Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/d37bf0-adae-44c5-9438-f345ed3b6016/1/m4M9-r88fmPyJwiKDQ7W2UU7UJI.roa
File:                     m4M9-r88fmPyJwiKDQ7W2UU7UJI.roa (raw, json)
Hash identifier:          fBNe2occuX2EPToFET81nLJ30RpSgvlTJ1YM1DhtosU=
Subject key identifier:   9B:83:3D:FA:BF:3C:7E:63:F2:27:08:8A:0D:0E:D6:D9:45:3B:50:92
Certificate issuer:       /CN=f3ea162a492ac2b47e796e9a3c1d51858383fb12
Certificate serial:       047FB1C9
Authority key identifier: F3:EA:16:2A:49:2A:C2:B4:7E:79:6E:9A:3C:1D:51:85:83:83:FB:12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8-oWKkkqwrR-eW6aPB1RhYOD-xI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/d37bf0-adae-44c5-9438-f345ed3b6016/1/m4M9-r88fmPyJwiKDQ7W2UU7UJI.roa
Signing time:             Sat 01 Jan 2022 16:05:17 +0000
ROA not before:           Sat 01 Jan 2022 16:05:17 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     34177
IP address blocks:        81.161.58.0/24 maxlen: 24
                          194.88.246.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75477449 (0x47fb1c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3ea162a492ac2b47e796e9a3c1d51858383fb12
        Validity
            Not Before: Jan  1 16:05:17 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9b833dfabf3c7e63f227088a0d0ed6d9453b5092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a5:3b:64:9b:3b:1c:32:80:ba:76:d4:20:7c:
                    5f:47:bd:0e:b9:37:c9:b4:72:c2:4d:7f:77:10:84:
                    23:b7:93:13:27:79:17:0d:43:a5:93:52:f8:54:8d:
                    e5:f0:b9:5e:f0:1a:b3:a4:0f:3c:50:2e:8d:b6:62:
                    a2:df:4b:38:43:a5:bd:23:9c:dc:e1:f9:79:30:34:
                    16:6f:da:d2:9a:43:ae:70:dc:c0:ac:0e:1f:d7:a2:
                    0a:6e:e9:30:4c:12:ad:0f:20:5c:7a:88:64:2b:19:
                    58:5d:d7:0e:20:58:ee:ab:84:f9:ca:4f:0d:30:a9:
                    11:63:62:15:42:77:e5:dc:77:bf:a5:2b:a0:73:27:
                    46:00:ed:d1:f6:76:a1:a2:28:70:97:86:75:2d:c2:
                    7f:bd:f9:38:0b:5e:fd:b9:9f:58:1f:df:da:19:0d:
                    db:e8:4c:31:41:76:40:be:b3:36:73:75:40:c4:fe:
                    c9:64:b1:36:d1:5a:5c:85:22:58:52:35:cc:c2:37:
                    e5:34:da:8c:9a:8f:88:3c:24:92:f1:18:8a:fc:44:
                    42:58:05:e0:50:8a:c4:34:ce:96:7a:58:97:97:f6:
                    46:ee:14:33:76:75:1f:40:72:fe:66:f7:d1:79:87:
                    b4:5c:e8:fc:54:e9:11:ba:1a:55:f1:e2:e2:81:c1:
                    a0:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:83:3D:FA:BF:3C:7E:63:F2:27:08:8A:0D:0E:D6:D9:45:3B:50:92
            X509v3 Authority Key Identifier:
                keyid:F3:EA:16:2A:49:2A:C2:B4:7E:79:6E:9A:3C:1D:51:85:83:83:FB:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-oWKkkqwrR-eW6aPB1RhYOD-xI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d37bf0-adae-44c5-9438-f345ed3b6016/1/m4M9-r88fmPyJwiKDQ7W2UU7UJI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d37bf0-adae-44c5-9438-f345ed3b6016/1/8-oWKkkqwrR-eW6aPB1RhYOD-xI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.161.58.0/24
                  194.88.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9d:2f:5c:16:e1:2a:06:a3:61:85:00:51:bc:5d:0c:45:73:7c:
         5d:fc:51:07:1b:99:07:e3:ba:65:17:8d:b9:a8:94:12:40:82:
         e1:c8:09:30:80:e2:4b:97:f9:b9:c8:18:ed:5d:65:a5:f3:17:
         07:ad:94:7d:f3:08:1d:44:b6:9d:7e:ce:89:86:fc:86:5d:cd:
         bc:de:e6:df:84:ca:d6:f7:9c:87:a2:88:49:bc:e4:a9:40:93:
         97:3e:77:f4:c8:b2:2e:91:85:b8:50:46:e3:30:46:32:d5:fd:
         83:03:f4:a8:d2:02:3c:b4:26:41:53:b6:d5:19:ef:6f:b0:63:
         2d:b9:d3:7e:03:88:8b:2c:6c:50:cc:7c:53:d2:fc:aa:b1:d3:
         20:5e:55:7c:37:3d:af:ff:25:08:17:ba:35:0c:ec:39:a3:a1:
         69:4d:2e:7a:08:20:0b:ac:e7:d1:f2:fe:6f:ad:63:fc:fe:0f:
         91:c5:ff:7a:e7:38:1c:75:ab:d1:4d:86:17:8a:d2:6e:b5:d3:
         2a:cf:1b:d6:00:c9:82:7f:57:e0:98:5d:77:fe:8a:d7:0d:4c:
         19:85:60:f8:51:20:18:ad:f5:bc:36:9c:93:ee:5d:9b:b1:64:
         3b:a0:af:b0:9d:49:dc:8f:bc:2c:8f:b1:57:2a:2a:67:c2:59:
         60:1d:55:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:51 2024 by rpki-client on console-ams.rpki-client.org