Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/hDVOP21BAjowBrTjyHsXaGleXEg.roa
File:                     hDVOP21BAjowBrTjyHsXaGleXEg.roa (raw, json)
Hash identifier:          JApY4PzjQTtz6U+xmsVtd/ZUOOI+nTJGsW0jWFR6HBg=
Subject key identifier:   84:35:4E:3F:6D:41:02:3A:30:06:B4:E3:C8:7B:17:68:69:5E:5C:48
Certificate issuer:       /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial:       0729190B
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/hDVOP21BAjowBrTjyHsXaGleXEg.roa
Signing time:             Tue 25 Jan 2022 13:47:50 +0000
ROA not before:           Tue 25 Jan 2022 13:47:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210892
IP address blocks:        37.44.228.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120133899 (0x729190b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
        Validity
            Not Before: Jan 25 13:47:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=84354e3f6d41023a3006b4e3c87b1768695e5c48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:54:1e:89:97:84:86:4d:bd:bf:00:81:78:5b:
                    95:16:ae:e2:43:59:b7:15:bc:36:90:1a:96:bd:fa:
                    5e:3a:30:36:07:be:d2:3c:89:42:e0:b8:ff:b2:78:
                    b5:a2:23:15:45:07:93:2f:1c:ad:30:38:d4:b8:67:
                    96:ea:6b:f3:4b:e0:af:ab:a5:41:95:76:ba:b7:4a:
                    5a:91:d0:5f:d9:2c:30:2d:3c:1e:a0:50:57:ee:76:
                    77:c6:de:16:c0:32:65:a4:1c:02:75:35:29:0c:fa:
                    02:aa:69:5f:53:46:6e:14:47:b1:4a:dc:b7:78:17:
                    8f:5e:7e:31:b6:04:7b:d0:43:0b:5c:94:e5:b0:c0:
                    8b:da:ef:77:8a:e4:e5:b4:39:3a:f5:e2:39:a5:cd:
                    20:8c:22:f6:4d:cd:b6:04:26:27:fa:d4:b2:04:70:
                    45:c0:17:63:23:27:39:94:b7:a8:3d:eb:79:3c:80:
                    08:1f:41:ea:45:2c:da:3d:06:ca:a2:9a:0b:d4:2c:
                    03:f7:90:eb:9e:43:4b:87:74:f7:5f:16:0f:05:68:
                    3a:fa:b0:2c:70:bc:04:74:1d:ae:f9:ce:d8:a4:03:
                    e7:d3:e3:88:98:00:52:ec:be:84:e7:9f:95:53:df:
                    29:30:7b:13:55:c6:dd:67:11:32:48:21:6a:a0:50:
                    e2:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:35:4E:3F:6D:41:02:3A:30:06:B4:E3:C8:7B:17:68:69:5E:5C:48
            X509v3 Authority Key Identifier:
                keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/hDVOP21BAjowBrTjyHsXaGleXEg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.44.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:6d:11:a3:96:21:d3:7a:c0:f2:18:97:2f:45:c9:d5:16:c5:
         1e:73:6a:28:c7:57:6f:1d:cc:30:08:f4:39:93:cd:2e:dc:07:
         a2:41:c3:b4:16:a4:bb:e8:6b:71:34:f6:f3:2b:4e:e1:ab:c1:
         10:0f:d4:ef:8f:db:5c:13:6c:4f:5e:1c:34:a6:e2:46:0d:b5:
         7a:46:3b:6b:a0:9c:48:7e:a2:b4:e5:5e:0f:7a:64:26:d6:e1:
         c3:4e:67:70:65:11:f3:36:a0:77:2e:92:3d:52:e4:c8:a2:48:
         55:23:4b:38:31:93:ef:0d:b7:cd:78:cf:42:dc:85:b2:a0:81:
         e8:f3:a3:0a:82:3e:13:cd:11:29:dc:6a:54:65:b4:fb:b7:ef:
         ff:ea:18:eb:bc:59:7c:65:1a:aa:ac:96:f9:5b:d0:23:25:65:
         e9:d2:0b:2b:0d:8b:cd:92:82:5e:c5:43:92:c3:96:d1:d2:16:
         3d:23:44:d6:dd:4a:91:ca:e4:17:77:87:73:b2:d0:d5:a2:c5:
         58:8c:a8:ee:3b:87:ed:c6:94:0c:fb:e6:20:c6:a1:cd:b5:17:
         e1:98:56:07:b2:bb:5e:c2:07:d7:a5:b6:6e:2b:72:62:4b:8d:
         d5:f7:74:73:a4:5e:3d:10:af:81:65:85:63:c4:48:fc:04:a4:
         21:96:bb:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:08 2024 by rpki-client on console-ams.rpki-client.org