Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/Re_JRxkld3tc4WyLIsrNc6v82jE.roa
File:                     Re_JRxkld3tc4WyLIsrNc6v82jE.roa (raw, json)
Hash identifier:          nhCAgaizaCUMMzO+xTpPBw9PZQHLjg0EIpbhPsvrUfI=
Subject key identifier:   45:EF:C9:47:19:25:77:7B:5C:E1:6C:8B:22:CA:CD:73:AB:FC:DA:31
Certificate issuer:       /CN=377bd10f7d906c131c8c9e2fc7316416df4ae224
Certificate serial:       3738
Authority key identifier: 37:7B:D1:0F:7D:90:6C:13:1C:8C:9E:2F:C7:31:64:16:DF:4A:E2:24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/Re_JRxkld3tc4WyLIsrNc6v82jE.roa
Signing time:             Thu 03 Mar 2022 10:21:42 +0000
ROA not before:           Thu 03 Mar 2022 10:21:42 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     43195
IP address blocks:        91.198.11.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14136 (0x3738)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=377bd10f7d906c131c8c9e2fc7316416df4ae224
        Validity
            Not Before: Mar  3 10:21:42 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=45efc9471925777b5ce16c8b22cacd73abfcda31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:09:aa:4c:46:63:62:0b:4e:2d:33:69:bc:07:
                    e9:ae:ea:6d:f1:06:0d:0e:4a:56:86:10:fe:d9:32:
                    5f:08:d4:8f:11:ae:42:f3:d0:39:60:b5:8b:f2:bf:
                    a6:03:52:4e:fe:b6:11:8b:08:6e:fa:d1:43:23:5c:
                    70:30:a8:0f:d0:48:89:5b:21:74:52:b9:d9:dd:c1:
                    8c:42:86:25:72:0d:43:15:a9:d9:a9:d8:49:b3:b0:
                    eb:43:51:50:7c:c5:bf:2a:2c:7f:6e:7b:1c:92:71:
                    b7:c5:27:23:e5:24:d4:cd:3a:9a:4d:08:26:1b:20:
                    ff:97:32:72:c2:12:98:38:f2:41:e8:80:ce:0f:f7:
                    ab:1d:53:cf:64:73:bb:37:77:a9:31:80:49:73:be:
                    5e:11:31:ab:5d:d0:0b:67:03:ca:82:c0:21:01:52:
                    01:de:0e:f0:5a:bb:d2:2e:06:46:fc:f6:22:28:a9:
                    db:59:18:47:b3:83:8f:64:42:5e:b8:11:e0:c6:b7:
                    41:a5:4d:50:5c:6c:d9:bf:de:ac:4e:8f:bb:5f:b5:
                    04:46:51:28:c8:0c:88:65:c4:d0:18:ce:29:39:cc:
                    1d:8e:cb:49:21:e4:89:f4:c2:24:bf:49:51:35:2b:
                    09:7a:19:82:bd:6c:05:21:38:43:0b:c9:cb:c0:6b:
                    87:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:EF:C9:47:19:25:77:7B:5C:E1:6C:8B:22:CA:CD:73:AB:FC:DA:31
            X509v3 Authority Key Identifier:
                keyid:37:7B:D1:0F:7D:90:6C:13:1C:8C:9E:2F:C7:31:64:16:DF:4A:E2:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/Re_JRxkld3tc4WyLIsrNc6v82jE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.198.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:7c:a2:97:0a:9d:59:1e:5a:1a:af:78:cc:d4:a7:a3:37:dc:
         d1:36:52:45:b7:a7:c9:3a:a3:7c:40:9d:91:67:25:81:b2:d8:
         2d:25:df:b7:b5:7a:04:cb:fd:4a:02:9c:c6:3d:9f:2e:fd:3d:
         7c:56:1f:d8:6b:15:6b:81:d6:fe:ff:44:3c:91:05:c3:86:1c:
         cf:b2:03:35:63:7d:40:37:a0:de:6a:5c:51:35:74:1c:36:39:
         da:50:a8:35:c2:60:2e:7d:28:38:45:e6:d5:dd:ce:ea:18:c0:
         e7:0e:cc:24:f8:70:98:21:d2:2a:68:45:0c:ae:24:b0:2b:ee:
         c7:32:73:d1:78:65:f8:5c:eb:98:b0:b8:10:98:bf:19:af:30:
         25:03:c4:ce:31:64:ff:c9:af:85:71:08:0e:95:87:fa:d5:66:
         26:33:23:6e:a0:46:d2:1d:6e:5c:75:8e:64:87:16:2a:32:26:
         2f:2a:10:8b:80:78:94:06:56:4a:8d:20:42:04:ce:56:61:c5:
         d7:26:ed:b6:b0:5c:5c:9d:73:3b:c8:58:b2:c2:43:da:61:68:
         3d:70:42:db:57:8a:71:ef:f8:19:08:8e:1f:61:21:72:3d:67:
         ea:e6:a0:e5:fe:f1:b4:cf:0c:9e:69:31:bc:69:4a:35:bd:66:
         bf:6c:db:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:40 2024 by rpki-client on console-fra.rpki-client.org