Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/DVck-iDNQuhl4bm2dXTn4VFIAQc.roa
File:                     DVck-iDNQuhl4bm2dXTn4VFIAQc.roa (raw, json)
Hash identifier:          y8D6dStINO74M7UiU6xFv+tRxI8xdEzmSlM62pDw2Lo=
Subject key identifier:   0D:57:24:FA:20:CD:42:E8:65:E1:B9:B6:75:74:E7:E1:51:48:01:07
Certificate issuer:       /CN=37518d180923a7f3c00653ec12bc702b95aab907
Certificate serial:       33E43BDF
Authority key identifier: 37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/DVck-iDNQuhl4bm2dXTn4VFIAQc.roa
Signing time:             Sat 01 Jan 2022 04:55:35 +0000
ROA not before:           Sat 01 Jan 2022 04:55:35 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206887
IP address blocks:        95.183.220.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 870595551 (0x33e43bdf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37518d180923a7f3c00653ec12bc702b95aab907
        Validity
            Not Before: Jan  1 04:55:35 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0d5724fa20cd42e865e1b9b67574e7e151480107
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:75:7a:92:38:13:8d:e1:40:01:58:81:9f:c7:
                    75:e9:f4:b6:05:c2:56:be:31:02:1a:41:2c:34:2c:
                    02:ec:68:b0:d8:62:c3:da:28:0a:d2:70:25:e6:68:
                    ac:8a:9f:4d:8b:e7:0e:80:79:1b:18:7c:c1:82:1d:
                    09:a1:23:aa:48:8d:91:bd:d5:e8:b3:60:74:f5:e2:
                    6d:52:3a:f0:11:74:75:41:2f:ff:58:f1:97:80:29:
                    75:47:6e:7e:10:87:60:e8:b5:33:f8:c7:2d:f1:22:
                    f2:59:b2:3b:68:1a:9a:1a:cc:bd:a0:c8:3a:8c:55:
                    a6:b4:3e:ae:37:23:b6:b6:cb:01:7f:2a:e7:de:88:
                    a6:2d:45:01:d7:10:74:8e:51:32:ea:ce:e8:c1:ce:
                    60:5d:93:20:f1:ca:2f:6e:86:e4:c1:f3:a3:4e:b8:
                    a8:fc:19:4f:7e:95:c0:11:85:3b:89:ce:03:94:d4:
                    ee:72:7a:1d:9e:ca:52:f6:31:ca:94:c0:fb:03:a0:
                    73:6a:1d:81:68:61:7a:a8:af:50:b4:68:55:32:f5:
                    d7:0a:5a:6c:f2:f2:b8:db:a2:ef:a8:a9:3e:0f:7a:
                    86:68:af:6c:ed:c6:93:e4:41:67:16:31:20:46:9a:
                    1e:12:d6:8c:53:cb:86:be:68:03:ae:31:f7:5f:53:
                    47:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:57:24:FA:20:CD:42:E8:65:E1:B9:B6:75:74:E7:E1:51:48:01:07
            X509v3 Authority Key Identifier:
                keyid:37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/DVck-iDNQuhl4bm2dXTn4VFIAQc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.183.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:ee:08:b6:cd:b8:43:f4:e3:cc:a1:c1:ed:b6:ea:20:84:6d:
         8c:3e:27:01:b7:04:3f:cc:b4:9c:78:ae:55:da:9c:17:4d:53:
         b1:d7:1b:f0:0f:73:41:67:13:22:5e:cd:c5:87:26:c8:9b:a0:
         35:4a:d0:a8:4f:8d:07:1f:74:a3:ab:07:bb:f3:1b:59:6e:c6:
         8f:de:9d:d1:c7:6b:88:ae:2e:51:df:0e:5c:ce:f3:c5:86:f8:
         08:16:f3:9e:84:e1:20:06:83:8b:4d:28:7a:0b:c8:93:86:26:
         ac:6e:cf:34:27:3b:3f:9e:65:e7:56:e5:e0:97:ef:a2:3d:95:
         39:08:bc:3d:f9:03:33:14:e2:38:33:44:a9:1d:6d:30:f7:57:
         64:8a:c2:65:79:5e:c6:e0:21:8d:9c:a7:68:3c:88:a6:36:6f:
         12:04:54:c2:58:23:be:ec:ba:c1:a9:0e:76:9d:15:59:ce:4c:
         1b:5d:14:34:b5:6e:93:44:86:13:49:ad:a9:99:55:67:7f:d7:
         70:17:6a:7f:6e:41:ea:44:a1:89:b5:c6:f4:12:f8:1d:af:87:
         79:99:47:c0:8a:a4:81:45:78:48:54:38:45:b1:e9:a1:6a:2a:
         a4:ef:ce:1d:f8:31:d3:4a:15:12:1e:67:a1:a2:53:ef:c5:f0:
         fe:63:89:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:01 2024 by rpki-client on console-ams.rpki-client.org