Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/AZUJrHE_UA1OMwJ04TKTxUexmCk.roa
File:                     AZUJrHE_UA1OMwJ04TKTxUexmCk.roa (raw, json)
Hash identifier:          bX0yc3H1puFF2XK+6CVTqiJcTPn8zF46Yp+FrWXKkkg=
Subject key identifier:   01:95:09:AC:71:3F:50:0D:4E:33:02:74:E1:32:93:C5:47:B1:98:29
Certificate issuer:       /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial:       4326B6FF
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/AZUJrHE_UA1OMwJ04TKTxUexmCk.roa
Signing time:             Wed 25 May 2022 06:28:17 +0000
ROA not before:           Wed 25 May 2022 06:28:17 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     42225
IP address blocks:        86.105.171.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1126610687 (0x4326b6ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
        Validity
            Not Before: May 25 06:28:17 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=019509ac713f500d4e330274e13293c547b19829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:45:e4:cc:7f:94:a0:e1:e9:0a:62:db:ab:08:
                    ba:38:34:38:8b:af:3e:8f:85:77:60:ea:d9:2b:3a:
                    1a:76:cf:92:88:81:e1:ec:ab:72:52:c4:4a:9f:a5:
                    0f:5b:8f:80:10:37:94:e0:d9:86:b6:62:58:c8:0b:
                    e4:76:f4:73:2a:97:2f:51:d4:40:52:81:73:f3:2d:
                    c6:3e:08:e2:08:6b:88:5d:27:4a:e9:f0:e1:18:d1:
                    a3:15:e4:fb:d5:76:51:b6:f7:b5:07:64:67:d7:7f:
                    56:40:fb:93:53:dc:65:35:4f:3e:c5:53:f3:f9:f9:
                    27:64:2e:e9:c1:5e:3a:5c:69:62:92:03:75:ee:52:
                    56:8b:1a:3a:6c:97:5e:64:38:30:a5:9e:b4:b1:d9:
                    8c:41:41:40:8a:75:5a:54:78:e3:fd:5c:13:5a:fe:
                    77:bd:42:ed:6d:1a:a9:45:95:84:b5:10:d7:49:dd:
                    12:ff:83:22:33:28:42:d8:25:4e:91:b6:e1:1f:3b:
                    18:e5:2d:5f:14:ed:ba:27:d9:19:88:04:f1:eb:30:
                    db:f6:4d:8f:d8:25:92:f4:2b:59:96:d0:d6:44:1a:
                    fc:17:21:9c:8d:c8:4f:55:b5:8d:ff:fe:ca:53:99:
                    60:d8:83:8f:24:38:d0:2f:0c:72:bc:68:85:a3:88:
                    db:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:95:09:AC:71:3F:50:0D:4E:33:02:74:E1:32:93:C5:47:B1:98:29
            X509v3 Authority Key Identifier:
                keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/AZUJrHE_UA1OMwJ04TKTxUexmCk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  86.105.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:2a:4e:99:e0:7f:14:f4:06:1d:4e:e1:0b:e5:56:b5:57:fe:
         e2:4f:0d:e5:1c:19:ba:85:ae:3b:8f:d1:38:26:f6:42:22:a4:
         62:fe:d3:20:30:e0:6b:3b:8e:ad:47:2d:35:69:84:b8:ff:fb:
         e1:e4:ca:6a:69:22:dc:a5:0d:ec:3e:7a:22:14:cb:c0:48:7f:
         7a:4b:26:00:1e:98:55:f7:84:17:0e:0d:5e:e2:9b:2e:99:fb:
         05:ac:f5:29:60:7f:7f:dd:5c:1c:85:58:56:3d:38:c4:d5:e4:
         fd:6c:cb:51:62:42:39:a2:a1:9c:c5:1f:4a:90:33:dd:bf:ed:
         85:83:df:dc:73:e4:bc:5a:74:ce:f6:16:86:88:b6:d4:42:9f:
         22:37:1e:22:bc:e5:91:cf:bd:ac:fc:00:4c:4d:83:5b:74:ba:
         01:f1:f7:5c:4d:88:36:59:70:d1:dc:91:f2:5b:0b:32:b5:63:
         d2:fc:00:f7:c6:17:a9:a9:d2:c9:b0:26:a4:54:b0:7c:6f:96:
         ab:bf:48:dc:75:cc:77:2f:a4:15:c0:3e:82:e5:ae:88:41:92:
         f0:f2:6a:b4:d2:01:21:31:ea:d8:13:9e:50:4b:43:c0:d6:3c:
         bb:86:aa:12:cb:cb:93:de:08:27:f7:d2:d3:b0:48:99:ba:1f:
         e8:8c:13:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:42 2024 by rpki-client on console-fra.rpki-client.org