Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/LVCJ15DEiIw7MqDuMgmlU0VN_kA.roa
File:                     LVCJ15DEiIw7MqDuMgmlU0VN_kA.roa (raw, json)
Hash identifier:          B12ag0jmT/vYGPYcg9NcuR4p3J8DgKZ28XGIRIdvPxg=
Subject key identifier:   2D:50:89:D7:90:C4:88:8C:3B:32:A0:EE:32:09:A5:53:45:4D:FE:40
Certificate issuer:       /CN=9e9e6887ea7572a6411306c87b0cc089397a6354
Certificate serial:       03EBEF29
Authority key identifier: 9E:9E:68:87:EA:75:72:A6:41:13:06:C8:7B:0C:C0:89:39:7A:63:54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/np5oh-p1cqZBEwbIewzAiTl6Y1Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/LVCJ15DEiIw7MqDuMgmlU0VN_kA.roa
Signing time:             Sat 28 May 2022 07:48:13 +0000
ROA not before:           Sat 28 May 2022 07:48:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     213145
IP address blocks:        188.125.175.0/24 maxlen: 24
                          185.117.99.0/24 maxlen: 24
                          185.117.120.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65793833 (0x3ebef29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e9e6887ea7572a6411306c87b0cc089397a6354
        Validity
            Not Before: May 28 07:48:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2d5089d790c4888c3b32a0ee3209a553454dfe40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7d:34:ec:61:73:de:c5:0b:e0:f4:5d:b6:e4:
                    bf:1c:12:a2:41:b4:27:ec:e8:4f:ed:12:74:2b:1f:
                    80:ea:20:31:47:94:56:bd:d2:65:19:84:fe:3d:2d:
                    30:8f:17:df:09:20:92:38:32:75:8c:0d:11:d5:90:
                    44:44:f4:ea:66:ea:a3:03:70:92:af:88:55:48:76:
                    14:8a:a4:68:4f:dd:86:36:60:05:53:93:7a:84:7c:
                    31:8a:d8:91:7a:48:7a:78:f9:ca:90:58:c6:8f:52:
                    5d:92:44:31:d2:69:d8:88:64:0a:5c:54:05:a8:f3:
                    28:92:ec:c0:4e:74:8c:f9:84:f7:3b:19:6d:f5:d9:
                    8a:d3:d8:dc:92:d7:7f:4f:2a:db:d8:f9:68:63:5d:
                    6d:8a:d6:f4:8d:01:ec:1f:03:57:08:16:f8:7a:de:
                    9a:bf:2e:b9:c4:0d:df:3a:19:11:a9:4d:07:e9:e1:
                    10:89:7d:f5:8d:c0:a8:b0:ef:64:c2:18:dc:37:dc:
                    39:d9:30:a5:c9:ea:25:f8:d6:ef:d7:d9:db:50:3c:
                    28:7f:06:ac:39:57:51:2d:46:86:ee:81:fb:fc:b4:
                    92:f4:4c:3d:16:e2:e7:23:e0:6d:65:8c:97:20:eb:
                    b8:24:00:33:25:ec:cb:5f:1e:29:b8:82:d8:fb:67:
                    67:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:50:89:D7:90:C4:88:8C:3B:32:A0:EE:32:09:A5:53:45:4D:FE:40
            X509v3 Authority Key Identifier:
                keyid:9E:9E:68:87:EA:75:72:A6:41:13:06:C8:7B:0C:C0:89:39:7A:63:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/np5oh-p1cqZBEwbIewzAiTl6Y1Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/LVCJ15DEiIw7MqDuMgmlU0VN_kA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/np5oh-p1cqZBEwbIewzAiTl6Y1Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.117.99.0/24
                  185.117.120.0/22
                  188.125.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:e6:1b:3b:dc:d0:86:94:ab:38:cb:52:aa:b3:c7:60:68:ea:
         20:47:15:b8:b7:e8:1a:5f:8b:46:c6:82:1b:8b:72:35:bc:b3:
         a4:c4:6c:ec:44:fc:8a:53:93:18:5c:fa:a4:42:e6:89:45:52:
         42:db:0c:ed:18:c4:8c:98:c3:83:98:c3:82:ad:71:43:36:32:
         cb:86:df:f1:de:e9:69:c0:c0:3e:5c:a8:1b:f0:d9:b1:b7:95:
         16:fb:74:dd:ea:54:89:16:d0:b0:08:e1:39:c5:e5:76:18:3b:
         7a:8d:70:8b:5e:73:93:9b:87:b8:64:85:9e:a3:0b:16:66:bd:
         21:e2:a6:6d:fb:81:22:db:5f:4d:fc:35:67:26:1a:47:a7:62:
         b9:f1:9d:c6:1f:c1:a9:4b:a6:bd:34:f7:4e:9e:c4:ee:81:ed:
         51:d2:14:ea:35:b1:8a:96:88:76:80:ae:34:ee:2f:d1:6c:0a:
         81:65:3b:cf:e0:cb:b4:d8:e9:7d:fc:a8:8b:80:8e:b4:03:b8:
         7a:cd:9a:d1:07:80:69:2a:a2:65:b6:06:b3:7a:17:f8:38:76:
         1b:6c:be:a1:7d:0f:0f:e2:65:4f:de:ad:10:ca:e4:87:19:be:
         1b:9c:54:cc:27:19:54:f3:c3:97:96:ed:49:3d:a9:f8:cc:c2:
         e2:c0:84:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:01 2024 by rpki-client on console-fra.rpki-client.org