Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/mFLjnvMQnEGIyYujVMAiNM9O8Lo.roa
File:                     mFLjnvMQnEGIyYujVMAiNM9O8Lo.roa (raw, json)
Hash identifier:          sJY/lXNwRrAez6QAaALfXzI8iyYNACczQc+eLhaufsM=
Subject key identifier:   98:52:E3:9E:F3:10:9C:41:88:C9:8B:A3:54:C0:22:34:CF:4E:F0:BA
Certificate issuer:       /CN=2452de9370c20ef1ba4d7fe1bb018f3f6dfdc9ce
Certificate serial:       0168FB
Authority key identifier: 24:52:DE:93:70:C2:0E:F1:BA:4D:7F:E1:BB:01:8F:3F:6D:FD:C9:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JFLek3DCDvG6TX_huwGPP239yc4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/mFLjnvMQnEGIyYujVMAiNM9O8Lo.roa
Signing time:             Tue 24 May 2022 10:07:13 +0000
ROA not before:           Tue 24 May 2022 10:07:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     39930
IP address blocks:        195.95.145.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92411 (0x168fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2452de9370c20ef1ba4d7fe1bb018f3f6dfdc9ce
        Validity
            Not Before: May 24 10:07:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9852e39ef3109c4188c98ba354c02234cf4ef0ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0f:65:c1:9e:86:fe:07:73:ab:a9:d4:db:44:
                    bc:cd:48:29:b5:fa:eb:14:77:0e:09:bd:f1:b8:17:
                    5d:73:06:36:dc:26:0d:c7:e6:bb:30:2c:c3:74:a5:
                    de:26:91:77:2d:e5:17:42:39:50:ef:f9:dc:00:ce:
                    79:32:69:2b:e4:1f:3f:9a:95:82:46:bc:cf:ae:62:
                    be:09:43:4e:a3:45:2c:42:6c:7a:11:0a:78:7f:92:
                    0c:a1:bf:40:04:4e:81:92:1e:11:66:4d:13:36:4e:
                    86:2f:e0:d6:56:0a:71:55:c8:e6:3c:1c:9d:14:25:
                    5b:93:45:66:e2:98:e8:2a:51:63:d9:71:e9:8b:52:
                    d1:6a:22:b2:48:53:c6:99:2e:b1:41:c8:6d:e7:73:
                    e2:c5:ab:af:0c:df:43:72:ee:c1:cb:1e:b3:44:ae:
                    ab:2a:4e:59:20:34:b9:0a:fc:ba:40:09:79:ec:c2:
                    9f:98:35:29:5e:a4:e7:1c:7c:b8:4f:49:72:6a:3d:
                    03:a7:d4:a3:93:0b:8e:55:2b:80:7a:1d:5a:11:d7:
                    cf:5e:5b:25:8e:25:cf:1a:71:6b:62:a4:3f:19:2a:
                    cf:14:f2:a9:6e:63:fc:5e:c3:15:ba:44:50:7c:bf:
                    79:90:74:da:e5:48:b8:81:db:3c:ab:c0:1e:dd:b1:
                    06:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:52:E3:9E:F3:10:9C:41:88:C9:8B:A3:54:C0:22:34:CF:4E:F0:BA
            X509v3 Authority Key Identifier:
                keyid:24:52:DE:93:70:C2:0E:F1:BA:4D:7F:E1:BB:01:8F:3F:6D:FD:C9:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFLek3DCDvG6TX_huwGPP239yc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/mFLjnvMQnEGIyYujVMAiNM9O8Lo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.95.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:40:6d:3b:9f:f4:ea:e3:bb:ab:90:a8:ca:6b:4a:94:bd:a4:
         69:d8:b2:ee:e9:b1:0d:47:02:04:45:f4:e1:f4:a5:67:90:e9:
         47:af:05:e4:a6:71:21:61:8b:bc:60:b9:8a:95:b0:67:96:8f:
         b4:0f:25:61:f4:9e:a9:7c:f2:8d:ca:40:81:b7:03:a5:c8:ce:
         14:7e:20:bb:03:e6:22:ec:7b:01:17:1f:15:a6:96:03:7b:4a:
         8c:22:66:fa:b3:8e:72:8f:c7:4c:f1:e5:d5:7e:45:61:85:d4:
         b6:2a:fd:b6:21:e6:01:ef:b5:68:37:cc:5c:e8:48:34:1a:5e:
         b8:08:67:46:24:8c:48:12:ca:74:73:52:bb:b0:cc:ee:93:4d:
         d2:51:71:c6:b0:07:22:ae:c6:3a:81:c2:9e:dd:10:ed:a8:cf:
         f3:47:9f:87:67:57:68:be:6b:12:3c:a9:ff:f9:d9:5e:32:aa:
         80:75:21:5d:27:30:65:05:c9:25:b7:b7:75:a8:42:b0:9a:f3:
         eb:32:ad:95:21:82:9c:73:40:41:f6:de:a5:28:61:aa:6d:9f:
         6f:09:99:5f:63:7e:c7:c4:a1:dd:9d:95:c7:37:49:9d:8d:b3:
         53:70:4d:1d:d7:1a:6a:47:22:c1:ea:9c:a5:e5:e1:0b:13:92:
         b0:ca:7c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:23 2024 by rpki-client on console-fra.rpki-client.org