Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/viierS9JN-wdZB6llC5r65Fb7KY.roa
File:                     viierS9JN-wdZB6llC5r65Fb7KY.roa (raw, json)
Hash identifier:          KRXJZQAIMiEPAcK9LZhOvD0vaN2j/TUon6G5FiIzTr8=
Subject key identifier:   BE:28:9E:AD:2F:49:37:EC:1D:64:1E:A5:94:2E:6B:EB:91:5B:EC:A6
Certificate issuer:       /CN=de9461c211bf3551c5507c930b4204c6ec43b322
Certificate serial:       02294221
Authority key identifier: DE:94:61:C2:11:BF:35:51:C5:50:7C:93:0B:42:04:C6:EC:43:B3:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/viierS9JN-wdZB6llC5r65Fb7KY.roa
Signing time:             Sat 12 Feb 2022 06:34:30 +0000
ROA not before:           Sat 12 Feb 2022 06:34:30 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     16509
IP address blocks:        91.192.106.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36258337 (0x2294221)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de9461c211bf3551c5507c930b4204c6ec43b322
        Validity
            Not Before: Feb 12 06:34:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=be289ead2f4937ec1d641ea5942e6beb915beca6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ca:4b:7f:2c:62:e4:0a:2d:18:07:23:5f:aa:
                    bc:dd:8a:63:5f:44:84:b1:18:8b:60:1b:22:cf:66:
                    05:87:6d:82:a3:ce:18:c8:5b:42:0f:3f:a0:b7:30:
                    1a:10:f5:ac:32:0e:7d:bc:3c:cf:5d:53:12:16:0e:
                    75:47:ee:53:9a:d0:ff:d8:0f:4e:fd:6b:a2:4e:2f:
                    00:5d:5a:ae:ec:ef:6f:9e:74:4b:44:d5:82:22:0b:
                    ce:3f:49:be:21:c0:ea:50:9a:03:6e:4a:42:c6:72:
                    0d:ed:54:39:33:ff:a7:c1:05:51:1a:7c:45:71:2e:
                    46:1b:b3:45:54:e0:c6:47:af:e1:f2:3c:dc:fa:18:
                    59:03:0b:0a:d8:ee:b7:d8:c6:d2:00:88:8b:83:21:
                    0b:81:36:11:d0:9a:37:7f:4e:d3:dc:0f:19:d5:61:
                    8b:87:9f:d6:a3:39:51:34:70:1d:92:53:48:7b:e3:
                    3c:e8:6e:66:36:d1:86:a5:fe:8d:33:53:b9:0e:c5:
                    62:f8:a7:b5:80:78:2f:75:49:b2:fe:1b:58:87:08:
                    b2:e4:e2:e6:1f:7f:66:ff:f2:77:a5:6d:26:e3:ca:
                    17:be:5c:e8:d9:aa:9d:68:14:9e:11:f1:98:ff:19:
                    3f:e0:cc:23:60:2a:a4:15:0d:13:82:3e:00:36:42:
                    a5:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:28:9E:AD:2F:49:37:EC:1D:64:1E:A5:94:2E:6B:EB:91:5B:EC:A6
            X509v3 Authority Key Identifier:
                keyid:DE:94:61:C2:11:BF:35:51:C5:50:7C:93:0B:42:04:C6:EC:43:B3:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/viierS9JN-wdZB6llC5r65Fb7KY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.192.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         85:e0:de:4c:4d:3a:6f:d5:50:9b:8b:2a:24:7f:65:25:2b:46:
         8b:2b:be:63:38:69:01:9c:84:22:c6:f1:02:99:89:8d:97:b9:
         e3:63:bf:22:c5:4f:7e:8d:ab:64:04:77:4d:85:95:09:93:b4:
         97:9c:07:3e:83:85:86:1a:30:1d:6d:a4:1d:c0:88:fd:ef:ae:
         c1:c2:e4:c2:32:29:d9:f1:ba:14:b7:e5:11:eb:af:48:11:a1:
         20:a3:32:f2:ef:5c:49:38:4f:c3:11:66:b7:d4:dc:ef:fd:81:
         8f:6a:24:54:1d:65:c9:53:bc:d4:86:e9:98:38:48:91:fe:9d:
         b7:0f:45:1c:01:ff:38:cc:6b:9b:47:bf:55:d2:ed:98:2f:18:
         7d:ac:7f:91:d1:6c:45:cc:e3:1a:1a:3a:05:dd:b8:64:bb:c2:
         03:a8:1b:c9:79:46:00:5c:8b:5f:95:09:47:e0:f9:9a:72:23:
         de:cb:a9:da:01:b1:e4:a2:4c:d2:12:ff:78:12:db:cc:7c:e5:
         f5:fd:75:b1:58:71:a7:d0:5b:1f:a9:9c:2e:eb:d5:44:c5:f7:
         4e:bc:fb:0b:67:b3:51:00:c7:9f:7a:fb:68:77:42:03:89:68:
         d1:3e:bd:f6:1f:5e:c9:67:be:94:22:a1:a9:6c:e3:06:e1:9f:
         a1:f9:43:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:49 2024 by rpki-client on console-fra.rpki-client.org