Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/CVHDGCJyE5FsMubLCcpXDEAykLY.roa
File:                     CVHDGCJyE5FsMubLCcpXDEAykLY.roa (raw, json)
Hash identifier:          sJ4qEixWDxbYMdl6qseo6ZXNyd11OpUkqw8exB5hy1Y=
Subject key identifier:   09:51:C3:18:22:72:13:91:6C:32:E6:CB:09:CA:57:0C:40:32:90:B6
Certificate issuer:       /CN=c2fd2c74ad6fae2ddd0f6e9c39fde831893ae6f9
Certificate serial:       0181F666A1108FB329544D66986A664D9C4A
Authority key identifier: C2:FD:2C:74:AD:6F:AE:2D:DD:0F:6E:9C:39:FD:E8:31:89:3A:E6:F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wv0sdK1vri3dD26cOf3oMYk65vk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/CVHDGCJyE5FsMubLCcpXDEAykLY.roa
Signing time:             Wed 13 Jul 2022 07:12:09 +0000
ROA not before:           Wed 13 Jul 2022 07:12:09 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     21409
IP address blocks:        185.110.64.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:f6:66:a1:10:8f:b3:29:54:4d:66:98:6a:66:4d:9c:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2fd2c74ad6fae2ddd0f6e9c39fde831893ae6f9
        Validity
            Not Before: Jul 13 07:12:09 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0951c318227213916c32e6cb09ca570c403290b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3f:51:c2:6a:75:c3:76:84:1c:39:8c:37:e6:
                    f3:4d:ff:67:95:c7:b5:cc:69:57:c0:c0:57:35:9e:
                    ef:4e:a6:8d:9d:a8:f6:3e:70:48:8d:f6:72:d6:29:
                    3e:74:8d:12:1b:11:42:2d:5c:ab:74:ac:10:fb:ca:
                    1d:34:31:43:72:6a:d0:50:21:29:e5:61:f7:51:25:
                    02:55:6f:15:5e:12:24:db:32:9a:16:c6:ad:6b:3b:
                    d6:cf:82:ae:e4:d8:25:49:46:52:52:d8:49:32:a1:
                    46:52:15:12:ff:13:7e:fa:1f:73:b0:b5:b8:14:cd:
                    1d:c6:19:b6:c4:23:f1:7d:d4:b3:06:97:b0:dc:74:
                    80:52:ec:ad:d1:33:03:8b:35:89:75:85:54:db:ee:
                    91:9b:21:02:bc:78:79:ff:ee:74:95:a8:00:62:d6:
                    64:d5:ce:27:ec:2c:00:5f:a3:34:f8:fe:f8:67:2b:
                    61:51:59:1d:37:9a:65:f8:30:41:aa:43:f5:9e:0c:
                    b8:43:78:cd:35:a7:66:5e:51:8a:a0:1f:59:e0:ec:
                    61:98:ea:aa:5f:f7:c0:4a:3e:20:97:50:4c:c4:44:
                    b6:8e:43:02:6d:6a:1b:d9:1e:83:ef:6d:5a:96:1a:
                    c6:a3:6a:1c:2b:81:eb:46:dd:f1:70:43:6e:19:dc:
                    ca:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:51:C3:18:22:72:13:91:6C:32:E6:CB:09:CA:57:0C:40:32:90:B6
            X509v3 Authority Key Identifier:
                keyid:C2:FD:2C:74:AD:6F:AE:2D:DD:0F:6E:9C:39:FD:E8:31:89:3A:E6:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wv0sdK1vri3dD26cOf3oMYk65vk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/CVHDGCJyE5FsMubLCcpXDEAykLY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.110.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ab:bd:86:60:a4:92:86:e5:10:e9:c5:8f:a7:dc:5d:bb:6b:2d:
         30:43:e2:e1:31:82:fc:32:81:81:c1:65:e1:ad:b1:cc:34:81:
         f7:10:dc:de:be:e7:3a:21:52:e2:a3:de:62:bf:9a:60:33:07:
         f2:3b:3c:6e:14:d0:21:85:f2:d7:04:2a:aa:6b:33:9a:2d:2f:
         a3:4a:f1:db:f4:de:22:0f:0d:38:91:40:de:6e:b6:6c:9e:34:
         61:c1:48:b1:24:95:d2:56:71:cb:7c:7a:9c:a7:e4:3f:f3:10:
         59:d7:d8:fc:f4:29:e3:2b:0b:f1:e6:29:b7:7a:24:fc:4c:a5:
         d4:0e:bb:1a:0e:8f:28:0a:78:08:9b:4f:ca:71:10:aa:a6:55:
         13:94:2a:ee:ba:98:e8:c4:f2:34:90:6c:1b:8e:ac:65:8c:b1:
         e0:38:ea:26:af:70:57:5b:1d:61:03:d5:f6:2c:c8:4f:0a:be:
         bf:da:00:98:49:83:6f:5a:ef:55:8c:87:d4:e8:47:4e:f7:d7:
         8c:f3:26:4f:b7:d8:b2:01:a1:01:20:9d:26:7c:19:1a:00:42:
         30:50:bf:8b:b9:fe:08:57:f7:c6:59:35:fa:b6:fe:c6:d5:42:
         bd:6e:13:f3:04:e5:26:8c:05:b2:0f:ee:a1:7b:bd:3c:9c:14:
         bd:87:db:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:12 2024 by rpki-client on console-ams.rpki-client.org