Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/5_rdj_1d7km-_9YBYObcfl6xjX8.roa
File:                     5_rdj_1d7km-_9YBYObcfl6xjX8.roa (raw, json)
Hash identifier:          3/rM+9/vZ7fExBjLISmR7RLIgSpbxwhuEKEyW9GG1eU=
Subject key identifier:   E7:FA:DD:8F:FD:5D:EE:49:BE:FF:D6:01:60:E6:DC:7E:5E:B1:8D:7F
Certificate issuer:       /CN=e909ee3d618974da0cbd805a2da80410a4989881
Certificate serial:       1B577D05
Authority key identifier: E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/5_rdj_1d7km-_9YBYObcfl6xjX8.roa
Signing time:             Sat 01 Jan 2022 10:55:57 +0000
ROA not before:           Sat 01 Jan 2022 10:55:57 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     8352
IP address blocks:        78.153.250.0/24 maxlen: 24
                          95.143.75.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 458718469 (0x1b577d05)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e909ee3d618974da0cbd805a2da80410a4989881
        Validity
            Not Before: Jan  1 10:55:57 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e7fadd8ffd5dee49beffd60160e6dc7e5eb18d7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:54:2d:fe:26:a5:81:05:8a:1a:ee:ff:1a:a6:
                    dc:f3:37:05:82:f0:cd:8a:01:09:e2:ac:82:af:c0:
                    1f:60:7b:d1:7c:0b:b2:d3:2f:63:2b:a0:37:1d:11:
                    b8:f8:7d:c2:44:dd:19:00:8c:56:31:c9:c0:42:02:
                    6a:2f:7b:cc:d9:c9:ee:54:07:e7:86:97:fd:d6:84:
                    5b:5a:37:c4:73:ac:2e:1f:d2:01:20:91:db:ee:52:
                    7f:39:5a:fa:5d:ef:e3:1f:bb:93:0d:80:e6:23:fd:
                    b9:ab:3b:30:88:70:5f:ac:41:a8:13:63:00:c8:51:
                    e1:df:cf:e5:81:8e:fa:59:e9:7a:43:a8:c0:80:64:
                    ba:3e:9a:fd:5b:07:b5:1e:1b:7b:95:7f:ee:02:d2:
                    ab:f9:de:67:cb:47:6f:e1:c8:7f:5e:5a:2a:a3:ec:
                    11:51:5d:c6:32:a8:d0:30:85:e8:e6:ee:26:ff:75:
                    b9:74:0d:a5:5f:9a:31:6e:a9:81:63:b2:98:ef:d3:
                    a4:96:bc:08:d0:3e:08:4c:dd:a8:26:31:be:f5:02:
                    2e:cc:98:fb:6d:1d:0f:54:bf:18:75:9c:96:fb:8b:
                    92:60:8a:97:34:d9:82:7c:f6:0d:0f:10:60:d5:55:
                    4c:ef:35:95:bc:b0:b5:c2:27:20:a1:68:e1:48:eb:
                    32:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:FA:DD:8F:FD:5D:EE:49:BE:FF:D6:01:60:E6:DC:7E:5E:B1:8D:7F
            X509v3 Authority Key Identifier:
                keyid:E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/5_rdj_1d7km-_9YBYObcfl6xjX8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  78.153.250.0/24
                  95.143.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:f1:ae:30:1a:50:dd:9b:77:00:6a:18:27:11:89:2c:a6:58:
         2d:be:7a:c6:44:48:16:9e:8c:ae:2b:bc:5f:dc:fd:0b:fe:92:
         3a:2e:86:88:5a:61:ed:c4:84:f1:79:3e:97:e3:c2:ed:b9:2b:
         ed:5f:b7:00:ad:2f:a1:9a:ff:35:4d:00:9e:0f:dc:32:b0:9a:
         1f:b1:f9:d3:03:0c:85:00:11:f2:2e:19:41:cf:d8:0f:b3:ef:
         7a:f7:8f:5b:b7:41:54:ba:e0:c4:11:e6:0d:e2:3a:89:f7:b1:
         3e:e5:b2:3f:51:14:5a:a4:e7:4e:3f:fb:80:30:af:aa:2c:ce:
         93:48:78:75:d1:bb:e7:5e:23:65:07:67:ee:7a:5e:a2:a5:2f:
         31:2a:14:13:89:d8:a6:87:21:bd:a5:4c:d6:5c:db:d1:c4:72:
         fa:6c:bb:a9:ff:3b:bc:9c:87:89:40:7f:f1:44:c4:83:66:9a:
         43:40:22:95:29:71:7b:26:44:d0:32:43:e2:39:80:10:17:c1:
         b0:b9:cd:0d:98:60:8c:02:9d:b2:fe:ef:83:a9:66:4a:f6:33:
         d6:53:49:91:b3:41:02:48:4c:5d:be:f0:f4:be:0c:a8:c5:2b:
         e0:4d:71:ed:bf:c0:06:e0:4a:98:2d:dc:3e:d8:40:ab:dd:c9:
         d9:3c:8d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:17 2024 by rpki-client on console-ams.rpki-client.org