Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/SU6ztZ0KYwBMl9Blcy1M6xWsf7M.roa
File:                     SU6ztZ0KYwBMl9Blcy1M6xWsf7M.roa (raw, json)
Hash identifier:          zn0kU2lGupGEhjYcsW8UESXqnqjGv2wu6JZsP/U6BYg=
Subject key identifier:   49:4E:B3:B5:9D:0A:63:00:4C:97:D0:65:73:2D:4C:EB:15:AC:7F:B3
Certificate issuer:       /CN=99ca313ce344d7a1fde65bc4a43219a0b376120c
Certificate serial:       010D1C
Authority key identifier: 99:CA:31:3C:E3:44:D7:A1:FD:E6:5B:C4:A4:32:19:A0:B3:76:12:0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mcoxPONE16H95lvEpDIZoLN2Egw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/SU6ztZ0KYwBMl9Blcy1M6xWsf7M.roa
Signing time:             Sun 20 Feb 2022 10:42:22 +0000
ROA not before:           Sun 20 Feb 2022 10:42:22 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     57468
IP address blocks:        194.56.183.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68892 (0x10d1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99ca313ce344d7a1fde65bc4a43219a0b376120c
        Validity
            Not Before: Feb 20 10:42:22 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=494eb3b59d0a63004c97d065732d4ceb15ac7fb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:27:34:0b:6a:7d:65:93:14:da:1b:0c:49:9e:
                    45:21:8a:a4:ca:71:83:a5:48:1d:94:25:c4:8b:a6:
                    10:ea:3d:af:0b:46:ce:8a:a8:c9:78:17:f7:85:2b:
                    a8:c7:e8:8a:9a:bb:81:e1:62:a2:38:82:31:df:42:
                    05:c1:77:24:d6:9f:ef:78:34:ce:02:c0:b8:90:9f:
                    da:b1:95:e6:c3:7e:31:d6:09:cc:ed:5d:03:3f:48:
                    e6:fc:4f:f6:54:fb:c9:8d:c2:4c:13:8b:d4:98:a4:
                    d0:15:2c:db:ea:97:eb:e2:b8:ff:f1:28:25:79:1a:
                    43:13:8c:97:45:4e:83:62:3d:57:d7:51:6c:1e:19:
                    b7:94:a6:ee:42:df:70:33:21:7e:fd:92:b3:96:21:
                    c1:0f:ae:55:d4:04:3f:39:6d:8f:c6:2b:b5:d6:96:
                    8b:d2:23:0e:83:6f:71:cd:5c:27:2f:58:38:1a:c4:
                    5e:99:43:cc:ea:e7:5a:74:ab:67:f0:ea:39:9e:10:
                    9f:b1:72:5f:91:f0:ea:2c:0d:8d:ae:42:c2:ed:e7:
                    1f:82:d9:09:4d:c0:54:e2:5d:02:9f:ca:a2:de:64:
                    ff:44:79:a9:12:ab:da:e7:b5:f3:1b:0e:89:f0:f0:
                    d5:b2:6a:b6:80:8e:e9:86:48:e0:74:4d:80:5a:e8:
                    7b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:4E:B3:B5:9D:0A:63:00:4C:97:D0:65:73:2D:4C:EB:15:AC:7F:B3
            X509v3 Authority Key Identifier:
                keyid:99:CA:31:3C:E3:44:D7:A1:FD:E6:5B:C4:A4:32:19:A0:B3:76:12:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mcoxPONE16H95lvEpDIZoLN2Egw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/SU6ztZ0KYwBMl9Blcy1M6xWsf7M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.56.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:48:06:40:2a:c2:a3:27:f5:f3:2b:1c:06:c9:b8:91:80:c0:
         b0:62:c3:91:fe:81:57:83:ea:9c:0a:d8:ed:81:0a:b1:06:d8:
         78:92:bd:44:67:54:13:44:49:28:31:15:63:ef:7b:33:55:69:
         18:d0:0c:01:84:39:a9:0e:0e:04:70:63:9a:66:29:78:92:dc:
         57:b1:62:e9:d2:c2:5d:32:91:3f:81:01:16:ff:85:ff:b5:5a:
         be:3f:72:83:0b:12:7d:4e:99:61:4e:ef:c1:c3:0f:54:d7:8e:
         3a:11:49:2a:d9:af:59:a2:6d:e8:28:e2:a1:b4:c2:7d:23:3f:
         82:87:66:05:f4:06:4d:35:04:a6:e1:90:07:fb:78:01:a1:0d:
         a7:16:97:a3:b2:34:ec:d0:8c:18:e5:cb:28:96:9e:1f:3f:22:
         5c:fc:60:c2:c3:52:d2:b6:9e:45:2f:2a:61:72:44:2d:7b:ed:
         b2:9e:1e:52:98:63:25:87:4a:bc:b3:bd:05:5f:2e:3e:03:91:
         39:35:03:e7:6b:5a:47:4a:9b:06:aa:25:cc:b2:5e:5e:b4:6b:
         c8:e9:90:83:65:a1:e2:22:ae:ef:44:f8:14:3e:3a:8c:a5:f9:
         6f:f9:67:e9:f2:f3:64:37:48:47:c4:cc:71:68:e3:a2:04:f2:
         84:05:99:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:48 2024 by rpki-client on console-fra.rpki-client.org