Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/SmPHLWRLSN4n1Gu2U00lOzIR71U.roa
File:                     SmPHLWRLSN4n1Gu2U00lOzIR71U.roa (raw, json)
Hash identifier:          u4OCtMozaw3U5w7MJxge22FjslAYdFt8mKuJmPJt488=
Subject key identifier:   4A:63:C7:2D:64:4B:48:DE:27:D4:6B:B6:53:4D:25:3B:32:11:EF:55
Certificate issuer:       /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial:       42E70686
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/SmPHLWRLSN4n1Gu2U00lOzIR71U.roa
Signing time:             Sat 07 May 2022 06:46:25 +0000
ROA not before:           Sat 07 May 2022 06:46:25 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     48669
IP address blocks:        89.38.104.0/24 maxlen: 24
                          93.115.32.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1122436742 (0x42e70686)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
        Validity
            Not Before: May  7 06:46:25 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4a63c72d644b48de27d46bb6534d253b3211ef55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:42:19:1a:dc:bd:03:3d:69:4f:17:10:26:56:
                    ef:85:2f:05:d7:c6:7a:89:c7:5c:e3:58:c1:d2:b6:
                    25:32:9d:e0:74:d7:51:a8:d9:34:15:6d:9e:90:98:
                    43:7b:cc:cc:e2:46:9d:85:de:eb:2f:5e:68:14:06:
                    3f:7e:6e:81:ed:4b:d5:0d:81:5e:d6:4f:a4:8d:d6:
                    b9:b8:33:80:15:5b:4d:3e:0f:41:bb:50:ad:b4:f8:
                    ed:d5:c4:ea:44:f2:0d:c7:ed:18:e2:57:74:de:01:
                    6a:c6:04:1b:b1:e3:d8:9b:46:3c:e7:95:65:bb:6e:
                    21:fa:76:20:24:b1:ef:08:ed:35:85:fe:66:e5:e5:
                    14:8e:cf:23:b4:c0:2b:1f:5e:6a:9d:88:2d:7e:83:
                    78:8e:fb:19:d2:e6:d8:5e:31:73:3c:c3:b5:45:6f:
                    f7:45:40:ad:a9:9c:24:58:e4:be:2e:cc:9b:d7:ad:
                    ce:b9:f4:0d:b6:2b:cb:ac:90:f5:bf:50:8b:54:38:
                    06:95:ad:e8:5f:61:82:14:f4:78:e3:2b:e8:60:22:
                    70:d1:93:0c:05:85:2f:bb:d3:78:7d:7c:ab:62:56:
                    1e:d3:aa:14:40:2e:45:89:c2:4e:ec:d4:99:93:ed:
                    7a:1b:f8:22:aa:64:54:29:77:10:19:46:8a:40:b3:
                    5a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:63:C7:2D:64:4B:48:DE:27:D4:6B:B6:53:4D:25:3B:32:11:EF:55
            X509v3 Authority Key Identifier:
                keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/SmPHLWRLSN4n1Gu2U00lOzIR71U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.38.104.0/24
                  93.115.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:34:49:3e:30:59:02:fa:0c:77:fa:b5:90:7f:33:84:c2:02:
         56:1f:c4:05:44:8a:ef:09:0b:ab:53:c2:21:36:4a:ac:3a:6f:
         b1:a0:df:d2:be:68:26:f7:31:ee:0a:f9:53:07:4b:1d:94:6f:
         e2:c5:74:a8:23:60:9f:46:79:28:5d:2b:93:f1:0c:7d:7a:7b:
         18:ca:4a:2c:bc:30:87:01:3b:5d:7b:df:61:a8:ee:f0:e2:db:
         62:ae:b5:e5:12:cb:fa:e8:68:c2:84:e4:38:23:6e:0b:1a:c0:
         b0:1e:21:15:c8:67:f2:59:c8:6c:04:48:81:a2:fe:6b:f9:81:
         d7:47:0f:f3:aa:9a:1d:84:2e:58:b7:7d:80:88:a1:f2:3c:94:
         72:23:20:47:92:25:e0:73:4b:ec:5c:e6:19:36:76:5b:94:dc:
         df:f5:88:d4:a8:25:db:5d:89:a6:2b:f3:06:84:01:89:a5:30:
         72:38:e7:7e:ab:7a:d9:59:26:4d:3d:4f:4c:2b:40:0b:e0:90:
         38:dc:57:c9:0a:4d:cf:b5:75:31:46:5c:09:4b:fd:37:64:fb:
         1d:8f:4e:14:01:7c:b0:18:66:4f:19:89:ce:57:ad:81:e1:dc:
         72:27:ab:7b:02:15:b0:60:97:0e:bc:84:ca:20:93:88:f7:1f:
         8b:82:63:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:52 2024 by rpki-client on console-ams.rpki-client.org