Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/7QvyHk9jqOlonp55dWJnQbyQGA8.roa
File:                     7QvyHk9jqOlonp55dWJnQbyQGA8.roa (raw, json)
Hash identifier:          j9Uxu9tP/t5ImLZ1Z9fEKevWNc4PHrsmXX/dssYRefg=
Subject key identifier:   ED:0B:F2:1E:4F:63:A8:E9:68:9E:9E:79:75:62:67:41:BC:90:18:0F
Certificate issuer:       /CN=d19178bb4a6114eab98be00478cc7f13b0ad202a
Certificate serial:       05733702
Authority key identifier: D1:91:78:BB:4A:61:14:EA:B9:8B:E0:04:78:CC:7F:13:B0:AD:20:2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0ZF4u0phFOq5i-AEeMx_E7CtICo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/7QvyHk9jqOlonp55dWJnQbyQGA8.roa
Signing time:             Sat 01 Jan 2022 14:06:06 +0000
ROA not before:           Sat 01 Jan 2022 14:06:06 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     39360
IP address blocks:        213.226.80.0/22 maxlen: 22
                          213.226.80.0/24 maxlen: 24
                          2a09:4980::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91436802 (0x5733702)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d19178bb4a6114eab98be00478cc7f13b0ad202a
        Validity
            Not Before: Jan  1 14:06:06 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ed0bf21e4f63a8e9689e9e7975626741bc90180f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:cd:08:c3:2e:58:f9:ef:ca:66:61:4a:ab:d6:
                    b1:79:f6:2c:af:b3:68:ac:5b:d0:e7:bf:d7:99:45:
                    f2:47:2e:00:e1:ac:16:4d:7e:66:bd:5a:17:e1:c7:
                    df:bf:59:69:3b:c6:d2:9d:73:98:0c:1a:6f:d1:58:
                    3e:e5:56:ce:9c:b2:15:91:0a:d6:a4:41:20:9a:e2:
                    ae:e2:8d:fa:fa:d0:d2:1a:18:62:ec:ec:ec:25:63:
                    e5:7d:b0:31:cf:6d:7f:9b:03:c0:db:16:8e:91:67:
                    cf:92:28:34:1c:ea:53:6b:80:c9:9a:bc:ad:8a:d9:
                    b8:61:f6:0c:4c:66:10:7f:d4:7b:50:c7:77:0b:ae:
                    00:5b:6b:85:a0:87:3f:ad:c3:8f:b5:0d:1c:ec:a0:
                    17:ab:c5:cb:ad:b8:ee:21:04:e6:76:0a:d7:99:d3:
                    d5:84:4d:09:7b:65:d5:d0:58:e6:be:13:96:88:25:
                    83:f9:58:ac:8c:3f:cc:38:8b:5a:41:8f:d7:e2:af:
                    32:f6:89:c4:db:f1:19:ea:f7:15:8c:3f:12:b5:9e:
                    28:8b:e5:32:1b:cd:88:72:39:1c:f5:4a:ae:c3:47:
                    87:7f:2c:dc:3e:22:85:0e:7b:55:0f:4f:fd:0d:ae:
                    25:cc:fa:b4:c6:0d:f3:46:f4:55:f2:bc:1c:7e:55:
                    e0:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:0B:F2:1E:4F:63:A8:E9:68:9E:9E:79:75:62:67:41:BC:90:18:0F
            X509v3 Authority Key Identifier:
                keyid:D1:91:78:BB:4A:61:14:EA:B9:8B:E0:04:78:CC:7F:13:B0:AD:20:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZF4u0phFOq5i-AEeMx_E7CtICo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/7QvyHk9jqOlonp55dWJnQbyQGA8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.226.80.0/22
                IPv6:
                  2a09:4980::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:f9:7b:d4:41:ca:73:8b:9b:e0:92:01:91:7c:13:c6:2c:3d:
         65:c1:16:fa:e2:8d:a0:78:87:7d:94:a1:cb:8c:46:05:2a:1d:
         e2:39:1c:d9:a2:1c:8b:5d:f5:8c:6a:e3:bd:41:cc:dc:dc:d6:
         d5:19:17:cd:89:04:72:fe:c7:18:36:d8:08:1b:d6:e7:31:ed:
         a2:15:b6:dc:25:0b:32:0d:7a:bc:a0:ae:4d:76:37:af:74:bf:
         88:f0:05:87:ec:8e:14:ac:e5:81:d0:d5:8e:72:f1:73:68:a5:
         7c:99:e1:a1:19:fd:cc:98:3d:98:68:0e:c9:a2:4f:5a:9c:ff:
         79:00:bf:d0:83:41:0c:c7:dc:0e:37:6d:5b:d5:56:6b:39:bf:
         90:1f:0e:8a:cf:d1:63:28:2e:80:19:0c:0f:92:74:c8:80:a4:
         f7:06:9f:a4:5b:5c:45:a4:09:06:c6:38:12:03:59:00:1f:08:
         8a:9b:ca:73:2a:9c:e2:a5:28:d3:ae:0d:ae:ca:d0:9f:43:32:
         78:a8:2f:5d:28:63:1e:3a:05:b8:54:75:d4:c8:1b:12:85:1d:
         ff:9f:2f:a7:97:7a:92:da:26:0f:bf:e8:cd:89:78:23:93:00:
         0e:59:1b:16:68:75:98:87:4e:ae:2a:e8:fe:9a:ff:b0:5b:9e:
         5b:63:e7:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:13 2024 by rpki-client on console-fra.rpki-client.org