Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1-V3ob39AUB9GqaaEFNUHhUOtXI0.roa
File:                     1-V3ob39AUB9GqaaEFNUHhUOtXI0.roa (raw, json)
Hash identifier:          8jn1QQUZ8GcWlrKAyrLAlJxIJdkEu4HeiSmROFPeV4M=
Subject key identifier:   F9:5D:E8:6F:7F:40:50:1F:46:A9:A6:84:14:D5:07:85:43:AD:5C:8D
Certificate issuer:       /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial:       092F8554
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1-V3ob39AUB9GqaaEFNUHhUOtXI0.roa
Signing time:             Sat 01 Jan 2022 05:55:28 +0000
ROA not before:           Sat 01 Jan 2022 05:55:28 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49697
IP address blocks:        185.121.69.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 154109268 (0x92f8554)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
        Validity
            Not Before: Jan  1 05:55:28 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f95de86f7f40501f46a9a68414d5078543ad5c8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:05:43:14:2e:8b:b2:82:7c:22:57:65:f3:e7:
                    be:3e:8e:b9:13:f4:61:95:92:8b:4f:09:ce:ea:8b:
                    e0:7d:33:16:e7:4a:b2:41:91:98:41:4a:6f:56:a1:
                    32:d2:b5:1f:05:55:b5:f1:7a:6e:0b:db:64:6f:72:
                    62:1c:39:67:78:73:bf:fb:16:7c:c1:84:3d:01:5d:
                    d7:72:7a:a1:1d:19:46:e0:86:39:34:17:b7:ef:64:
                    0d:f4:36:93:a5:11:52:98:54:d3:c2:88:26:77:63:
                    6d:7e:54:e7:8b:5e:16:b6:68:f6:7c:34:7a:05:01:
                    ed:e3:b7:e8:5c:a4:97:a2:aa:9a:c5:77:2f:cf:fb:
                    e3:54:17:5b:48:d0:aa:99:1d:48:9a:99:47:48:97:
                    1c:28:30:e6:3d:d0:87:2d:91:c9:54:a4:61:fb:54:
                    96:09:eb:1c:c6:79:e8:dd:ba:37:a3:81:56:38:a5:
                    5a:bb:fc:41:41:8d:78:60:95:a0:a6:fe:16:5d:56:
                    7d:db:94:6e:dd:78:55:85:d7:de:6a:de:63:33:c5:
                    89:42:ec:90:08:9f:9d:15:aa:15:43:80:07:66:7e:
                    3a:51:c4:17:10:6f:d8:5e:1a:86:dd:96:32:92:a3:
                    59:b3:12:2e:1b:a1:de:0c:a3:b6:27:e2:cc:1e:79:
                    44:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:5D:E8:6F:7F:40:50:1F:46:A9:A6:84:14:D5:07:85:43:AD:5C:8D
            X509v3 Authority Key Identifier:
                keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1-V3ob39AUB9GqaaEFNUHhUOtXI0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.121.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e1:18:b4:4a:d3:b8:ab:37:14:cd:8b:d7:44:4e:d0:60:dd:6f:
         49:1b:6d:60:97:f8:c5:fb:a4:c7:5b:3f:07:6b:72:d5:b7:b9:
         08:a6:b2:8d:d5:f5:37:90:24:ad:bf:d6:17:0f:40:1d:22:ed:
         1d:00:5f:8b:ed:b3:98:4e:71:28:79:2f:f7:0d:4d:d4:ba:ba:
         66:68:75:2a:e4:b5:15:d7:0e:a9:39:5b:58:58:0b:2a:59:82:
         02:82:54:e5:1a:f1:39:f5:fb:ad:16:ab:ba:48:78:07:2d:cc:
         5e:20:99:e8:94:92:60:ad:09:84:81:b7:1a:2e:dc:83:a4:f9:
         39:c7:2c:9f:29:5c:19:d2:cb:69:e9:7a:2c:76:29:c7:05:f2:
         80:ec:83:84:74:3d:20:d6:16:f1:61:e8:dc:3f:ad:cc:7c:99:
         8e:e2:5e:02:4f:3a:fb:39:47:66:46:90:4e:10:14:35:3c:42:
         83:d3:9a:c0:27:b8:3c:cd:50:57:d4:14:1f:ce:20:91:77:e3:
         bd:dd:ce:c0:c9:03:87:9b:73:22:d3:d5:27:8c:35:31:dc:53:
         e2:60:14:a4:69:cf:63:75:4e:77:df:f2:59:48:da:30:6e:ee:
         ac:f7:1d:97:75:e3:1c:5c:3e:3b:6b:ff:35:7f:a6:57:b1:e7:
         2c:1d:a9:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:54 2024 by rpki-client on console-ams.rpki-client.org