Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/569442-4e6d-4ebe-9bb2-3fdb753a8619/1/aVTJAyapqZHaO8NZsG4XwPioERs.roa
File:                     aVTJAyapqZHaO8NZsG4XwPioERs.roa (raw, json)
Hash identifier:          fMjaFMh5YCTtYwhc5yWMN4/twyNzP7yS1OugIIyhfWs=
Subject key identifier:   69:54:C9:03:26:A9:A9:91:DA:3B:C3:59:B0:6E:17:C0:F8:A8:11:1B
Certificate issuer:       /CN=22c5cc7c364c90eafaba697e0bf59f05569a9695
Certificate serial:       017CE4
Authority key identifier: 22:C5:CC:7C:36:4C:90:EA:FA:BA:69:7E:0B:F5:9F:05:56:9A:96:95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsXMfDZMkOr6uml-C_WfBVaalpU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/569442-4e6d-4ebe-9bb2-3fdb753a8619/1/aVTJAyapqZHaO8NZsG4XwPioERs.roa
Signing time:             Mon 30 May 2022 12:51:14 +0000
ROA not before:           Mon 30 May 2022 12:51:14 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     41971
IP address blocks:        194.60.82.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 97508 (0x17ce4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c5cc7c364c90eafaba697e0bf59f05569a9695
        Validity
            Not Before: May 30 12:51:14 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6954c90326a9a991da3bc359b06e17c0f8a8111b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:de:16:ea:22:96:1a:d5:b7:0e:3d:ac:60:a5:
                    0e:23:11:93:91:35:95:83:80:80:38:b4:41:e5:c2:
                    c1:f8:9d:72:95:bb:06:a8:f8:3c:f1:37:05:e9:ad:
                    8c:6a:f8:90:b1:62:8f:d0:86:84:af:f6:77:36:3d:
                    ca:73:1a:28:b9:cd:dc:4b:18:c5:46:a4:6a:2c:ed:
                    8f:75:71:8f:4c:47:b7:0a:4e:34:cc:b5:d4:d0:bc:
                    90:1c:12:c6:98:dd:7d:0d:81:1c:10:09:65:0e:5b:
                    00:d3:92:51:de:b8:ce:76:27:50:a7:95:c0:81:ff:
                    42:2e:4b:27:8e:e8:d1:aa:6e:8b:5c:51:10:be:03:
                    8b:ce:db:93:e4:30:ae:b3:d9:49:c6:e0:3e:a1:65:
                    24:85:18:f1:21:59:b9:59:a1:e0:8b:71:5c:ab:a6:
                    25:66:89:f4:4a:e3:41:d6:75:95:1a:81:f5:24:b9:
                    c0:c2:fc:b0:7f:e8:f6:16:d2:ad:51:41:e6:35:f4:
                    ef:48:8c:8b:8d:4f:de:f2:8c:eb:0a:c2:5a:c1:cd:
                    4b:14:6e:4c:e0:91:cd:78:c6:f6:03:5c:90:f0:a5:
                    74:eb:33:77:7d:7c:7a:bc:1d:bb:90:f0:a7:21:40:
                    6d:84:a2:14:ca:a2:57:b5:01:e6:e8:5f:df:cb:6e:
                    4e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:54:C9:03:26:A9:A9:91:DA:3B:C3:59:B0:6E:17:C0:F8:A8:11:1B
            X509v3 Authority Key Identifier:
                keyid:22:C5:CC:7C:36:4C:90:EA:FA:BA:69:7E:0B:F5:9F:05:56:9A:96:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsXMfDZMkOr6uml-C_WfBVaalpU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/569442-4e6d-4ebe-9bb2-3fdb753a8619/1/aVTJAyapqZHaO8NZsG4XwPioERs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/569442-4e6d-4ebe-9bb2-3fdb753a8619/1/IsXMfDZMkOr6uml-C_WfBVaalpU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.60.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:f7:8f:12:89:a7:37:95:b5:bb:58:0b:3b:0f:19:c0:06:8d:
         01:17:ac:c5:91:cf:ee:86:52:49:73:0d:49:87:02:26:f0:b1:
         61:a2:8b:6f:f0:7f:0e:03:7d:64:07:37:6f:cc:76:4a:8d:c3:
         45:8b:77:74:dc:22:59:c3:43:e6:82:df:1c:7a:c2:cd:5b:36:
         5c:5c:e2:be:db:d7:72:a3:6f:ab:b6:a7:4e:f4:88:69:0f:b1:
         cb:0a:5a:c3:f4:76:85:04:a8:19:a3:a5:73:71:7e:2f:35:12:
         d3:6d:b2:13:f4:53:8b:42:99:e2:8e:13:4f:0d:c2:bc:31:0b:
         1f:20:e6:8a:d0:3c:15:16:3b:f9:aa:a0:b4:68:1a:cb:7f:6a:
         da:4b:ef:96:d3:dc:5a:28:f6:a1:50:56:3e:10:d6:0c:c2:42:
         67:53:2b:40:fa:65:ec:e1:d2:1c:47:00:c6:1e:bd:ee:8f:9f:
         8c:b4:12:b8:d5:b1:00:57:93:76:ba:93:7e:cc:d1:bf:24:ad:
         5e:f2:55:f5:47:34:e8:a8:42:d4:94:49:3b:0d:47:fc:2d:d8:
         13:c5:1c:39:80:3b:06:e0:5c:f2:be:7d:45:0a:16:50:9e:4d:
         71:20:b9:18:75:e9:0d:cf:8f:84:38:15:4a:4d:8a:85:40:91:
         50:1c:2b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:35 2024 by rpki-client on console-fra.rpki-client.org