Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/OmSAqMGkzDGojL26Ij56Swtuh7U.roa
File:                     OmSAqMGkzDGojL26Ij56Swtuh7U.roa (raw, json)
Hash identifier:          RK1WoIsFvNvPDvJChPjh6tRXs/3tVLHqJy1Rfhe3ins=
Subject key identifier:   3A:64:80:A8:C1:A4:CC:31:A8:8C:BD:BA:22:3E:7A:4B:0B:6E:87:B5
Certificate issuer:       /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial:       389175C6
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/OmSAqMGkzDGojL26Ij56Swtuh7U.roa
Signing time:             Tue 17 May 2022 05:11:32 +0000
ROA not before:           Tue 17 May 2022 05:11:32 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     29286
IP address blocks:        82.103.105.0/24 maxlen: 24
                          195.34.109.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 949056966 (0x389175c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
        Validity
            Not Before: May 17 05:11:32 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3a6480a8c1a4cc31a88cbdba223e7a4b0b6e87b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e4:0a:83:aa:4b:72:d7:60:25:95:de:43:c5:
                    60:20:23:00:15:74:e6:30:79:c6:0a:6b:b3:79:0a:
                    29:66:da:b1:c0:1a:74:e1:ba:cf:ef:a6:b0:42:ea:
                    da:11:06:65:2e:27:a3:81:0d:b1:c1:07:d3:66:e5:
                    33:93:71:b8:23:e4:5d:09:e3:9d:8a:5f:ba:fe:4c:
                    84:c8:76:21:96:d8:b0:72:a8:01:09:a6:a6:c8:74:
                    29:f8:95:45:7d:56:16:e3:d7:4a:56:5c:30:a6:d4:
                    1d:a7:c7:d5:59:ae:46:cb:bb:3f:38:6d:df:12:91:
                    ac:fb:ef:d5:9b:a6:2b:3e:82:10:af:97:b2:45:e8:
                    c2:e2:9e:45:93:f2:e0:70:ab:99:b0:d5:e9:8b:b2:
                    59:13:89:c4:a0:6d:6b:b5:3c:57:ef:ea:9a:19:08:
                    30:58:81:64:59:63:c5:62:ee:e8:76:1b:4b:4d:6c:
                    1e:2e:cb:59:91:74:9a:ad:ff:51:d5:67:4f:c3:fa:
                    2d:5b:90:e0:15:1a:91:74:77:e0:0e:d3:44:15:73:
                    18:0c:ae:55:5e:03:64:06:72:f6:d8:50:f5:ed:94:
                    ee:4f:e4:e3:28:bc:42:88:60:35:85:f7:b2:5a:75:
                    8b:fd:03:5f:d7:99:44:5b:15:f5:64:13:a2:4c:53:
                    52:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:64:80:A8:C1:A4:CC:31:A8:8C:BD:BA:22:3E:7A:4B:0B:6E:87:B5
            X509v3 Authority Key Identifier:
                keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/OmSAqMGkzDGojL26Ij56Swtuh7U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.103.105.0/24
                  195.34.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:7c:d7:c6:36:25:ba:07:61:99:b1:bb:e7:dc:e8:de:91:99:
         2f:46:57:43:a9:61:46:c7:a1:76:90:8c:44:e6:b7:cb:63:57:
         9d:12:fb:88:de:d1:a3:2b:4a:7f:98:fd:32:64:ae:84:4f:ca:
         22:76:06:d5:be:2b:6f:5e:e2:53:f5:52:3f:71:1f:cf:82:61:
         da:34:73:01:95:ab:b6:96:94:af:5b:e0:9a:82:b4:18:82:5b:
         bc:e9:cd:01:f4:06:c4:4a:e8:de:f3:c2:b4:78:80:1c:d6:96:
         c0:1e:40:0c:54:71:87:6a:26:29:cb:63:50:33:36:98:1c:e2:
         57:e5:73:8b:78:c9:88:8f:71:f2:5c:b7:01:1e:a9:66:46:e0:
         d4:2f:86:56:eb:30:d7:79:b6:c8:ff:a6:9d:d5:88:64:a5:7e:
         bb:70:6f:dc:1c:30:f3:24:00:05:7c:ae:05:5c:7a:c3:4c:3b:
         ca:eb:f0:fe:aa:48:03:1d:67:42:92:b7:0a:ef:cc:3f:1b:c3:
         ae:ea:89:0e:8c:2e:e0:2a:b2:fc:53:dd:b8:52:88:b4:bd:73:
         30:be:3b:91:4e:b1:a2:f2:a3:59:f1:33:ac:09:44:db:bb:11:
         33:bd:4d:56:63:77:bd:82:c2:bf:ea:c0:85:b6:74:85:88:a7:
         11:ef:0b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:06 2024 by rpki-client on console-fra.rpki-client.org