Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ZncGRrqcyVkTXi0FLxakYzI7MgE.roa
File:                     ZncGRrqcyVkTXi0FLxakYzI7MgE.roa (raw, json)
Hash identifier:          Pgomy5jSog7mqwQzbA8opBg2q5mPDKBfh0ee1x1MgsU=
Subject key identifier:   66:77:06:46:BA:9C:C9:59:13:5E:2D:05:2F:16:A4:63:32:3B:32:01
Certificate issuer:       /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial:       01845B48BB5FC755ED660BC1A8AACBCA7C58
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ZncGRrqcyVkTXi0FLxakYzI7MgE.roa
Signing time:             Wed 09 Nov 2022 07:26:43 +0000
ROA not before:           Wed 09 Nov 2022 07:26:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49392
IP address blocks:        194.87.118.0/23 maxlen: 24
                          195.133.94.0/24 maxlen: 24
                          194.135.32.0/24 maxlen: 24
                          185.72.10.0/24 maxlen: 24
                          195.133.26.0/23 maxlen: 24
                          195.133.25.0/24 maxlen: 24
                          195.133.59.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:5b:48:bb:5f:c7:55:ed:66:0b:c1:a8:aa:cb:ca:7c:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
        Validity
            Not Before: Nov  9 07:26:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=66770646ba9cc959135e2d052f16a463323b3201
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:fa:9e:72:39:92:f1:61:2e:ff:26:4d:8e:6e:
                    f5:8d:83:b5:06:b6:f5:0a:50:89:08:d3:32:78:66:
                    e1:70:8a:12:d6:63:75:64:aa:05:cc:72:72:55:15:
                    7b:8d:1b:52:93:93:35:47:d1:cb:64:61:53:41:df:
                    3c:fc:48:38:e8:4b:67:9a:f9:d3:0e:bd:9b:de:d7:
                    6f:76:7e:64:3b:53:53:89:39:0c:c8:e8:8c:f7:11:
                    3d:2f:77:d7:de:18:14:66:b3:cb:19:c7:20:73:6a:
                    13:82:f0:9f:d4:c5:c6:76:95:1c:2f:6b:29:e2:ed:
                    5a:c6:4c:c8:b3:d4:a1:fb:7d:42:19:3d:45:b1:89:
                    d3:a0:87:63:25:26:39:93:0e:fb:19:7b:5f:46:29:
                    2d:71:28:1e:0a:7d:d6:02:27:0e:76:96:bd:27:2b:
                    02:78:d7:c1:28:09:5f:a5:69:3e:f6:9b:d4:20:4f:
                    67:5d:02:50:45:a9:17:fe:79:38:c3:75:94:1f:3f:
                    9f:4a:eb:a9:16:6c:dd:e4:5a:e1:3f:82:26:4c:a7:
                    02:2d:c7:61:de:16:61:97:c3:8a:62:83:35:9e:38:
                    bd:cb:1e:08:b1:78:42:c9:87:50:b6:57:9c:04:00:
                    b3:e4:bc:0b:2a:83:9d:6a:23:18:19:d9:ee:8c:7f:
                    89:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:77:06:46:BA:9C:C9:59:13:5E:2D:05:2F:16:A4:63:32:3B:32:01
            X509v3 Authority Key Identifier:
                keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ZncGRrqcyVkTXi0FLxakYzI7MgE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.72.10.0/24
                  194.87.118.0/23
                  194.135.32.0/24
                  195.133.25.0-195.133.27.255
                  195.133.59.0/24
                  195.133.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:b3:1d:a2:cf:b7:bf:e3:23:ad:0b:dd:be:c4:a6:9a:32:49:
         58:a4:de:91:9e:fa:4b:98:41:08:0a:94:5a:a0:d6:5f:22:18:
         9a:e4:51:b4:f5:18:ef:7d:57:c7:2b:e9:0d:29:4b:b9:b6:6b:
         3f:14:e5:75:47:c7:fe:ae:e2:e6:82:a6:52:3e:37:a2:f2:ca:
         13:90:4f:cd:81:cd:da:af:73:9a:e7:79:29:d2:83:29:96:eb:
         c0:1a:b2:92:17:04:09:fd:6c:16:55:4d:46:b3:9c:86:0a:4a:
         6b:a9:17:f3:4e:6c:96:4b:b2:e3:88:2a:1a:80:f1:0b:74:18:
         20:a0:9c:49:2b:b1:f1:a5:92:19:aa:aa:6b:f8:35:79:4e:38:
         a6:5a:46:f7:92:24:07:5e:7d:68:8c:05:f9:9d:51:ad:e2:63:
         be:a4:e7:61:d0:a9:95:e3:a0:2e:53:3f:91:7d:3a:3d:a2:62:
         a1:7a:eb:84:73:73:78:fe:29:63:29:9c:72:4f:99:6c:6e:d1:
         9e:5d:31:a0:1e:d8:a5:ff:8e:92:2f:cf:ba:fe:4a:ed:5e:68:
         80:f6:0d:41:82:15:c3:8c:86:6e:2c:18:10:60:b2:04:47:70:
         a9:31:d8:39:0d:59:fd:fc:90:9d:f9:5d:92:7b:60:49:81:62:
         3c:a6:c6:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:20 2024 by rpki-client on console-fra.rpki-client.org