Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/gEJAaFNN0NPjx2d46mBlmh99Nio.roa
File:                     gEJAaFNN0NPjx2d46mBlmh99Nio.roa (raw, json)
Hash identifier:          wQOIdEMGspGBpVQAlQPz/3pQWRqvQUSqC97qItK45zM=
Subject key identifier:   80:42:40:68:53:4D:D0:D3:E3:C7:67:78:EA:60:65:9A:1F:7D:36:2A
Certificate issuer:       /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial:       0181D86378CF334DD0C9FB5047FD4190913D
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/gEJAaFNN0NPjx2d46mBlmh99Nio.roa
Signing time:             Thu 07 Jul 2022 11:20:06 +0000
ROA not before:           Thu 07 Jul 2022 11:20:06 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     59784
IP address blocks:        86.106.78.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:d8:63:78:cf:33:4d:d0:c9:fb:50:47:fd:41:90:91:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
        Validity
            Not Before: Jul  7 11:20:06 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=80424068534dd0d3e3c76778ea60659a1f7d362a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:69:c3:a2:dc:02:0f:78:41:e7:39:7e:26:30:
                    e4:7d:91:85:ab:db:68:2f:48:28:f8:1b:dc:0a:63:
                    56:0a:02:80:93:13:d6:2d:9b:ce:46:01:32:42:ce:
                    8d:f8:6a:cb:60:8c:a6:2f:b9:dc:c7:39:73:43:ca:
                    c4:7d:18:0f:0e:41:dd:47:bd:dc:2f:2c:80:9f:eb:
                    5f:51:9d:9b:29:db:59:64:d0:9b:0d:b8:08:87:b8:
                    82:3c:37:0b:ab:12:6a:d5:2e:3f:f3:55:ae:7c:4d:
                    46:a5:6f:7d:b2:b7:7e:80:27:88:95:ae:e3:4e:ca:
                    3b:c7:a2:2d:a9:8d:53:91:15:4e:86:56:42:7d:7b:
                    6d:8b:e2:ac:b4:af:f3:c1:dd:79:83:e5:01:03:b4:
                    18:3b:93:6b:99:5d:53:82:96:44:a1:df:a3:2a:e7:
                    8b:52:32:32:39:21:99:f8:f3:38:7b:eb:73:03:f8:
                    20:ad:52:46:b3:b3:9a:cf:ff:cd:ed:2b:25:56:c1:
                    be:37:82:a1:a6:8c:cb:49:91:eb:02:29:d5:26:5d:
                    fc:de:bd:b6:80:bb:d6:57:3c:6f:0b:cc:70:80:e7:
                    58:33:ab:cf:45:dd:db:47:9a:30:3b:12:3a:8f:93:
                    75:e1:2d:78:47:a0:d2:1a:68:97:d4:db:95:89:1d:
                    dd:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:42:40:68:53:4D:D0:D3:E3:C7:67:78:EA:60:65:9A:1F:7D:36:2A
            X509v3 Authority Key Identifier:
                keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/gEJAaFNN0NPjx2d46mBlmh99Nio.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  86.106.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:56:3a:b2:2f:39:3d:40:f9:c3:9a:3c:8c:6f:01:c3:27:f3:
         eb:e1:b5:f3:cf:ac:79:79:dd:88:78:db:f8:9c:86:f5:55:7c:
         92:39:2e:46:ab:01:10:13:bb:01:02:02:f2:b4:64:61:4d:fb:
         af:36:94:98:a8:97:55:80:4e:ae:a3:be:e0:c0:ac:43:03:94:
         08:5a:60:60:e5:16:01:7b:ff:eb:af:98:29:8f:42:6d:39:30:
         11:55:53:65:de:50:4e:26:f2:c4:6e:6c:22:31:12:5a:d3:de:
         e0:f6:60:c3:7f:05:3e:bc:82:db:2d:73:f4:ce:fc:f1:79:5b:
         9a:fc:6f:e9:41:3b:16:f7:a4:18:ef:e8:ab:c4:f1:8e:cd:a7:
         03:3d:41:bd:2e:0b:bf:e2:ca:9a:eb:17:eb:5d:1a:2d:1e:9e:
         77:47:5e:ac:6b:04:d9:5f:18:6a:7c:48:56:ea:15:b0:47:db:
         b2:2f:88:c7:e3:2c:c5:a9:ac:7b:fd:f7:91:f8:94:77:a0:7f:
         36:af:4e:ef:70:ff:77:fa:5a:dd:3c:57:41:74:1a:af:76:94:
         cb:b8:fb:36:a0:12:a2:56:eb:08:f0:e5:3e:05:12:6d:24:77:
         b5:52:77:e6:7f:73:f6:46:c5:5a:d8:be:75:48:3a:b8:de:a7:
         37:35:7c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:42 2024 by rpki-client on console-fra.rpki-client.org