Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/muXczkUbly50wxsIU_tpd_Ni_1g.roa
File:                     muXczkUbly50wxsIU_tpd_Ni_1g.roa (raw, json)
Hash identifier:          iteK6TiZyNrVMdDiTRcABlPmvQFU5jDvyDKTYpvFg5c=
Subject key identifier:   9A:E5:DC:CE:45:1B:97:2E:74:C3:1B:08:53:FB:69:77:F3:62:FF:58
Certificate issuer:       /CN=79a9f6a381ce4a5a3eccb2493a684609c988a0fc
Certificate serial:       04F4D07F
Authority key identifier: 79:A9:F6:A3:81:CE:4A:5A:3E:CC:B2:49:3A:68:46:09:C9:88:A0:FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ean2o4HOSlo-zLJJOmhGCcmIoPw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/muXczkUbly50wxsIU_tpd_Ni_1g.roa
Signing time:             Sat 01 Jan 2022 11:02:11 +0000
ROA not before:           Sat 01 Jan 2022 11:02:11 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     15576
IP address blocks:        185.218.240.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83153023 (0x4f4d07f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79a9f6a381ce4a5a3eccb2493a684609c988a0fc
        Validity
            Not Before: Jan  1 11:02:11 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9ae5dcce451b972e74c31b0853fb6977f362ff58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:81:17:54:f5:19:50:f7:6e:4c:64:76:54:f8:
                    a8:89:4e:96:b9:ab:c6:8b:54:db:87:48:ba:2a:7c:
                    0a:15:43:e0:2d:ab:91:97:9f:af:d5:c1:b2:19:3e:
                    16:89:41:74:46:26:18:0a:a0:e2:da:ce:5d:b8:7c:
                    6c:71:d3:e0:ed:30:12:60:98:d7:83:92:fe:88:9f:
                    06:1b:5a:e3:9c:e4:33:ef:0a:45:f3:87:06:6b:f1:
                    74:24:bd:76:b7:97:20:a0:58:1d:64:9f:69:14:fe:
                    80:9c:ec:df:7f:6d:ef:25:f7:a1:1d:6e:bd:0d:d3:
                    f5:81:49:51:f2:63:31:dc:2d:f6:87:4e:db:e1:ec:
                    de:5a:23:c2:92:9e:8f:04:7d:a9:27:46:84:8f:55:
                    52:22:4f:23:ad:40:8f:3a:1e:38:74:44:b5:4a:69:
                    90:ea:a1:89:0f:bb:32:c6:fe:4b:70:7a:83:81:88:
                    e1:36:e6:b0:55:c9:ce:2b:98:6d:7a:06:66:97:5f:
                    0c:21:25:ea:31:d5:cf:d5:32:15:5c:7b:46:b6:b3:
                    e9:c2:35:2e:25:60:8e:a9:0e:da:e5:5f:5a:42:cb:
                    9c:e8:ab:e5:d0:45:3a:ac:9a:04:f8:5d:6e:5e:9d:
                    3d:5b:37:82:03:9b:86:4d:24:95:97:6a:62:0c:09:
                    9e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:E5:DC:CE:45:1B:97:2E:74:C3:1B:08:53:FB:69:77:F3:62:FF:58
            X509v3 Authority Key Identifier:
                keyid:79:A9:F6:A3:81:CE:4A:5A:3E:CC:B2:49:3A:68:46:09:C9:88:A0:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ean2o4HOSlo-zLJJOmhGCcmIoPw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/muXczkUbly50wxsIU_tpd_Ni_1g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.218.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:3c:0a:e1:28:7a:97:5e:d5:8e:ea:8a:e6:16:b3:2b:e8:3f:
         c8:af:cd:42:eb:3e:27:de:28:98:3a:a0:b2:ac:b7:7b:c9:89:
         63:5c:66:d6:ba:03:1d:e3:c0:f9:75:65:98:00:08:b1:af:05:
         f8:75:f1:3b:aa:97:b4:03:9f:0f:7d:a4:f2:50:e3:95:c5:34:
         27:65:1a:53:e5:ea:38:5d:bf:c8:da:0e:eb:35:9c:70:ed:87:
         dc:32:f1:ce:e8:10:4b:77:43:5a:9d:c7:58:a8:62:9d:b0:22:
         0e:d0:90:a1:9a:2f:77:7a:f9:3c:99:9f:ab:b8:7b:b5:16:72:
         6e:18:cb:40:34:df:3c:c3:b6:d1:b1:8b:46:5a:f1:6c:fd:60:
         4c:97:bf:bd:ea:0b:08:b5:4c:ec:cc:43:46:79:2e:c0:cf:8f:
         b6:85:ff:3c:8c:a8:82:7c:f6:d3:74:5d:86:38:26:2d:5f:27:
         4d:b9:f0:cd:aa:36:ba:5e:7b:d3:24:79:01:6b:3c:c9:76:fd:
         6f:9f:56:22:ee:01:0d:a6:4b:ed:e0:0b:7b:c4:03:6d:bc:a0:
         df:ea:11:d9:d6:0e:78:13:ab:ea:3d:0b:8e:b4:54:74:f6:85:
         ec:9d:81:c5:c6:50:6a:c2:ba:84:8b:1f:01:34:ea:29:67:a5:
         95:e7:dc:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:22 2024 by rpki-client on console-ams.rpki-client.org