Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/tW3VbWZC52xNvi7KdA7fj0hMKE4.roa
File:                     tW3VbWZC52xNvi7KdA7fj0hMKE4.roa (raw, json)
Hash identifier:          vFfVvAsfmThkwmnq/USOqrp8xbyWRncsd+w4BXSSask=
Subject key identifier:   B5:6D:D5:6D:66:42:E7:6C:4D:BE:2E:CA:74:0E:DF:8F:48:4C:28:4E
Certificate issuer:       /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial:       0183FE547A5C66E0986E2DCDE466316749AC
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/tW3VbWZC52xNvi7KdA7fj0hMKE4.roa
Signing time:             Sat 22 Oct 2022 06:14:52 +0000
ROA not before:           Sat 22 Oct 2022 06:14:52 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1239
IP address blocks:        88.209.240.0/22 maxlen: 22
                          88.209.245.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:fe:54:7a:5c:66:e0:98:6e:2d:cd:e4:66:31:67:49:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
        Validity
            Not Before: Oct 22 06:14:52 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b56dd56d6642e76c4dbe2eca740edf8f484c284e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c0:84:86:f9:35:61:44:a6:6d:28:6d:11:68:
                    42:eb:c2:de:19:1a:5a:4c:9f:a1:38:ce:ee:92:4d:
                    dc:a8:b2:83:da:a5:51:2b:85:b3:49:a5:92:5b:df:
                    bd:2f:87:d0:5f:33:40:d2:45:c5:39:0f:29:f6:bb:
                    4d:1b:6a:2f:71:4c:6a:30:e6:38:9c:39:e5:92:3f:
                    cc:57:92:14:6f:5a:0d:0c:77:64:00:6d:93:77:c0:
                    dd:b4:54:46:f4:64:92:5d:26:9b:ba:4a:1d:80:8e:
                    15:3b:9b:46:c8:c1:3f:ef:2c:2b:f1:6c:a1:f4:e9:
                    47:2c:4a:20:60:71:14:01:18:ce:08:40:81:58:61:
                    d3:bf:a0:dd:4c:e3:3b:71:81:27:15:63:9f:cb:d2:
                    20:8a:e4:7d:01:9a:bb:e9:a6:97:ec:9e:05:b3:cc:
                    7c:c0:57:56:56:c5:04:1a:4f:9a:17:57:cf:ef:06:
                    62:41:31:5d:12:ad:ce:9e:e2:1d:83:03:4e:8e:75:
                    84:6d:24:4b:5f:56:88:b7:d4:4f:b5:b4:a3:b8:13:
                    41:12:d4:ae:b1:91:e7:37:d1:3f:66:41:5c:d3:7a:
                    32:40:db:14:4d:b8:b8:ab:10:9e:f9:76:31:70:bf:
                    a5:b1:b4:7a:63:51:1a:eb:1b:46:8c:ef:d6:d5:92:
                    01:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:6D:D5:6D:66:42:E7:6C:4D:BE:2E:CA:74:0E:DF:8F:48:4C:28:4E
            X509v3 Authority Key Identifier:
                keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/tW3VbWZC52xNvi7KdA7fj0hMKE4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  88.209.240.0/22
                  88.209.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:bb:8a:e6:7d:58:b3:83:61:09:59:09:19:17:ac:a0:eb:b0:
         61:45:bc:b2:be:ca:5e:87:73:0a:59:ad:bf:d0:a3:fb:12:51:
         cb:b5:ce:01:9f:08:ad:b2:a9:fe:29:34:06:19:0b:53:11:81:
         a1:63:65:01:f7:ad:52:cb:50:91:fb:c0:5c:9b:72:75:e7:2c:
         65:ab:90:52:7e:6b:a9:c6:8e:79:ae:d3:72:54:d0:9d:c3:f3:
         02:68:31:6e:98:69:c6:60:2a:df:d5:73:af:ef:87:e8:8b:05:
         6b:ed:e0:47:2b:9c:25:4c:76:08:88:cb:cd:dd:ec:86:7f:00:
         1c:53:f6:3e:6a:b1:d4:5a:c9:fd:ec:0a:a5:31:c9:49:fa:c8:
         ec:aa:08:ff:fa:1a:f0:ce:35:21:f8:e9:c7:94:db:72:1b:de:
         b1:2c:7e:64:12:d2:14:e3:1c:9f:64:b9:68:d7:4c:1b:5c:fc:
         aa:fd:7b:a6:1f:0f:7b:f5:8b:47:df:22:a0:25:7b:e4:ae:b4:
         6d:cf:67:f8:78:4b:fa:e6:2a:ff:81:a3:f2:c7:7e:1e:ef:58:
         5e:ac:5e:a8:3c:39:5f:51:ff:55:30:87:73:5a:79:fb:55:9c:
         1f:3d:ca:cc:05:32:10:89:40:a4:c8:3b:5c:e3:6c:cb:5d:3b:
         b2:23:2a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:28 2024 by rpki-client on console-fra.rpki-client.org