Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/5cfc47-2210-4739-a964-cef01362c4a8/1/wOwMpSUY6fROJjPjj_MY8Hq5sSo.roa
File:                     wOwMpSUY6fROJjPjj_MY8Hq5sSo.roa (raw, json)
Hash identifier:          MScplCCjSbkf/P1qLLRG/Il9s7a3VPy3KYiIxk/QCSI=
Subject key identifier:   C0:EC:0C:A5:25:18:E9:F4:4E:26:33:E3:8F:F3:18:F0:7A:B9:B1:2A
Certificate issuer:       /CN=87ae0af282dd4e9bc1b82194aed3b19693d87298
Certificate serial:       05920F95
Authority key identifier: 87:AE:0A:F2:82:DD:4E:9B:C1:B8:21:94:AE:D3:B1:96:93:D8:72:98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h64K8oLdTpvBuCGUrtOxlpPYcpg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/5cfc47-2210-4739-a964-cef01362c4a8/1/wOwMpSUY6fROJjPjj_MY8Hq5sSo.roa
Signing time:             Sat 01 Jan 2022 11:55:17 +0000
ROA not before:           Sat 01 Jan 2022 11:55:17 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     16509
IP address blocks:        78.108.124.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93458325 (0x5920f95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87ae0af282dd4e9bc1b82194aed3b19693d87298
        Validity
            Not Before: Jan  1 11:55:17 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c0ec0ca52518e9f44e2633e38ff318f07ab9b12a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:25:e3:46:be:ba:af:c6:3e:c8:81:83:d3:14:
                    28:6b:70:52:c9:03:df:a6:e2:be:b4:1b:e7:e7:25:
                    9e:3b:f4:6d:51:cb:fd:b3:08:17:d7:23:76:d9:ed:
                    0b:0e:e8:86:ab:91:b6:54:21:1b:0d:31:e7:5f:4b:
                    e0:99:eb:b1:f0:a2:18:9e:56:d2:d1:ee:70:d0:45:
                    06:9f:63:4c:e1:83:8a:9c:e7:d9:8d:14:76:d4:62:
                    83:92:68:c8:c6:97:48:24:04:92:37:e7:23:1c:db:
                    6b:8a:05:33:d7:b6:23:af:e5:5b:e9:cc:3d:37:75:
                    63:b9:01:17:43:39:a3:db:b4:2b:f8:fd:e6:f4:7e:
                    26:da:e5:e6:60:6d:19:72:27:2b:dd:38:5c:f1:f0:
                    de:53:3f:db:51:c1:d7:f4:e4:44:3b:fc:db:fd:11:
                    76:cf:67:ac:72:35:23:1c:a2:bb:f9:9c:ca:2a:9b:
                    ac:83:dd:a6:03:98:25:54:cf:23:fa:c2:bb:ae:af:
                    c3:14:92:4b:0c:d2:e0:48:68:a4:f6:fc:81:17:ba:
                    13:e8:18:0b:a8:75:fd:11:24:9a:bb:5d:e4:d6:56:
                    28:c0:23:6b:e9:7a:41:4a:82:f4:f5:22:74:c8:b2:
                    e5:14:9b:45:ae:31:38:79:b9:b2:74:e9:55:65:09:
                    d7:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:EC:0C:A5:25:18:E9:F4:4E:26:33:E3:8F:F3:18:F0:7A:B9:B1:2A
            X509v3 Authority Key Identifier:
                keyid:87:AE:0A:F2:82:DD:4E:9B:C1:B8:21:94:AE:D3:B1:96:93:D8:72:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h64K8oLdTpvBuCGUrtOxlpPYcpg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5cfc47-2210-4739-a964-cef01362c4a8/1/wOwMpSUY6fROJjPjj_MY8Hq5sSo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5cfc47-2210-4739-a964-cef01362c4a8/1/h64K8oLdTpvBuCGUrtOxlpPYcpg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  78.108.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         86:25:fb:4f:1a:b1:0e:17:8b:7e:69:32:56:0b:da:a3:c4:04:
         74:19:6a:98:cc:52:77:55:25:bf:c7:51:88:6c:5d:88:6b:3d:
         62:30:cd:82:ba:9a:41:3b:d6:dd:d0:6d:c0:a5:fa:35:3d:0c:
         c8:fc:59:cf:2f:a3:20:69:b5:8d:19:6d:d5:b7:20:82:28:a0:
         e3:21:5e:ee:e9:ef:b4:35:93:a6:97:da:de:9f:71:e1:c3:1a:
         9d:9f:4c:6b:a9:05:c5:12:7e:4a:bb:bc:28:02:26:cb:22:c7:
         89:15:9f:cd:15:d7:df:ef:29:ca:9a:39:31:f2:f3:3c:e5:0a:
         37:9e:ed:f3:93:53:57:e9:0a:13:64:a1:95:43:39:83:04:37:
         c7:18:13:bd:63:e2:97:26:11:f2:cd:36:51:96:56:68:5c:17:
         57:5d:13:02:54:ac:c2:46:bd:1f:b4:1d:6b:01:2d:0e:7a:d5:
         c6:69:cf:19:01:c0:1f:41:33:7d:ee:e5:91:6d:7d:5b:7b:75:
         e0:10:db:50:48:4a:d6:fa:14:f8:c2:42:0e:1f:96:b0:84:a3:
         a5:e2:1b:90:01:27:ac:ae:c1:f5:0a:75:13:78:64:fe:67:0b:
         94:cc:cb:58:55:bf:dc:df:72:e6:5d:5e:62:71:26:37:5b:78:
         31:22:60:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:51 2024 by rpki-client on console-fra.rpki-client.org