Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/b10771-066a-44b0-91f0-57f209f9506a/1/SYffArwdq5N5ldlZEBUy_ZLhHkI.roa
File:                     SYffArwdq5N5ldlZEBUy_ZLhHkI.roa (raw, json)
Hash identifier:          DI6Zz4t3Fj+GsuUse9fz0RbgT74L5MeResPsgUVUOQo=
Subject key identifier:   49:87:DF:02:BC:1D:AB:93:79:95:D9:59:10:15:32:FD:92:E1:1E:42
Certificate issuer:       /CN=0250181955d5411f506eba42badb9e5aa5dd8443
Certificate serial:       034460F1
Authority key identifier: 02:50:18:19:55:D5:41:1F:50:6E:BA:42:BA:DB:9E:5A:A5:DD:84:43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AlAYGVXVQR9QbrpCutueWqXdhEM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/b10771-066a-44b0-91f0-57f209f9506a/1/SYffArwdq5N5ldlZEBUy_ZLhHkI.roa
Signing time:             Sat 01 Jan 2022 13:00:07 +0000
ROA not before:           Sat 01 Jan 2022 13:00:07 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     15404
IP address blocks:        91.208.212.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54812913 (0x34460f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0250181955d5411f506eba42badb9e5aa5dd8443
        Validity
            Not Before: Jan  1 13:00:07 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4987df02bc1dab937995d959101532fd92e11e42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:eb:86:9c:d5:ec:37:96:bf:d9:d7:90:2f:38:
                    3c:eb:9d:fa:6a:6c:0f:29:dc:76:fb:a8:cf:aa:c9:
                    8d:6f:3c:cb:f8:01:86:66:ad:05:2b:99:d6:2e:9b:
                    dc:6a:b0:2a:36:f2:2b:9e:0c:70:30:56:6d:8b:c1:
                    7a:f2:ec:46:28:d2:b0:78:14:a3:ea:33:32:f9:71:
                    35:74:b5:c1:11:ce:40:19:81:a1:98:23:7a:42:55:
                    22:44:93:68:a2:d6:a7:79:90:e8:e7:ee:08:0e:ea:
                    6a:08:57:ef:d9:4e:8a:a3:99:26:5c:78:ed:44:3b:
                    2f:2c:cd:27:90:f4:8a:b9:6c:ff:84:77:d9:b3:fc:
                    bd:49:13:11:ba:a8:64:e0:f8:a8:74:a2:0d:99:58:
                    35:63:e6:d1:a2:98:bb:1d:40:d8:bc:56:83:c2:84:
                    b7:e3:8c:c8:58:39:3d:d7:0b:12:6f:5c:b9:55:46:
                    f0:84:1c:3a:56:05:3b:89:ef:77:a5:fd:9e:d7:fa:
                    89:50:9b:ba:83:ec:68:04:73:56:3d:b9:05:7b:36:
                    9c:22:b8:9c:66:17:72:e9:0d:f6:91:06:26:e6:1f:
                    29:95:ab:8e:7c:9a:a6:ec:f1:36:65:e2:ae:9a:cb:
                    d0:b6:54:f1:b1:a7:27:38:3e:29:5b:af:8b:70:21:
                    55:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:87:DF:02:BC:1D:AB:93:79:95:D9:59:10:15:32:FD:92:E1:1E:42
            X509v3 Authority Key Identifier:
                keyid:02:50:18:19:55:D5:41:1F:50:6E:BA:42:BA:DB:9E:5A:A5:DD:84:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AlAYGVXVQR9QbrpCutueWqXdhEM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b10771-066a-44b0-91f0-57f209f9506a/1/SYffArwdq5N5ldlZEBUy_ZLhHkI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b10771-066a-44b0-91f0-57f209f9506a/1/AlAYGVXVQR9QbrpCutueWqXdhEM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.208.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:17:44:76:37:39:82:e0:36:89:8c:1d:f4:78:e5:0a:96:c5:
         69:6b:0d:79:9d:b3:39:9f:91:2e:fe:8d:e8:df:a6:81:a3:6a:
         25:ad:74:ba:4b:69:0f:80:67:ad:bd:42:c3:9b:1f:7a:d0:70:
         fd:ed:71:97:08:02:a7:ee:be:1c:8d:8f:79:91:c7:84:48:ce:
         58:21:e3:7c:8a:c1:78:42:01:16:69:99:09:13:f0:0e:69:11:
         17:35:5e:17:1e:aa:03:7c:b5:89:2f:af:9c:58:0a:87:5a:2f:
         dc:e5:db:77:a8:3d:b4:56:fa:22:2f:6d:09:41:b8:cd:2f:19:
         e5:65:43:07:ca:09:bf:d2:77:6b:e7:1b:58:55:fb:b9:55:d6:
         07:fb:f2:11:9a:cc:63:5b:86:08:97:8f:84:b1:26:b3:71:9a:
         23:68:f0:6a:b8:90:d6:10:4c:82:76:4c:b4:e7:c6:56:2a:0f:
         c1:f5:02:44:94:12:9c:21:89:3b:3e:21:a2:d6:8c:d8:fd:12:
         41:aa:5f:21:1a:e7:84:7a:82:d7:68:02:b4:0a:b8:d5:00:43:
         e0:1a:dc:f3:16:87:47:3c:c4:21:29:7b:4a:e7:fe:ea:8b:0d:
         c6:78:4d:b4:a3:69:88:1d:f8:f9:02:df:5f:90:5a:03:c8:01:
         2c:71:c5:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:00 2024 by rpki-client on console-ams.rpki-client.org