Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/DhkdVA5AXM3xeifO2-nsko4LmcE.roa
File:                     DhkdVA5AXM3xeifO2-nsko4LmcE.roa (raw, json)
Hash identifier:          WvuhGg/TZVEnaajkqGbV5FGVSDGTYL9ZJkPqEP+ATeA=
Subject key identifier:   0E:19:1D:54:0E:40:5C:CD:F1:7A:27:CE:DB:E9:EC:92:8E:0B:99:C1
Certificate issuer:       /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial:       42DAF10D
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/DhkdVA5AXM3xeifO2-nsko4LmcE.roa
Signing time:             Wed 04 May 2022 07:10:00 +0000
ROA not before:           Wed 04 May 2022 07:10:00 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     50990
IP address blocks:        94.176.180.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1121644813 (0x42daf10d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
        Validity
            Not Before: May  4 07:10:00 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0e191d540e405ccdf17a27cedbe9ec928e0b99c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ea:14:c9:e8:1a:cc:1a:8d:0d:8f:3c:a6:43:
                    71:4d:0d:20:d8:8f:5c:fe:f8:40:54:1f:77:5f:56:
                    28:30:c8:96:20:08:1f:35:23:90:de:e4:14:20:07:
                    05:4a:f9:b6:eb:a1:02:2f:61:74:e0:99:55:a5:02:
                    78:4a:44:c1:d1:5b:4d:da:10:00:3a:0f:22:75:8e:
                    ec:c0:f7:71:44:8a:20:18:10:02:5d:bd:28:05:d8:
                    23:85:3e:f9:aa:0e:6b:14:33:3e:5c:d8:9f:fd:5f:
                    42:96:7f:92:1b:7c:1e:6a:8f:84:cd:d7:54:83:1f:
                    94:46:bc:2d:1e:30:f5:59:c8:e9:d6:e9:50:02:e0:
                    8b:ff:06:ca:82:92:86:26:bf:c3:5b:72:f1:eb:0c:
                    4e:30:ef:96:cc:2f:37:b3:d9:5f:15:a6:66:36:33:
                    ab:08:8d:b4:5d:9c:6f:75:20:02:b2:d4:13:89:ae:
                    32:f9:e6:41:eb:c4:3c:c2:68:af:b1:82:6e:71:d7:
                    91:2f:b8:59:7f:a1:91:8c:3e:df:be:a1:d3:e0:74:
                    37:bf:d4:79:e5:f8:65:a7:3c:aa:d3:5f:2c:37:49:
                    cd:65:4b:06:c8:ae:f2:8f:a1:f0:7e:89:18:1a:b0:
                    7d:c6:c6:29:fa:8e:56:69:f7:5e:4f:f8:e7:56:47:
                    48:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:19:1D:54:0E:40:5C:CD:F1:7A:27:CE:DB:E9:EC:92:8E:0B:99:C1
            X509v3 Authority Key Identifier:
                keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/DhkdVA5AXM3xeifO2-nsko4LmcE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.176.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1e:75:f8:ed:cb:25:52:3b:98:23:a2:c4:b3:75:d6:bf:db:41:
         a3:02:f6:5c:3f:4b:07:43:f3:38:26:6b:6a:97:a6:6f:0b:5d:
         17:c3:cd:f0:7a:b1:50:87:c0:10:39:3a:4d:e4:33:3c:72:bd:
         08:b1:6b:7a:a6:a6:69:12:b6:d2:32:dd:ca:89:f1:54:b0:a1:
         bc:de:34:fc:3e:8c:67:f0:47:09:f7:33:06:c1:03:53:b7:86:
         2c:90:80:93:46:16:df:60:7d:0e:07:4e:f6:04:72:ad:a2:38:
         be:e9:71:62:ff:0c:aa:28:25:e5:f4:94:8e:4c:c7:3b:c2:62:
         79:65:ce:88:d0:6f:68:c3:2b:73:4f:44:00:07:3e:33:33:1e:
         5e:5f:d8:d5:b8:51:09:08:b0:38:e3:03:26:98:33:b0:0d:67:
         08:98:8f:1d:f8:87:03:92:e6:2b:18:a0:d8:50:44:4b:6d:58:
         66:e2:b0:3a:0d:00:75:50:6e:fc:15:e0:5a:db:a4:e3:2c:9f:
         63:e2:60:8f:3a:8d:9a:58:42:db:66:37:1a:7f:b8:f1:4f:2a:
         9a:00:ca:c9:1a:d7:41:75:c3:53:d6:78:6a:52:c7:96:48:04:
         d8:4c:1f:62:25:41:53:32:54:6f:c5:87:7b:e3:62:73:70:54:
         44:fa:7f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:42 2024 by rpki-client on console-fra.rpki-client.org