Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/lgva_hkUKVKRTYHZut7j4ffWsiQ.roa
File:                     lgva_hkUKVKRTYHZut7j4ffWsiQ.roa (raw, json)
Hash identifier:          Hc5x8O5JdDjcEeDdqaf0VozstbPMZW7ZYDvffMff5jo=
Subject key identifier:   96:0B:DA:FE:19:14:29:52:91:4D:81:D9:BA:DE:E3:E1:F7:D6:B2:24
Certificate issuer:       /CN=c0f92571108958786b65ffa241b1f11f6d058b56
Certificate serial:       02A7C3
Authority key identifier: C0:F9:25:71:10:89:58:78:6B:65:FF:A2:41:B1:F1:1F:6D:05:8B:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wPklcRCJWHhrZf-iQbHxH20Fi1Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/lgva_hkUKVKRTYHZut7j4ffWsiQ.roa
Signing time:             Tue 21 Jun 2022 20:49:44 +0000
ROA not before:           Tue 21 Jun 2022 20:49:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     14618
IP address blocks:        185.79.75.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 174019 (0x2a7c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0f92571108958786b65ffa241b1f11f6d058b56
        Validity
            Not Before: Jun 21 20:49:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=960bdafe19142952914d81d9badee3e1f7d6b224
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c6:77:9b:31:4e:f4:52:19:cb:c4:39:03:df:
                    58:42:7c:22:5a:6e:a0:c5:0f:a8:50:94:51:17:50:
                    8c:d3:cc:97:22:75:16:ef:73:50:3d:6b:79:39:9f:
                    14:78:5f:fa:5d:c0:c8:65:1e:d1:ef:1f:d5:c0:84:
                    22:1b:04:ee:02:7f:ba:db:1e:8d:33:47:61:b2:fa:
                    bc:3a:af:6a:de:e3:63:dd:08:fc:b3:24:81:d9:7d:
                    45:cc:4c:e8:ff:c5:2e:c7:ea:42:ed:bb:c7:4a:08:
                    83:72:87:93:c4:10:0c:b2:16:c0:43:9c:03:1e:14:
                    0b:c1:62:9c:d7:51:0e:8d:1f:97:13:7a:15:67:6c:
                    b7:d5:d0:58:a4:8f:85:c2:38:20:4b:ea:79:c3:cc:
                    8f:59:dc:a8:6d:64:04:56:d5:66:98:64:e5:d2:5f:
                    50:ba:5d:ae:4a:a8:9a:63:58:27:61:5b:47:4d:f9:
                    14:ff:4d:4d:c1:b4:9c:4d:37:cd:43:74:64:52:c0:
                    0c:ae:92:85:fa:cb:85:04:37:12:af:49:7a:67:16:
                    f0:0c:4e:65:2a:4d:85:f1:9b:43:55:fe:b0:7d:e4:
                    49:fe:78:90:44:ce:a0:42:eb:54:72:54:d8:dc:80:
                    8e:a7:84:db:5c:e1:8a:33:56:4c:ab:93:b2:a7:ac:
                    e7:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:0B:DA:FE:19:14:29:52:91:4D:81:D9:BA:DE:E3:E1:F7:D6:B2:24
            X509v3 Authority Key Identifier:
                keyid:C0:F9:25:71:10:89:58:78:6B:65:FF:A2:41:B1:F1:1F:6D:05:8B:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPklcRCJWHhrZf-iQbHxH20Fi1Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/lgva_hkUKVKRTYHZut7j4ffWsiQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.79.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:d3:99:72:e7:5d:db:cd:23:57:76:3a:03:bb:21:71:25:95:
         10:37:db:97:8d:f9:42:ba:60:a4:63:93:3f:f0:b6:f2:95:15:
         ef:e4:e6:f0:3f:ca:27:85:5c:5f:8c:e2:a2:17:bd:af:bb:8f:
         f2:f4:f3:6d:80:23:81:45:1e:8a:5b:ce:0b:e5:e0:b9:6b:a7:
         3b:ec:e3:0d:be:77:d4:17:46:4a:66:b3:cb:51:fe:f8:aa:d8:
         5e:87:59:07:c9:9a:5d:33:30:3b:38:fb:79:c9:b8:27:d8:9f:
         44:8f:00:40:a7:5e:0d:ad:f9:36:a4:da:ed:d0:d8:8e:e2:74:
         c0:c9:c9:dc:f8:19:98:55:3e:4e:e6:9f:b6:64:a8:bb:2c:ae:
         e5:e6:4c:2c:4b:62:e6:5d:7a:90:2f:0c:fd:cd:ba:88:e8:55:
         1a:80:79:2f:aa:a6:f6:7d:ed:31:56:8f:eb:8e:d3:d6:65:40:
         08:89:b6:90:d3:c4:2e:86:ea:00:2c:4e:20:ab:f5:4d:7f:99:
         d4:72:5f:4d:2e:b3:a2:d9:9a:83:03:04:99:67:d6:47:b2:bb:
         42:90:64:7a:bb:50:cd:02:7c:63:57:e6:08:d1:18:42:e4:cd:
         ab:ef:a4:1c:34:e0:d2:6b:5b:d9:2b:fe:c1:c8:67:75:25:39:
         3b:d7:da:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:01 2024 by rpki-client on console-fra.rpki-client.org