Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/SvQAMbi8nV6nZQd28fkojTvDj_Y.roa
File:                     SvQAMbi8nV6nZQd28fkojTvDj_Y.roa (raw, json)
Hash identifier:          7MdZQgdPQWtjFjVfHDiL9uaX1a/N09XNR2clj4DwNGM=
Subject key identifier:   4A:F4:00:31:B8:BC:9D:5E:A7:65:07:76:F1:F9:28:8D:3B:C3:8F:F6
Certificate issuer:       /CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
Certificate serial:       0182B056D1EF410785372873FB307229C632
Authority key identifier: E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/SvQAMbi8nV6nZQd28fkojTvDj_Y.roa
Signing time:             Thu 18 Aug 2022 09:44:15 +0000
ROA not before:           Thu 18 Aug 2022 09:44:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61317
IP address blocks:        194.76.114.0/23 maxlen: 24
                          194.76.113.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:b0:56:d1:ef:41:07:85:37:28:73:fb:30:72:29:c6:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
        Validity
            Not Before: Aug 18 09:44:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4af40031b8bc9d5ea7650776f1f9288d3bc38ff6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:af:c6:3f:3e:8c:25:3d:0a:3b:a4:84:68:d0:
                    57:7e:08:60:86:7a:6f:9e:ff:80:da:77:a4:56:d5:
                    fb:df:7b:f1:c7:63:9f:69:a0:fd:92:80:95:9d:d8:
                    2e:f3:08:eb:96:7f:3a:8a:75:27:1c:ae:23:e6:44:
                    f2:8f:2a:96:90:8e:e5:27:41:2b:94:f0:03:19:4f:
                    e8:7d:e3:28:6e:95:5e:9f:fb:3d:3c:d8:28:52:66:
                    ce:9c:7a:04:b0:73:3a:a5:10:6e:05:3b:17:ae:37:
                    5e:b0:29:31:62:ac:3e:c8:23:b4:d3:d1:99:6a:51:
                    dc:25:3a:3d:9b:73:21:f3:31:8e:0d:43:a1:59:0e:
                    3a:38:f7:4f:09:2e:ff:ed:05:ca:3e:f9:1a:b2:17:
                    c6:4f:33:66:60:f8:1b:0f:21:dd:33:e2:36:6b:77:
                    c8:05:c1:a3:da:f0:73:e1:b1:e4:e6:29:31:d2:19:
                    e8:f7:e4:bb:3c:ca:96:56:20:2e:22:6e:ad:9e:e7:
                    68:2c:6d:f7:30:de:62:4a:6e:2e:80:48:18:df:04:
                    71:71:b9:a1:12:02:a5:76:6d:8d:f1:5d:8e:1c:c1:
                    93:98:0c:02:1e:41:c3:23:78:dc:d2:c8:97:e3:6e:
                    f3:09:a0:b4:fb:33:09:db:d9:c0:c8:1f:54:fe:f9:
                    fa:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:F4:00:31:B8:BC:9D:5E:A7:65:07:76:F1:F9:28:8D:3B:C3:8F:F6
            X509v3 Authority Key Identifier:
                keyid:E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/SvQAMbi8nV6nZQd28fkojTvDj_Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.76.113.0-194.76.115.255

    Signature Algorithm: sha256WithRSAEncryption
         0c:60:57:37:16:51:c7:e1:e2:2c:e7:04:9b:bc:42:01:e8:23:
         5e:df:40:08:3b:d3:e2:75:a9:60:24:78:4f:e6:16:7c:58:5c:
         81:be:7d:2c:db:11:47:c9:a8:7c:cc:35:40:f0:fd:f9:e5:83:
         09:41:15:28:4a:4a:fe:7e:d2:43:38:5a:9e:16:0c:3f:a8:0f:
         24:c9:39:87:8e:e8:cd:8b:84:23:36:1e:89:76:aa:02:c6:fb:
         a0:8b:2d:d7:9f:5f:ec:33:43:3f:ce:85:eb:f9:1b:6e:63:5a:
         89:a3:96:bf:c5:6f:6a:d6:e8:4d:5c:e0:fd:cc:20:25:59:b2:
         04:45:4c:40:bc:ca:c9:a7:02:bd:5e:ad:17:7a:03:98:d7:6e:
         1b:9e:a9:ee:7a:fc:bf:ed:c0:27:b6:94:4e:e2:7d:b8:cf:dc:
         a2:cc:9c:27:c4:80:ae:bc:44:bf:a1:51:b4:d3:1c:00:27:06:
         17:7b:d4:a0:1c:30:f0:59:b4:d0:3a:18:5c:46:e1:b9:cf:1c:
         dc:c6:36:64:6f:1b:cc:fa:d6:14:9a:6a:72:7a:f3:4c:75:4d:
         11:f4:e1:5c:39:4b:6f:9f:0c:62:61:33:9c:82:c4:8c:6e:7e:
         2f:93:2a:6b:86:e0:7d:d4:eb:64:66:f0:5a:78:cd:6c:9c:da:
         23:4a:98:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:07 2024 by rpki-client on console-ams.rpki-client.org