Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/hh9CpGeEZKADhaucXNzii--KEUA.roa
File:                     hh9CpGeEZKADhaucXNzii--KEUA.roa (raw, json)
Hash identifier:          8EkTDcxBH0tC2B1fLpMUNBzoN6PIO8B29pjTlImy4G0=
Subject key identifier:   86:1F:42:A4:67:84:64:A0:03:85:AB:9C:5C:DC:E2:8B:EF:8A:11:40
Certificate issuer:       /CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
Certificate serial:       0182B056D34C8FD84E2DBA650E45B8B29F5C
Authority key identifier: E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/hh9CpGeEZKADhaucXNzii--KEUA.roa
Signing time:             Thu 18 Aug 2022 09:44:16 +0000
ROA not before:           Thu 18 Aug 2022 09:44:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     142111
IP address blocks:        185.39.51.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:b0:56:d3:4c:8f:d8:4e:2d:ba:65:0e:45:b8:b2:9f:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
        Validity
            Not Before: Aug 18 09:44:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=861f42a4678464a00385ab9c5cdce28bef8a1140
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:43:fa:f5:15:fc:00:be:0f:10:19:d0:e8:bd:
                    9c:9a:8d:c1:2b:dc:52:60:59:0e:4a:3f:29:70:4d:
                    6e:3e:19:c1:62:ec:80:a8:ad:75:a3:3a:6f:7e:b2:
                    42:de:a8:55:ac:c0:e0:e6:06:5c:d4:4e:58:ef:06:
                    eb:61:0d:5c:5b:ee:3c:11:6d:bd:f3:6f:00:7c:c4:
                    be:57:11:e7:cd:f3:fe:f5:29:39:26:69:5d:90:29:
                    f5:20:f8:3b:3a:25:a8:d6:28:97:c0:cf:2b:c0:45:
                    b1:bb:75:13:1a:b6:94:59:72:5e:ff:35:e8:a7:53:
                    69:58:60:50:4d:eb:91:8f:ff:1b:63:74:ae:93:60:
                    85:62:4f:45:cf:93:90:29:6f:be:f4:96:d2:ef:d2:
                    e6:d7:f4:b3:ab:4e:38:e0:0e:1a:31:fd:b8:e4:4f:
                    2d:e3:bd:85:30:67:26:7c:ff:52:37:15:43:fa:17:
                    87:d9:f3:73:d9:f4:94:23:6f:19:ac:f2:13:c6:9b:
                    74:1c:af:66:c4:a6:46:6c:b9:4a:03:e5:7c:b4:21:
                    65:40:bd:cd:3d:d3:f6:d7:c7:1a:c4:96:bf:da:bb:
                    80:eb:86:5e:0e:29:9e:bf:54:ad:43:4f:2c:14:9d:
                    38:b3:56:e8:32:20:fd:1a:fe:9d:15:29:2b:50:7f:
                    00:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:1F:42:A4:67:84:64:A0:03:85:AB:9C:5C:DC:E2:8B:EF:8A:11:40
            X509v3 Authority Key Identifier:
                keyid:E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/hh9CpGeEZKADhaucXNzii--KEUA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.39.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:3d:46:76:95:28:2d:8b:cf:69:54:6d:48:d5:99:be:9c:ee:
         c2:bf:4c:8e:32:ba:de:0a:58:cc:2a:fd:5a:c0:49:81:13:9e:
         63:9f:f1:df:00:63:55:b7:6e:7e:a1:de:34:82:6e:65:1c:9b:
         5f:22:b8:c5:84:ef:19:45:a1:00:f5:1b:29:f7:58:34:7b:e5:
         a0:40:a6:ee:a2:81:29:28:4f:4a:8a:30:bb:a5:14:ee:f1:ea:
         52:8d:13:c0:87:db:5b:45:08:54:09:b1:a7:86:24:09:4a:91:
         e3:cf:b9:b8:fb:71:7c:24:c8:a0:67:68:ab:a1:1e:aa:25:76:
         a5:4e:4b:bc:1e:99:1c:28:20:42:18:c1:be:5c:72:32:9d:a3:
         c4:fc:f1:0a:56:ad:20:66:b5:f2:12:40:a4:d0:58:34:05:53:
         aa:e1:9f:d0:22:21:93:dd:15:00:b8:1e:f3:b5:7b:60:2e:6d:
         f5:6a:42:91:ca:02:55:db:5b:d6:30:98:d4:a8:88:0e:8c:60:
         bf:b1:fa:ce:d4:41:5f:21:0d:9b:ca:9d:47:7c:db:54:97:94:
         8f:f6:13:de:6e:b6:85:e5:17:04:e6:3e:ea:81:0f:8a:0d:e6:
         58:e5:f9:cd:36:53:c2:33:95:8a:08:ab:e2:b1:cc:4e:89:18:
         b7:de:b4:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:55 2024 by rpki-client on console-fra.rpki-client.org