Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/VERPNcpdYGofJt86I7kziFD_PIs.roa
File:                     VERPNcpdYGofJt86I7kziFD_PIs.roa (raw, json)
Hash identifier:          XNrmzFWShXDU/P1KYEr41bvvDKtOmH1TSY5bOHuB7pg=
Subject key identifier:   54:44:4F:35:CA:5D:60:6A:1F:26:DF:3A:23:B9:33:88:50:FF:3C:8B
Certificate issuer:       /CN=9e9e6887ea7572a6411306c87b0cc089397a6354
Certificate serial:       03FFF672
Authority key identifier: 9E:9E:68:87:EA:75:72:A6:41:13:06:C8:7B:0C:C0:89:39:7A:63:54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/np5oh-p1cqZBEwbIewzAiTl6Y1Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/VERPNcpdYGofJt86I7kziFD_PIs.roa
Signing time:             Tue 31 May 2022 06:59:13 +0000
ROA not before:           Tue 31 May 2022 06:59:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     15924
IP address blocks:        185.117.120.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67106418 (0x3fff672)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e9e6887ea7572a6411306c87b0cc089397a6354
        Validity
            Not Before: May 31 06:59:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=54444f35ca5d606a1f26df3a23b9338850ff3c8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:81:ac:20:19:65:35:89:91:14:8c:e6:24:90:
                    d2:20:b6:36:60:0b:45:30:a2:0d:43:88:72:df:eb:
                    6f:01:5f:1d:02:fd:f4:93:b9:70:e0:d9:a3:44:4c:
                    3a:ca:17:c6:b3:d2:98:3f:e9:c1:ae:9b:d8:a6:51:
                    42:ca:62:8a:d1:15:d4:9b:9a:eb:cf:3b:08:21:91:
                    fe:7c:de:6d:d8:81:99:66:14:f9:27:4b:3a:d5:ab:
                    d0:72:3a:7f:95:9a:e7:3b:48:d8:f4:dc:5e:d0:3d:
                    42:48:89:ff:f4:30:2e:df:cd:98:00:fd:b2:08:67:
                    97:7d:59:24:1d:fa:15:4c:b0:42:d1:e1:47:9f:e5:
                    25:8e:e3:d8:dc:f6:37:94:a9:f3:b8:d2:16:b6:56:
                    60:d3:52:0e:53:0c:12:7c:b2:52:08:c2:c8:fe:b7:
                    bd:9f:50:a9:ef:d3:c7:c7:cc:73:54:a3:0f:eb:4d:
                    31:bb:b5:64:33:ea:f7:ed:f8:65:6a:08:b1:39:9b:
                    eb:1b:97:f0:61:ff:51:46:e9:a0:84:6b:99:a8:f5:
                    9b:29:cb:83:4f:ba:45:e8:96:3e:74:34:5c:5e:b6:
                    a8:bb:cf:ee:11:91:e5:98:7b:8f:7c:02:ae:a2:6e:
                    c5:03:a0:6b:63:5e:9a:f7:20:40:a1:11:6b:bc:97:
                    75:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:44:4F:35:CA:5D:60:6A:1F:26:DF:3A:23:B9:33:88:50:FF:3C:8B
            X509v3 Authority Key Identifier:
                keyid:9E:9E:68:87:EA:75:72:A6:41:13:06:C8:7B:0C:C0:89:39:7A:63:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/np5oh-p1cqZBEwbIewzAiTl6Y1Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/VERPNcpdYGofJt86I7kziFD_PIs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/np5oh-p1cqZBEwbIewzAiTl6Y1Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.117.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:71:ef:13:27:8b:77:23:7a:13:cd:67:cc:3c:17:9b:aa:45:
         d7:8f:0a:5a:50:2d:40:6a:6c:03:d7:27:24:86:89:ba:79:0e:
         71:a7:19:42:fb:e5:50:b6:bf:30:cc:e7:b1:28:16:e1:38:8f:
         b9:00:e8:f6:0a:98:81:ce:05:cc:a7:7d:1e:65:60:e1:f1:15:
         3b:25:ad:1b:3d:4c:c4:38:44:69:0c:2a:18:53:b2:3b:41:d0:
         6f:6b:ac:44:55:e0:af:ac:24:71:36:d7:33:83:c9:3f:fe:16:
         7c:d7:1a:01:f5:a6:d9:05:cf:3a:b6:45:03:82:f8:6b:3f:41:
         98:c3:38:cf:af:10:81:27:ac:89:44:a8:75:07:7b:b8:a0:6f:
         d0:70:d9:00:1f:7e:ef:2e:75:e0:73:1d:1c:97:c0:5f:4e:01:
         59:dd:85:4c:ef:f7:fe:07:fa:19:94:9a:8a:63:37:87:b7:3a:
         69:0f:37:b8:07:65:44:1f:ca:1c:06:af:b4:22:2e:8e:3f:49:
         99:bc:b3:6c:c3:9c:85:04:1b:7a:df:e9:b4:fd:89:e3:84:c8:
         fd:ee:8e:60:b4:6f:2e:e6:b5:b3:27:af:cf:15:37:6c:5c:f5:
         4d:b1:2e:24:d8:8f:a6:23:34:3d:92:f4:cd:42:2c:1b:52:fb:
         b1:71:4a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:58 2024 by rpki-client on console-ams.rpki-client.org