Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/N7V6vDnUfEulheuCqg_9uw_AHlw.roa
File:                     N7V6vDnUfEulheuCqg_9uw_AHlw.roa (raw, json)
Hash identifier:          +J7FVanBS9pdFSe7L0If8Zj6ii2qyS+jUCkZGvNWwws=
Subject key identifier:   37:B5:7A:BC:39:D4:7C:4B:A5:85:EB:82:AA:0F:FD:BB:0F:C0:1E:5C
Certificate issuer:       /CN=0c7161e622f63c0db8568d8cb4c4d7c0d9808346
Certificate serial:       03C636E6
Authority key identifier: 0C:71:61:E6:22:F6:3C:0D:B8:56:8D:8C:B4:C4:D7:C0:D9:80:83:46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/N7V6vDnUfEulheuCqg_9uw_AHlw.roa
Signing time:             Sat 01 Jan 2022 11:53:52 +0000
ROA not before:           Sat 01 Jan 2022 11:53:52 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208341
IP address blocks:        195.7.10.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63321830 (0x3c636e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c7161e622f63c0db8568d8cb4c4d7c0d9808346
        Validity
            Not Before: Jan  1 11:53:52 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=37b57abc39d47c4ba585eb82aa0ffdbb0fc01e5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ce:41:f3:5d:41:7e:20:24:29:6f:c0:80:88:
                    2d:97:68:2a:73:e7:42:d1:10:a3:69:d7:4d:a8:d7:
                    6d:c4:f8:15:83:72:24:9f:b2:cc:bf:de:39:61:74:
                    7f:54:d0:78:87:ff:9f:ea:b4:42:99:1e:f7:e9:d3:
                    ad:c7:83:35:39:42:87:67:fd:64:7d:71:6e:ef:cd:
                    8a:e4:5b:7e:cf:3d:f3:88:ee:36:87:5b:cb:b5:6e:
                    cf:f7:90:33:d0:84:8b:1b:82:85:e9:43:58:cd:9d:
                    32:45:a1:6c:9e:27:5e:fc:b2:d3:47:a1:3f:cc:65:
                    18:8c:e1:97:cf:a0:31:ce:b9:3e:a4:92:dc:30:50:
                    09:0b:2d:9f:88:3c:b2:ce:bb:b3:8d:b8:7a:78:20:
                    c4:b8:a6:15:ea:02:e5:89:8d:b4:2a:76:69:97:8b:
                    23:20:07:24:08:cc:03:57:12:c2:33:28:a6:68:f2:
                    82:cf:7e:cf:30:07:78:25:1e:e7:00:72:d0:f4:b0:
                    5d:35:bf:f1:8a:dd:36:4e:0e:85:13:38:42:60:32:
                    61:53:15:36:f0:5f:4e:19:ad:b6:6f:25:2b:a3:09:
                    99:55:67:4b:d8:c0:0c:35:de:54:17:c4:cc:cf:2d:
                    fd:ca:e1:de:fc:33:26:32:f2:c0:a5:3f:72:06:d9:
                    13:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:B5:7A:BC:39:D4:7C:4B:A5:85:EB:82:AA:0F:FD:BB:0F:C0:1E:5C
            X509v3 Authority Key Identifier:
                keyid:0C:71:61:E6:22:F6:3C:0D:B8:56:8D:8C:B4:C4:D7:C0:D9:80:83:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/N7V6vDnUfEulheuCqg_9uw_AHlw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.7.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:21:7b:b2:f0:ac:84:90:2a:16:fe:3b:c9:d2:5c:7a:f6:43:
         ec:60:a7:97:e6:1f:c6:83:6c:86:e4:f8:f8:ac:f0:8c:3d:10:
         9d:21:85:4d:db:47:42:a0:2b:4b:d7:7d:0a:98:64:a7:41:b9:
         31:46:67:17:85:75:e1:66:56:75:52:6b:02:b1:f8:ab:26:dc:
         d6:f7:fe:59:81:9d:fc:bf:47:1c:41:8c:23:3b:b5:36:9e:5b:
         4c:d6:be:18:6f:3e:df:66:57:5f:21:6d:e7:b9:b8:c3:4d:64:
         bd:ca:07:86:0f:06:44:55:1a:a7:f5:b4:f1:e7:3b:d6:af:72:
         8b:1a:6a:ad:03:b5:3d:33:48:cc:7d:0a:06:fb:6d:32:ac:7c:
         f1:45:37:4e:b1:6c:4a:c3:82:dc:f2:cf:1f:53:bd:e7:c9:05:
         92:f0:b1:c1:6e:3f:e3:98:29:74:8c:6d:d5:7c:07:f6:30:ec:
         4c:05:b6:86:97:b0:a6:9a:b4:4c:96:e4:90:4a:46:da:de:df:
         f6:30:d3:a7:6e:6f:eb:d6:ae:8c:33:4d:52:fe:58:32:9f:e0:
         b2:dc:76:21:7c:0a:37:76:c6:53:a4:87:47:ef:3b:3f:9b:4e:
         f7:82:b2:e7:06:68:01:dd:b3:a5:73:65:6e:b1:1b:b8:fa:b2:
         f4:7e:26:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:56 2024 by rpki-client on console-fra.rpki-client.org