Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/oOuRmO-z8tebMqL-NJPvbbLEDqY.roa
File:                     oOuRmO-z8tebMqL-NJPvbbLEDqY.roa (raw, json)
Hash identifier:          PBmuIjyeclgmolfl83NBYHRGxybK5w4gDNQOA94HhxQ=
Subject key identifier:   A0:EB:91:98:EF:B3:F2:D7:9B:32:A2:FE:34:93:EF:6D:B2:C4:0E:A6
Certificate issuer:       /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial:       0183B4E4920AAC4A68E4281E4048D8701743
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/oOuRmO-z8tebMqL-NJPvbbLEDqY.roa
Signing time:             Sat 08 Oct 2022 00:00:21 +0000
ROA not before:           Sat 08 Oct 2022 00:00:21 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211237
IP address blocks:        95.214.182.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:b4:e4:92:0a:ac:4a:68:e4:28:1e:40:48:d8:70:17:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
        Validity
            Not Before: Oct  8 00:00:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a0eb9198efb3f2d79b32a2fe3493ef6db2c40ea6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:69:4f:f5:22:65:84:5f:84:ac:e9:13:eb:bd:
                    17:f4:3c:c1:a7:74:3e:83:03:ab:7f:48:d3:91:f5:
                    ba:fc:30:02:75:52:cf:3d:5a:9a:43:13:4c:c5:63:
                    9a:7c:4b:68:10:4f:64:94:24:43:c0:8b:1e:a3:78:
                    47:c5:b1:93:20:e5:68:37:59:a3:ef:d8:e1:9e:f8:
                    34:19:64:32:07:1c:2a:72:85:ee:c3:b1:00:b9:10:
                    ff:23:7e:88:20:6d:44:22:e9:33:18:62:f5:1b:a9:
                    1f:74:e8:53:9f:3c:85:b5:99:c5:48:51:22:e8:ef:
                    5f:29:80:80:29:08:d3:95:0d:6d:0a:98:61:c7:02:
                    3f:85:c5:55:21:25:83:a3:bc:5b:8f:ad:3e:64:fa:
                    36:b5:80:30:69:11:e5:0f:37:cb:99:f9:c0:8b:f1:
                    67:5d:b7:72:5d:27:38:63:fa:0d:00:f3:ce:e0:0a:
                    0a:f6:8f:7c:c5:39:79:99:0b:d8:f6:80:5d:27:fd:
                    d7:4e:0f:c0:b3:8c:de:4d:a6:07:92:4f:2f:f9:8c:
                    6d:4f:d2:ab:c3:8b:e5:23:f6:6b:02:b1:50:2c:97:
                    b1:f5:bd:9c:55:3a:a5:f4:22:a7:da:1e:70:36:c3:
                    1c:bd:5e:e1:d3:53:64:f4:aa:87:b8:dd:9c:e6:3c:
                    5f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:EB:91:98:EF:B3:F2:D7:9B:32:A2:FE:34:93:EF:6D:B2:C4:0E:A6
            X509v3 Authority Key Identifier:
                keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/oOuRmO-z8tebMqL-NJPvbbLEDqY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.214.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:61:2d:a2:ee:52:39:07:b2:ae:9f:5f:e4:e5:63:3b:43:a0:
         5d:cc:ff:e9:61:25:ad:e0:53:d5:3f:bd:bb:5e:82:59:44:a8:
         eb:53:a0:3f:08:78:cc:b6:50:34:39:03:87:ed:6e:dd:66:c6:
         c6:0c:54:d5:c7:39:ff:8b:11:67:4e:0c:56:8f:f4:8d:c3:53:
         cc:f3:1d:63:7a:56:49:a5:f5:35:71:78:5e:f2:d0:d7:7e:d6:
         1e:3d:27:c4:3b:7a:38:8c:d2:d2:3a:cf:af:d7:24:2c:49:d7:
         98:fe:98:0f:57:6a:2e:fc:01:1d:d8:fa:2f:b2:40:ce:03:2e:
         58:3b:cc:a4:ed:36:ff:71:b2:09:54:f8:d5:6c:17:77:8b:d2:
         ce:36:1a:98:4a:8e:4e:23:30:19:47:1e:fb:4d:e2:cd:ed:c5:
         2c:fd:6e:e2:2f:da:32:af:1a:58:84:95:ed:6a:b4:ff:81:1a:
         5b:c4:f6:7a:0b:12:f1:bc:31:25:cd:a6:44:6d:7c:04:d0:ff:
         57:e2:8f:a8:96:89:37:23:34:8b:38:7b:9f:88:d1:28:78:78:
         fb:b1:75:d5:df:7f:6c:8e:7e:a1:18:42:f2:f8:25:35:1e:55:
         4c:9c:7d:07:fa:ba:e9:71:14:3e:ed:4d:13:2e:90:8d:31:d6:
         9e:f7:5c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:47 2024 by rpki-client on console-fra.rpki-client.org