Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/IxO3gCtwYa3dUKXoqbU8kOFwBcI.roa
File:                     IxO3gCtwYa3dUKXoqbU8kOFwBcI.roa (raw, json)
Hash identifier:          NqjWB+vJHJAx4LmXU7Stb5hHYzRTLRUT0/u6dlYzVCA=
Subject key identifier:   23:13:B7:80:2B:70:61:AD:DD:50:A5:E8:A9:B5:3C:90:E1:70:05:C2
Certificate issuer:       /CN=feb84d9f8f9e33156589a5ebf722203a899e0a51
Certificate serial:       01A0D926
Authority key identifier: FE:B8:4D:9F:8F:9E:33:15:65:89:A5:EB:F7:22:20:3A:89:9E:0A:51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/IxO3gCtwYa3dUKXoqbU8kOFwBcI.roa
Signing time:             Fri 25 Feb 2022 09:31:54 +0000
ROA not before:           Fri 25 Feb 2022 09:31:54 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206352
IP address blocks:        195.210.110.0/23 maxlen: 23
                          195.210.124.0/23 maxlen: 23
                          195.210.126.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27318566 (0x1a0d926)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=feb84d9f8f9e33156589a5ebf722203a899e0a51
        Validity
            Not Before: Feb 25 09:31:54 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2313b7802b7061addd50a5e8a9b53c90e17005c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:08:6d:72:e9:17:df:4d:aa:ef:81:e1:93:af:
                    e5:26:c6:f5:d4:f4:ac:1b:0b:55:e8:4f:9f:76:2f:
                    39:a1:4b:9e:1c:07:db:4f:4f:90:d8:1e:68:ec:e7:
                    a0:29:aa:7e:7e:9a:e3:a8:dc:ed:b5:05:3e:b0:43:
                    9f:13:b0:8b:dc:b7:30:c4:55:95:c8:29:c9:ef:02:
                    5d:72:dd:58:0c:cb:9a:57:5b:1c:ff:66:e0:45:6a:
                    11:a9:4e:fc:93:df:ca:5f:e0:f8:5f:57:5b:e2:a5:
                    5c:b1:aa:8c:e8:6c:ac:89:87:a5:a9:33:c6:c4:21:
                    e8:9a:b7:9f:e9:12:8c:2b:f0:11:52:3d:25:cf:f6:
                    03:57:56:a2:af:00:20:58:df:e9:0b:38:d8:a2:cb:
                    d4:da:56:05:cd:26:a7:7a:6e:6a:4f:5f:29:a9:30:
                    63:b9:af:80:72:57:a7:8a:0d:ba:8f:88:94:90:cf:
                    45:23:c2:6b:22:e4:48:a2:90:d7:20:29:ec:f0:d0:
                    1d:a7:06:41:83:fd:bf:20:4b:32:d8:db:d9:79:3c:
                    58:84:20:22:9c:3b:f5:64:2b:e4:5d:97:38:aa:af:
                    3e:ef:a1:db:73:ab:39:67:42:73:3e:75:e4:9a:58:
                    26:fb:f7:3b:36:a0:3a:6e:0c:30:bd:04:5c:ab:24:
                    4d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:13:B7:80:2B:70:61:AD:DD:50:A5:E8:A9:B5:3C:90:E1:70:05:C2
            X509v3 Authority Key Identifier:
                keyid:FE:B8:4D:9F:8F:9E:33:15:65:89:A5:EB:F7:22:20:3A:89:9E:0A:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/IxO3gCtwYa3dUKXoqbU8kOFwBcI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.210.110.0/23
                  195.210.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:05:1a:de:af:58:6b:e3:3a:c3:b0:e8:db:2f:4c:c7:96:99:
         71:0b:b6:c0:e6:53:cb:82:ed:6b:2e:5e:5f:9c:cf:1b:5b:92:
         00:ef:77:b2:41:ab:db:ee:c8:ef:12:60:7f:77:24:34:9f:52:
         b1:e8:b0:e6:ef:76:bd:a4:05:88:12:9d:91:c2:dd:8f:d0:78:
         71:a9:3c:41:92:5e:fd:a7:81:57:e2:42:0b:8b:7b:6a:c1:0a:
         a2:ac:e3:34:01:de:d3:94:20:ad:f1:ef:2e:02:93:59:ba:74:
         15:4b:62:31:a0:ce:73:9b:58:01:75:ef:cb:6e:29:5b:9b:24:
         f2:73:80:fb:16:b6:81:bc:d8:9f:c8:64:94:be:a5:b2:a1:d4:
         73:69:4f:e1:a1:57:f1:72:83:d6:cb:59:59:05:88:54:0f:75:
         47:c3:73:27:28:d1:99:f3:aa:dd:3e:70:05:56:86:1e:69:87:
         0c:34:d2:49:97:cf:43:b4:b4:65:30:02:12:1c:a0:d6:52:ee:
         89:e2:03:f3:75:02:a7:cc:9b:1f:ba:68:95:c7:3b:d9:88:f4:
         ef:39:e2:de:ea:86:c2:2c:20:e1:22:69:07:77:d6:9d:04:a5:
         66:44:df:41:04:fb:8c:98:37:a0:a7:3d:ee:1a:ac:af:78:e8:
         35:9d:e5:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:49 2024 by rpki-client on console-fra.rpki-client.org