Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/dcwV0_IB9Jl2poElkCV0RDMOPXA.roa
File:                     dcwV0_IB9Jl2poElkCV0RDMOPXA.roa (raw, json)
Hash identifier:          50vri5rIYn5/3uTPnS1PcUJk4qUSUWYdUE8E2UWkkK4=
Subject key identifier:   75:CC:15:D3:F2:01:F4:99:76:A6:81:25:90:25:74:44:33:0E:3D:70
Certificate issuer:       /CN=68639a21759796fe3a1d919f9b5737eb68d708e4
Certificate serial:       03F5AFA8
Authority key identifier: 68:63:9A:21:75:97:96:FE:3A:1D:91:9F:9B:57:37:EB:68:D7:08:E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aGOaIXWXlv46HZGfm1c362jXCOQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/dcwV0_IB9Jl2poElkCV0RDMOPXA.roa
Signing time:             Sat 01 Jan 2022 11:59:27 +0000
ROA not before:           Sat 01 Jan 2022 11:59:27 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     44324
IP address blocks:        82.116.63.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66432936 (0x3f5afa8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68639a21759796fe3a1d919f9b5737eb68d708e4
        Validity
            Not Before: Jan  1 11:59:27 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=75cc15d3f201f49976a6812590257444330e3d70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:9a:f8:20:ef:73:cf:aa:8c:8f:23:4c:6b:37:
                    ae:48:d1:64:99:d6:f8:92:f1:14:60:76:b5:56:67:
                    2e:78:e3:b7:fb:87:16:46:2c:7c:3d:6a:10:15:4a:
                    f8:25:32:d9:8d:6f:99:be:76:49:49:3a:3e:8f:1d:
                    37:f4:8e:65:a1:cb:14:0f:c1:86:5b:1e:71:a9:89:
                    87:d9:8d:74:15:82:04:9f:e0:d2:86:3b:e6:19:39:
                    b0:7b:9c:f0:3b:3e:2c:ab:e9:2c:52:60:b0:f2:9c:
                    e9:28:46:9a:e5:9c:68:3e:c7:84:49:62:71:bb:55:
                    a3:2d:18:9a:58:90:7a:fa:8c:c7:f9:72:d9:da:16:
                    17:de:83:e3:24:ab:d8:f1:96:9b:53:64:ae:7b:fb:
                    ec:2f:22:1f:21:de:19:4c:2d:81:13:69:33:fd:9d:
                    62:8c:61:64:9f:41:68:1c:c2:16:6d:c6:f0:85:bd:
                    13:51:c8:17:c7:5b:00:3a:08:89:e7:8a:bb:d6:5f:
                    1f:38:9d:93:f2:a5:23:b8:ee:62:51:69:9b:51:f8:
                    46:18:4a:07:3a:48:d6:8b:08:59:0d:23:16:34:11:
                    0d:80:61:11:44:c1:46:c3:96:f3:e2:46:ce:ee:f8:
                    ac:90:64:d8:aa:3d:a2:b3:ca:64:01:1c:31:c3:da:
                    ef:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:CC:15:D3:F2:01:F4:99:76:A6:81:25:90:25:74:44:33:0E:3D:70
            X509v3 Authority Key Identifier:
                keyid:68:63:9A:21:75:97:96:FE:3A:1D:91:9F:9B:57:37:EB:68:D7:08:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGOaIXWXlv46HZGfm1c362jXCOQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/dcwV0_IB9Jl2poElkCV0RDMOPXA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/aGOaIXWXlv46HZGfm1c362jXCOQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.116.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:6f:0f:99:33:25:f6:9c:7c:05:48:cf:65:e9:af:6f:e3:21:
         30:71:da:bf:3d:97:61:bc:0a:ec:1a:2a:7c:1b:07:27:6e:55:
         c0:da:aa:9a:f0:41:69:dc:62:c5:40:ee:60:93:8d:c5:86:b2:
         e7:f0:97:ac:7c:95:13:d7:55:19:7b:7a:be:70:ec:9c:9e:6c:
         86:11:d2:36:19:2c:e6:14:86:54:52:2b:76:15:60:f6:77:05:
         d2:9c:3b:86:34:8c:13:a8:54:32:4a:8b:4a:f2:20:59:ec:cf:
         27:7a:9a:33:c0:37:e3:7d:ef:3b:17:e6:f3:02:9c:0d:af:0d:
         ad:a7:9d:9a:6b:7d:3c:ef:73:af:f3:6f:bd:a0:db:f0:a7:dc:
         23:1e:a6:3f:11:cf:c3:51:a8:6c:ba:c9:ae:34:c6:8c:79:ad:
         c4:11:97:ab:ef:37:03:6e:62:62:18:ae:1b:29:3b:e5:93:b9:
         10:04:71:aa:09:a5:7a:3d:07:fd:f0:28:9f:bf:a0:c6:c0:2b:
         37:01:81:57:a8:41:14:ae:1b:26:9e:59:6c:18:2f:ee:b3:76:
         16:59:9c:fe:3a:61:3d:fd:93:7a:89:9b:f2:5c:48:a6:0d:9f:
         35:69:80:c1:0d:6a:3f:0f:0a:7c:6d:0f:7c:63:26:38:0e:74:
         99:5b:d9:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:10 2024 by rpki-client on console-ams.rpki-client.org