Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/yBMyBrmrMD2HfS4GVw4Siv88Tx0.roa
File:                     yBMyBrmrMD2HfS4GVw4Siv88Tx0.roa (raw, json)
Hash identifier:          DC3jUWt19u8QOGa56XcWDoBasvktnUAfVk9kWxZkMuY=
Subject key identifier:   C8:13:32:06:B9:AB:30:3D:87:7D:2E:06:57:0E:12:8A:FF:3C:4F:1D
Certificate issuer:       /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial:       01850C434431FD678250E8C58739B446BF9C
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/yBMyBrmrMD2HfS4GVw4Siv88Tx0.roa
Signing time:             Tue 13 Dec 2022 16:13:33 +0000
ROA not before:           Tue 13 Dec 2022 16:13:33 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     59831
IP address blocks:        217.78.235.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:0c:43:44:31:fd:67:82:50:e8:c5:87:39:b4:46:bf:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
        Validity
            Not Before: Dec 13 16:13:33 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c8133206b9ab303d877d2e06570e128aff3c4f1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:72:b6:73:88:5e:c2:f8:e4:38:33:e0:2a:5c:
                    ee:47:99:e9:2d:4b:79:b7:da:df:62:f5:ab:e6:07:
                    ee:2a:7a:6f:77:3a:6b:7d:3d:48:bd:30:0f:a0:0e:
                    38:44:75:55:b7:6e:2e:50:1d:33:41:cb:6e:a6:fa:
                    5e:0f:0b:f6:ad:fb:78:33:aa:67:9e:c3:5a:f3:91:
                    cb:06:72:86:d3:a5:09:31:36:25:2b:ab:3e:eb:54:
                    49:d1:dd:58:65:51:c8:f2:8e:f9:7a:16:01:bc:3c:
                    7d:b1:a9:82:ab:ee:c7:b1:77:db:a0:63:e1:02:f1:
                    3f:14:a3:a9:ec:d3:04:0d:eb:9b:d1:bd:bb:ad:31:
                    58:36:0a:f6:ce:97:9c:07:75:28:30:c2:d3:b3:ea:
                    b7:46:14:cc:1e:82:0d:42:86:8b:2c:75:49:50:ca:
                    61:b3:de:15:28:51:84:f5:f4:78:cb:f0:9a:22:57:
                    5e:b4:e3:fb:23:79:a2:b4:14:e5:34:82:27:3b:1c:
                    38:81:bb:ea:c5:a4:f5:20:33:d1:20:e3:41:1f:ff:
                    7a:08:dc:02:0f:bd:31:4b:c2:bb:db:e1:9d:ad:51:
                    53:84:8a:8c:74:12:4d:8a:1c:c9:ca:6d:39:78:f2:
                    c6:35:65:f7:43:4d:94:eb:d1:e0:ff:b6:95:3e:b3:
                    59:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:13:32:06:B9:AB:30:3D:87:7D:2E:06:57:0E:12:8A:FF:3C:4F:1D
            X509v3 Authority Key Identifier:
                keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/yBMyBrmrMD2HfS4GVw4Siv88Tx0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.78.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:3f:d0:b0:61:75:5e:15:0b:b6:fd:29:67:68:90:b5:10:66:
         b6:b3:b6:d8:ac:fd:29:24:d3:8b:f3:9b:d3:0d:a9:21:be:36:
         1d:30:b5:c1:ef:9f:9f:ff:e2:9e:07:4c:a9:7a:e0:3d:f7:80:
         b8:15:43:c3:ed:7a:c2:34:a7:aa:fd:f9:5d:93:7d:b8:f6:5c:
         82:60:99:83:ed:e4:fd:f7:99:98:d6:b5:47:30:b8:60:2a:31:
         4b:95:5c:d4:a3:9f:ba:fc:29:8e:c9:8d:00:02:ed:a2:d8:c9:
         d7:a3:b6:43:6e:85:d4:f3:fc:7c:b4:2d:50:5f:54:e0:c0:96:
         37:7a:a9:2f:3c:14:74:fb:d6:ee:43:0a:d1:24:65:db:ce:c1:
         c9:91:64:b6:19:7a:65:b2:14:ad:9f:a7:44:62:18:00:54:4b:
         2e:89:57:82:68:4e:d7:2f:f2:d1:63:8e:49:2e:f8:14:31:e7:
         78:00:53:89:a0:a5:f8:ad:58:be:5d:01:3e:83:f2:a4:0c:2e:
         74:09:03:44:e5:05:f8:8e:41:6e:17:75:4d:a0:3e:21:00:1b:
         94:57:d0:56:57:64:1f:23:42:88:98:17:c7:de:4c:0a:bb:3a:
         f0:55:8f:3e:e8:13:7f:67:a0:1d:2a:31:48:4e:e2:07:8b:6c:
         d2:85:d4:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:51 2024 by rpki-client on console-fra.rpki-client.org