3e:7a:62:d0:
                    27:0f:a1:59:03:33:51:62:9f:9e:c6:5b:2c:88:a4:
                    4c:9b:31:df:ec:6c:de:cc:58:dd:a5:51:28:d5:fa:
                    4d:4e:35:72:53:22:b7:6f:92:c7:a1:d1:34:7a:11:
                    81:f8:d5:68:44:17:eb:b2:5f:5e:0b:15:8b:da:52:
                    d8:d9:ee:2e:44:ec:f0:ad:60:8c:68:4d:cf:b8:5c:
                    9d:16:d4:52:20:81:fa:49:b7:02:be:8d:29:4f:23:
                    bb:32:42:1d:38:c4:d1:a2:b7:56:ef:87:b9:06:c4:
                    4a:ce:91:e4:81:d1:38:ce:35:8e:20:ac:d2:98:5a:
                    22:7d:4e:7a:a9:29:eb:94:91:39:ec:65:dd:9b:4b:
                    be:21:16:f2:41:91:65:4a:31:3a:87:da:77:c2:77:
                    58:e9:0c:66:01:49:58:31:c7:d2:8e:36:f1:82:fc:
                    84:21:0a:61:cd:fc:7b:f0:bd:a7:0c:50:83:72:f3:
                    fe:f4:71:f1:5a:f3:8a:ba:ee:d7:e4:03:aa:9a:a4:
                    2a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:A2:5C:72:E4:D1:5F:03:79:CD:FE:1B:4E:84:1A:D6:09:76:72:01
            X509v3 Authority Key Identifier:
                keyid:7A:05:EA:59:80:5F:94:BE:18:52:82:03:9B:BA:E2:FA:8A:92:53:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egXqWYBflL4YUoIDm7ri-oqSU_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/EaJccuTRXwN5zf4bToQa1gl2cgE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/egXqWYBflL4YUoIDm7ri-oqSU_U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.187.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cd:c3:be:f4:cd:0b:50:8d:93:03:a4:5d:10:a6:a2:bc:64:e0:
         3e:71:56:26:89:32:62:e6:b3:de:14:8b:53:bd:78:e5:1b:e1:
         1b:71:fa:de:7c:47:5b:75:0e:53:88:20:8b:84:a8:72:dc:c3:
         9f:4f:6f:bc:77:c3:a0:4f:38:51:2f:1c:87:54:17:21:e4:23:
         fe:f5:46:60:fe:eb:28:32:98:29:bc:5e:99:c9:25:80:cc:46:
         6c:c2:43:1d:02:54:c9:47:ec:f7:0c:15:34:fe:ef:b9:ce:cd:
         4f:b2:8c:b6:c4:18:81:ae:e2:20:c7:ae:73:c9:03:53:d3:ad:
         27:e9:3f:53:9d:89:a9:a9:c7:2b:af:9a:25:9d:ea:af:1a:a7:
         2d:36:d1:c8:6d:2b:85:76:5a:68:66:97:7a:75:33:29:a5:d6:
         ab:0d:34:65:61:7d:13:3d:ea:77:63:cc:60:21:63:0b:3f:59:
         a3:9a:00:fc:7b:c1:2a:d3:e5:6c:1f:24:b7:a7:51:f5:bc:90:
         00:33:f9:f3:a1:eb:d8:ff:15:a3:fb:b7:4e:a1:cf:70:80:c7:
         3f:05:42:91:38:83:6b:25:9c:a0:d5:e3:71:57:85:c4:77:35:
         06:bc:b7:73:af:9b:0e:d7:91:f6:75:57:a8:87:9a:98:26:30:
         9b:d4:ab:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:20 2024 by rpki-client on console-fra.rpki-client.org