Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/28__-uF3jqoiZ54LWU6166YU5nE.roa
File:                     28__-uF3jqoiZ54LWU6166YU5nE.roa (raw, json)
Hash identifier:          V4fEKLmifLxEDo8m5J2oXgh6iPyVPmBBhnZTvZG+nu0=
Subject key identifier:   DB:CF:FF:FA:E1:77:8E:AA:22:67:9E:0B:59:4E:B5:EB:A6:14:E6:71
Certificate issuer:       /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial:       42E22478
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/28__-uF3jqoiZ54LWU6166YU5nE.roa
Signing time:             Thu 05 May 2022 13:22:10 +0000
ROA not before:           Thu 05 May 2022 13:22:10 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     58078
IP address blocks:        89.37.184.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1122116728 (0x42e22478)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
        Validity
            Not Before: May  5 13:22:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=dbcffffae1778eaa22679e0b594eb5eba614e671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a7:10:fe:15:e4:4d:5f:17:01:16:7b:41:9b:
                    b9:16:c8:d2:11:df:54:d4:3b:b3:dc:4f:2c:c1:4c:
                    ad:fa:2b:8b:1e:f6:a6:22:7c:b1:6f:23:42:9a:d7:
                    28:8c:a6:14:b7:cc:7b:9c:19:9a:46:7b:d1:e3:a7:
                    cf:6e:e2:2a:76:72:0f:04:13:60:cb:bc:ae:79:6e:
                    56:cf:c8:89:05:79:ec:67:98:e7:1c:56:3b:0c:06:
                    31:d5:c7:03:24:23:50:cc:a2:a9:bf:00:31:a5:d2:
                    ec:29:ab:1e:ad:16:66:bd:5c:a4:42:65:04:74:12:
                    a4:f5:de:ed:7d:cc:da:d5:97:0b:24:4c:18:53:c8:
                    9e:97:7e:02:48:9e:ad:21:7b:43:0b:5d:0d:a9:de:
                    71:99:0e:60:f3:e5:c4:00:34:73:55:48:b0:fe:38:
                    80:04:a4:d6:0a:a7:b7:a0:c4:3a:fa:1c:4d:65:7d:
                    3b:9d:c4:ac:0d:92:0c:21:3b:ca:16:73:70:cc:fc:
                    c8:46:8f:8e:11:bf:47:22:ea:2f:58:e5:bd:14:86:
                    7d:aa:d5:ff:12:38:ad:b2:1a:7b:c8:c9:54:00:49:
                    31:0e:f3:17:3e:0b:45:e3:d5:d6:40:3f:95:34:96:
                    c8:98:d8:9c:c5:72:eb:c0:73:a7:29:e0:4c:9c:d8:
                    16:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:CF:FF:FA:E1:77:8E:AA:22:67:9E:0B:59:4E:B5:EB:A6:14:E6:71
            X509v3 Authority Key Identifier:
                keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/28__-uF3jqoiZ54LWU6166YU5nE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.37.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         da:b0:51:9d:ad:e2:8c:7f:33:dd:48:9c:d7:40:cd:49:c3:29:
         21:90:6b:cf:1c:a3:a5:c0:9b:8b:c6:79:a2:79:5b:b9:62:c4:
         ba:e3:f3:71:8b:ee:9a:09:e7:c8:a3:d0:cf:1a:83:eb:86:c8:
         02:aa:68:8c:55:0a:0e:2f:14:99:e9:16:50:23:1c:53:7d:19:
         63:65:d3:6a:61:e1:4e:54:3f:05:db:e6:d3:d9:88:f6:15:da:
         71:fd:2b:f4:44:3c:5a:c5:55:b5:61:b9:bb:6c:61:87:e4:ea:
         c1:cb:6d:e1:c9:7b:ad:82:22:65:63:78:9e:7b:25:ce:c7:19:
         7a:6c:fb:37:2b:79:21:95:89:a4:be:78:07:e3:81:bc:dd:1d:
         1a:a3:13:29:94:17:e0:fb:fa:2c:d6:f8:5e:f4:5a:7d:2f:8e:
         54:69:70:af:c1:a7:95:e8:0e:68:5c:3d:eb:5b:5d:1e:77:58:
         34:ad:18:92:0f:40:eb:91:55:b4:4f:f9:75:92:98:b6:09:c2:
         67:aa:a0:a1:2a:70:e1:3c:06:e6:4f:c6:68:bb:d6:64:75:40:
         d7:41:9a:80:0b:34:fa:11:a1:a1:02:8e:22:ee:5d:45:01:52:
         3c:b4:3c:8b:77:7a:ee:6c:86:21:80:9d:5e:7a:e5:c7:a4:8f:
         3e:a9:fc:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:52 2024 by rpki-client on console-ams.rpki-client.org