Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/Dk6P_J4KrW4Rd1WZGsJ9OZYF1PY.roa
File:                     Dk6P_J4KrW4Rd1WZGsJ9OZYF1PY.roa (raw, json)
Hash identifier:          afyjSBj0HKITD0QirCNGgbPvoFZFig4Tt3UMjT+5avA=
Subject key identifier:   0E:4E:8F:FC:9E:0A:AD:6E:11:77:55:99:1A:C2:7D:39:96:05:D4:F6
Certificate issuer:       /CN=bab232c1d72dc1cabbda16c870ec941d458a9fdc
Certificate serial:       07780CF5
Authority key identifier: BA:B2:32:C1:D7:2D:C1:CA:BB:DA:16:C8:70:EC:94:1D:45:8A:9F:DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/Dk6P_J4KrW4Rd1WZGsJ9OZYF1PY.roa
Signing time:             Sat 01 Jan 2022 07:02:43 +0000
ROA not before:           Sat 01 Jan 2022 07:02:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     41488
IP address blocks:        185.214.80.0/24 maxlen: 24
                          185.214.83.0/24 maxlen: 24
                          185.214.82.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125308149 (0x7780cf5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bab232c1d72dc1cabbda16c870ec941d458a9fdc
        Validity
            Not Before: Jan  1 07:02:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0e4e8ffc9e0aad6e117755991ac27d399605d4f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:30:54:bc:f0:be:fa:f3:a2:66:33:f4:df:fb:
                    47:57:81:67:b9:33:a1:28:44:6d:c5:0f:fc:b9:05:
                    65:06:84:b3:9f:b0:2c:be:bc:49:c4:de:2e:8b:17:
                    16:bc:68:2e:cb:e3:5f:7f:54:91:90:9b:f7:43:fe:
                    61:80:fa:27:a7:cb:5b:24:24:73:ac:79:d4:fe:8e:
                    f1:f1:52:00:84:8b:6c:4b:02:d0:33:a9:bf:fa:17:
                    af:30:8b:21:fb:83:57:e9:f4:4b:58:f3:ad:6c:39:
                    5c:50:ce:35:30:a0:cb:4f:b7:3e:e9:aa:e3:14:83:
                    71:2e:a1:f1:70:cd:56:f5:30:69:c0:de:c3:5a:63:
                    e7:19:14:a2:8c:88:97:72:f8:c0:a6:c4:b2:17:18:
                    61:d6:17:a8:e1:af:61:cb:e3:e9:89:22:cc:6d:b5:
                    e8:b4:88:02:31:3e:09:7f:8a:fc:64:97:cc:40:0b:
                    cb:6e:cf:a5:9b:b7:a6:d3:98:2b:ca:67:a5:b9:f8:
                    fe:fe:78:d8:89:a4:a9:4a:54:5c:3b:d5:02:d3:8f:
                    b7:45:bf:2e:39:cf:73:dd:86:7b:6e:8d:78:8c:4a:
                    9a:61:a7:31:c6:7c:47:81:d9:7f:11:ee:d2:32:ed:
                    2c:90:96:a0:a5:76:3f:e1:f4:0f:d7:75:b0:4e:27:
                    2c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:4E:8F:FC:9E:0A:AD:6E:11:77:55:99:1A:C2:7D:39:96:05:D4:F6
            X509v3 Authority Key Identifier:
                keyid:BA:B2:32:C1:D7:2D:C1:CA:BB:DA:16:C8:70:EC:94:1D:45:8A:9F:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/Dk6P_J4KrW4Rd1WZGsJ9OZYF1PY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.214.80.0/24
                  185.214.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         65:79:13:15:65:06:c0:d5:00:93:0f:42:3c:93:66:26:d2:f2:
         2b:d1:be:ea:73:ab:62:1c:e5:b5:e9:ff:94:d4:fe:6a:17:1b:
         8b:22:91:20:57:6b:f4:71:8d:08:e9:d0:16:d2:6a:21:fd:27:
         47:23:13:86:8d:18:89:40:49:1a:98:9c:e5:fa:45:20:a4:51:
         64:a0:3b:49:89:06:b4:41:8c:04:71:09:61:aa:bd:0b:9c:f4:
         41:b5:f3:6b:8e:20:bf:74:f5:8a:15:76:62:97:f0:84:c0:22:
         fc:2a:a9:f3:f2:a1:0c:1e:a5:20:82:02:07:f5:00:95:d5:c2:
         1f:f5:27:8a:86:ca:f4:e9:e4:2d:19:df:2f:44:f2:0f:2c:ed:
         98:ae:37:9d:4e:17:29:71:9d:99:59:7e:5d:88:b1:fe:9c:8e:
         e5:a6:d1:8b:df:df:80:41:27:dc:68:b0:4f:95:53:71:99:79:
         d5:0d:76:0c:ba:f2:f9:01:b4:1d:18:97:2f:c0:46:d4:61:fb:
         7f:16:cf:4d:44:09:f7:36:5a:bc:93:d7:cb:56:f7:1b:5b:5a:
         a5:a0:dc:ab:42:a6:c7:6f:32:22:9b:ba:05:08:2a:99:b9:96:
         7e:01:cb:65:32:5b:20:af:6e:16:e9:c1:9a:69:9c:ef:b8:5e:
         40:4e:71:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:10 2024 by rpki-client on console-fra.rpki-client.org