Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/0Qyvrh7OUxOIgIHI36Amcx3uy8c.roa
File:                     0Qyvrh7OUxOIgIHI36Amcx3uy8c.roa (raw, json)
Hash identifier:          HUmqz0Vv4LYBOkaI1e6AYpKSP6Whsjor1in7WnjjQJU=
Subject key identifier:   D1:0C:AF:AE:1E:CE:53:13:88:80:81:C8:DF:A0:26:73:1D:EE:CB:C7
Certificate issuer:       /CN=be55779bc8b0bbe5e57a07755b1328a57c9cad60
Certificate serial:       0184756E716E41ABE9792AC14248FF0EA27C
Authority key identifier: BE:55:77:9B:C8:B0:BB:E5:E5:7A:07:75:5B:13:28:A5:7C:9C:AD:60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vlV3m8iwu-Xlegd1WxMopXycrWA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/0Qyvrh7OUxOIgIHI36Amcx3uy8c.roa
Signing time:             Mon 14 Nov 2022 09:18:02 +0000
ROA not before:           Mon 14 Nov 2022 09:18:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     47692
IP address blocks:        194.146.187.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:75:6e:71:6e:41:ab:e9:79:2a:c1:42:48:ff:0e:a2:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be55779bc8b0bbe5e57a07755b1328a57c9cad60
        Validity
            Not Before: Nov 14 09:18:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d10cafae1ece5313888081c8dfa026731deecbc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:89:e4:b2:8e:37:5a:bb:d4:1b:a0:f1:cb:56:
                    b8:4b:7f:94:5a:d2:79:ae:b0:18:6b:5c:e3:57:dd:
                    e2:9b:b7:63:39:ca:9d:f3:ae:28:b2:ca:26:91:a5:
                    0a:6d:d0:e2:fe:ed:4f:6b:b0:cb:6b:6a:20:ce:a1:
                    c0:ae:67:09:2a:11:c9:42:86:2c:ca:6c:dc:6d:8c:
                    79:c0:1f:1e:35:6d:cc:21:29:1e:9e:f8:e7:f0:f2:
                    92:85:7c:e4:0f:a0:f0:c3:03:9f:8c:7c:7b:d1:0d:
                    d4:c0:22:73:7c:44:5a:5c:1b:df:ad:5c:42:b2:60:
                    9c:fb:84:8e:15:a6:04:d9:ab:db:9c:51:38:6e:0f:
                    aa:e5:85:5c:f3:aa:e5:b7:f0:20:15:ca:ab:d9:9a:
                    4d:4e:5d:bb:8e:fa:23:32:f2:57:cf:fb:63:76:55:
                    ed:8b:f6:1f:52:8a:7f:51:ea:ee:97:42:54:15:47:
                    64:31:b5:dd:3a:d1:85:bc:52:4b:66:ac:cd:53:73:
                    84:5f:53:b6:64:ac:d5:7b:8b:30:71:03:41:f5:8c:
                    96:c0:9c:91:8a:7f:4e:36:43:38:58:56:5a:93:1b:
                    aa:71:43:eb:eb:ff:49:1a:e6:7e:d9:a4:6c:46:f6:
                    13:b3:76:15:a4:da:da:e1:18:3c:2f:20:ce:74:7e:
                    79:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:0C:AF:AE:1E:CE:53:13:88:80:81:C8:DF:A0:26:73:1D:EE:CB:C7
            X509v3 Authority Key Identifier:
                keyid:BE:55:77:9B:C8:B0:BB:E5:E5:7A:07:75:5B:13:28:A5:7C:9C:AD:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlV3m8iwu-Xlegd1WxMopXycrWA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/0Qyvrh7OUxOIgIHI36Amcx3uy8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/vlV3m8iwu-Xlegd1WxMopXycrWA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.146.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c5:af:83:6b:ac:ad:87:c7:2a:29:6d:34:52:0f:a6:bc:22:1e:
         35:c2:c5:de:c0:3d:e7:0e:6a:eb:4b:14:be:74:af:f0:71:4a:
         ca:8f:64:37:95:c4:56:64:fb:a2:a5:6d:52:7d:0e:25:45:5d:
         0e:48:4b:a1:1c:a7:7c:e4:03:63:2f:0d:42:3c:0e:0b:b6:88:
         ea:dd:ae:f7:e7:85:5c:07:44:5e:be:35:2b:74:53:ff:1d:66:
         b7:b5:db:6d:a7:76:3a:05:f7:da:ed:5f:06:fa:4c:01:fd:5c:
         25:82:f6:94:8a:ea:03:db:02:3a:6f:e8:bc:29:6f:6c:ac:0c:
         ea:01:ac:05:08:2e:4f:d2:f0:84:48:87:a3:12:ae:2d:c3:29:
         cd:42:f8:cb:99:cf:4b:d4:3d:38:63:26:19:db:1e:66:6b:a9:
         78:4d:61:e0:54:5d:bf:8d:45:e3:87:8f:4b:67:aa:7d:15:77:
         a2:2b:39:14:98:e3:22:f4:ae:d7:02:ec:3c:08:36:37:04:1a:
         9a:99:95:55:a3:a2:59:36:0d:b7:5d:5d:29:54:1a:81:b7:0c:
         c9:9a:f6:13:36:30:b4:f3:15:6f:11:72:f2:9b:4b:c1:c1:da:
         b2:bb:f9:14:02:a4:0c:26:4e:38:65:7e:73:28:c9:e3:70:b8:
         ec:2b:7a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:37 2024 by rpki-client on console-ams.rpki-client.org