Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/H60syhkIohXw7aj9ZT86Dj2TepY.roa
File:                     H60syhkIohXw7aj9ZT86Dj2TepY.roa (raw, json)
Hash identifier:          r4I2B8GwkhMLUJGld2PtNaA8KupUJgfcV6+Ei0AebQ8=
Subject key identifier:   1F:AD:2C:CA:19:08:A2:15:F0:ED:A8:FD:65:3F:3A:0E:3D:93:7A:96
Certificate issuer:       /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial:       01824A145790092765A811C55CD8A51A942A
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/H60syhkIohXw7aj9ZT86Dj2TepY.roa
Signing time:             Fri 29 Jul 2022 13:10:23 +0000
ROA not before:           Fri 29 Jul 2022 13:10:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     62051
IP address blocks:        92.52.216.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:4a:14:57:90:09:27:65:a8:11:c5:5c:d8:a5:1a:94:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
        Validity
            Not Before: Jul 29 13:10:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1fad2cca1908a215f0eda8fd653f3a0e3d937a96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:80:5f:48:8e:fc:81:53:86:e1:94:ba:96:f3:
                    d4:66:d7:6d:fa:19:0d:21:12:ca:7f:30:33:d1:70:
                    98:a8:df:0f:cc:0d:d6:dc:ff:65:88:93:06:b2:fb:
                    f2:6c:5b:ff:dc:6e:fa:5c:e9:6a:e3:d3:92:a3:e8:
                    e5:68:09:f0:4d:2f:56:0f:08:52:d9:55:94:80:70:
                    2b:5d:92:e4:b9:54:e5:6b:5e:eb:ca:6c:4f:18:76:
                    56:81:2f:9d:f7:d9:ac:c3:db:73:d5:8c:1c:22:12:
                    a6:f6:f9:7d:98:1c:3e:77:9f:66:41:5b:9b:d5:89:
                    16:01:31:46:68:f2:da:b9:91:05:ba:25:97:84:f3:
                    d4:a3:fa:f9:f1:ff:b8:a7:42:63:68:bf:27:6b:ad:
                    53:4e:c8:de:e0:0d:57:cb:34:0f:76:f9:af:e5:1d:
                    0a:39:35:67:e9:52:30:1f:a6:5f:65:d3:3b:26:ef:
                    20:90:a2:6d:ff:57:7d:a4:f2:68:bb:77:70:1f:4a:
                    f0:0b:af:3e:99:a8:61:b2:37:15:40:b5:a2:9c:73:
                    12:dc:51:44:a4:81:4b:e5:86:49:16:a7:8e:73:1a:
                    5d:08:e3:80:87:f4:01:e5:70:68:d4:50:c8:98:cf:
                    7a:db:c7:bc:68:ea:30:4a:70:48:22:87:27:3a:f3:
                    17:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:AD:2C:CA:19:08:A2:15:F0:ED:A8:FD:65:3F:3A:0E:3D:93:7A:96
            X509v3 Authority Key Identifier:
                keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/H60syhkIohXw7aj9ZT86Dj2TepY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.52.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:86:ec:b0:92:6b:01:59:bd:39:6f:e2:29:be:96:7e:30:fa:
         c5:c9:d3:50:b2:d3:4d:76:99:50:4b:87:72:82:da:ff:19:43:
         ac:2c:8e:35:31:3b:97:7c:98:d2:06:29:e4:1a:14:18:d1:4b:
         04:5d:98:f7:58:12:fa:f0:af:5d:98:d4:a8:d6:a6:99:16:02:
         48:92:00:ea:3a:21:91:c4:81:fc:72:e5:a8:b9:15:c5:0a:81:
         23:5f:5b:2f:46:53:ab:4f:5a:c8:43:19:57:58:10:65:1d:c3:
         f3:20:08:c1:bb:68:25:a1:f3:4f:2f:17:20:b5:f8:78:80:34:
         2c:9c:0d:9f:25:d7:d2:9d:3b:58:ab:2d:88:58:17:50:aa:5a:
         5c:64:71:ae:62:d7:19:df:2e:6e:25:27:ac:ea:f6:68:8f:ad:
         72:aa:9b:af:03:a5:44:2c:eb:d2:f1:61:4f:f8:ab:f0:ce:c6:
         89:a1:2d:52:a4:5f:d9:8c:8a:28:c7:4f:7a:e2:04:9d:1c:98:
         da:46:1d:7b:fe:d6:30:b5:70:25:b4:c3:38:29:7e:de:95:81:
         b4:d5:e0:c7:a1:f3:78:67:c2:56:78:d9:50:d3:91:08:a4:94:
         44:83:fd:67:e6:09:06:4c:3a:76:33:4c:b9:a3:48:29:e1:3d:
         91:88:d0:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:27 2024 by rpki-client on console-fra.rpki-client.org