Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/eddeae-b59b-41bb-8fd6-163f0e077f23/1/0mjkdXkBVI4N5yabEMsv7yIR5XA.roa
File:                     0mjkdXkBVI4N5yabEMsv7yIR5XA.roa (raw, json)
Hash identifier:          R3lCnkUiQnc7s00MewBUExGcmxOHkRBd2lwowtHk4YY=
Subject key identifier:   D2:68:E4:75:79:01:54:8E:0D:E7:26:9B:10:CB:2F:EF:22:11:E5:70
Certificate issuer:       /CN=7e3fb853f840b3770cd3fa42b3f9d2f9be7d1b7f
Certificate serial:       0182FE29B5C14630E6B701D136EB79213638
Authority key identifier: 7E:3F:B8:53:F8:40:B3:77:0C:D3:FA:42:B3:F9:D2:F9:BE:7D:1B:7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fj-4U_hAs3cM0_pCs_nS-b59G38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/eddeae-b59b-41bb-8fd6-163f0e077f23/1/0mjkdXkBVI4N5yabEMsv7yIR5XA.roa
Signing time:             Fri 02 Sep 2022 12:25:22 +0000
ROA not before:           Fri 02 Sep 2022 12:25:22 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206455
IP address blocks:        88.135.187.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:fe:29:b5:c1:46:30:e6:b7:01:d1:36:eb:79:21:36:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e3fb853f840b3770cd3fa42b3f9d2f9be7d1b7f
        Validity
            Not Before: Sep  2 12:25:22 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d268e4757901548e0de7269b10cb2fef2211e570
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:63:36:90:21:a7:03:3b:b9:9b:0f:fe:f8:d0:
                    b7:5b:42:cf:8d:36:7b:c8:52:22:0a:e5:9c:96:24:
                    f2:7d:99:0f:2a:b0:f8:25:fa:1e:ca:99:4e:5f:8e:
                    40:06:f6:59:c3:49:68:c4:d8:e6:91:d7:55:05:d4:
                    23:9e:ec:4b:bb:55:a3:cc:61:59:8d:c2:57:19:32:
                    b1:9e:e7:15:4e:5e:27:13:d9:e7:0b:c8:cd:15:e5:
                    f3:8b:b0:7a:91:03:2f:78:9f:05:a6:4d:39:54:3f:
                    47:49:dc:29:df:4b:9a:4f:ba:99:98:6a:0d:74:75:
                    00:3f:95:2c:06:f3:80:3f:d0:75:c4:a3:d5:7b:76:
                    0b:bd:67:c7:6b:0e:37:c9:b0:70:06:e0:c0:63:f3:
                    85:fd:c8:c2:e3:33:89:21:bf:4b:90:33:66:25:98:
                    96:f2:68:56:08:1b:db:5a:9f:d6:47:1b:28:13:8f:
                    bf:64:39:2e:f8:5f:ac:fc:1a:c6:ec:fa:a5:16:54:
                    26:85:2f:4a:7b:e4:68:a7:bb:72:55:2a:6e:2e:41:
                    2a:6d:0c:8f:1a:a6:89:a8:df:31:c5:8f:52:86:e9:
                    b8:64:61:3a:fd:26:7c:82:e3:09:ca:4a:5b:fa:31:
                    2c:95:97:71:6d:4f:67:52:78:26:0c:21:9b:67:89:
                    b2:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:68:E4:75:79:01:54:8E:0D:E7:26:9B:10:CB:2F:EF:22:11:E5:70
            X509v3 Authority Key Identifier:
                keyid:7E:3F:B8:53:F8:40:B3:77:0C:D3:FA:42:B3:F9:D2:F9:BE:7D:1B:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fj-4U_hAs3cM0_pCs_nS-b59G38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/eddeae-b59b-41bb-8fd6-163f0e077f23/1/0mjkdXkBVI4N5yabEMsv7yIR5XA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/eddeae-b59b-41bb-8fd6-163f0e077f23/1/fj-4U_hAs3cM0_pCs_nS-b59G38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  88.135.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:6c:48:f7:23:4d:7b:b8:3f:17:aa:6d:23:d5:38:6f:ed:00:
         9e:83:45:c2:f8:a3:a6:dc:3b:6e:f4:d2:75:1e:e6:87:73:2d:
         38:90:de:1e:22:8e:f4:0c:77:b6:7f:1d:ee:85:de:d4:09:78:
         9f:5a:f4:9a:f3:bd:01:91:ad:a9:2b:ba:40:97:bd:95:9c:17:
         6d:74:a3:50:80:8a:05:99:d8:1b:f4:08:c1:41:4d:42:1d:98:
         b9:52:1d:a5:f0:44:19:22:1b:0c:ea:e7:75:8e:b9:df:0a:4f:
         16:99:c3:82:13:d8:c5:df:29:06:0c:50:d9:bd:20:93:61:00:
         be:69:f0:be:4e:1f:12:29:27:10:97:c8:6a:ad:61:7d:90:f2:
         96:01:d5:87:f0:8f:94:55:d1:c0:9c:53:19:93:76:4c:f0:90:
         54:db:32:60:82:d3:32:6b:3a:8e:97:9c:8d:24:0b:3d:f5:be:
         8a:77:fe:60:ae:43:01:85:0f:70:8f:37:1d:cd:2d:cd:01:fc:
         5e:c1:f5:9c:cc:e1:58:f8:f1:53:c7:1c:8e:4e:1c:5c:84:b9:
         8b:e1:f0:47:7b:4d:6a:e5:95:07:57:3f:13:f9:08:82:5c:e8:
         91:fd:f4:46:f0:e1:13:d9:d2:2c:a8:ae:4f:62:1e:17:f3:bc:
         76:78:f6:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:20 2023 by rpki-client on console.sobornost.net