Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/BtVA8056oVSp97feSnhSgu_mn00.roa
File:                     BtVA8056oVSp97feSnhSgu_mn00.roa (raw, json)
Hash identifier:          bi6AR9jn0jG66mCK1nDCv+J6cVd3rzWUO4Hw90NRZnY=
Subject key identifier:   06:D5:40:F3:4E:7A:A1:54:A9:F7:B7:DE:4A:78:52:82:EF:E6:9F:4D
Certificate issuer:       /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial:       1C54C77B
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/BtVA8056oVSp97feSnhSgu_mn00.roa
Signing time:             Fri 04 Mar 2022 11:12:36 +0000
ROA not before:           Fri 04 Mar 2022 11:12:36 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     18345
IP address blocks:        176.96.95.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 475318139 (0x1c54c77b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
        Validity
            Not Before: Mar  4 11:12:36 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=06d540f34e7aa154a9f7b7de4a785282efe69f4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ac:55:cb:84:07:b7:e2:47:33:f8:84:46:00:
                    7f:79:e2:4b:e4:d6:5a:3e:d7:f6:cc:d4:08:62:07:
                    c3:0b:b7:f0:5c:b4:cd:64:1f:ea:dd:8d:24:90:35:
                    5a:47:11:d2:be:81:83:ce:84:30:a5:4e:c7:61:4b:
                    ee:15:61:9f:76:fb:52:cf:63:a2:01:6f:52:49:a6:
                    08:12:87:8e:75:98:14:25:11:ab:cd:f9:a2:21:dd:
                    14:7a:b3:9f:ef:e9:75:f8:ff:fa:83:d6:03:d9:d9:
                    6b:9a:02:49:a3:c4:b2:f1:61:4d:44:25:d4:ec:82:
                    6d:e0:82:d2:61:d2:69:6e:9a:67:20:b6:ee:19:1f:
                    76:5d:6a:8c:f3:93:7b:d6:ff:08:9f:aa:8f:e7:b0:
                    d1:74:1a:2e:1c:c2:3b:67:42:2b:61:14:40:02:97:
                    09:d8:ab:8e:7c:ea:4a:25:7b:8b:a5:b8:16:53:9b:
                    e3:40:96:b4:37:df:61:c7:a1:d1:d2:86:21:02:08:
                    06:4d:77:4e:11:dd:8a:89:08:e1:58:37:0a:38:6d:
                    6c:07:e5:15:e6:2d:1f:22:12:a6:e6:1b:b8:36:b8:
                    3e:b1:09:2e:31:6c:cc:bc:fe:b1:f6:81:e2:b5:57:
                    2f:3c:5b:4d:bf:c8:2e:05:8d:c3:c9:b0:02:e5:2b:
                    7f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:D5:40:F3:4E:7A:A1:54:A9:F7:B7:DE:4A:78:52:82:EF:E6:9F:4D
            X509v3 Authority Key Identifier:
                keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/BtVA8056oVSp97feSnhSgu_mn00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.96.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:84:ea:45:b7:69:a2:4a:1b:f8:dd:da:8a:95:fb:33:9f:22:
         6e:3b:89:31:02:77:a0:ce:fa:b8:06:49:8d:8d:f9:51:de:0f:
         31:cc:61:5b:3b:54:11:c2:16:1b:6d:0e:74:c4:04:43:ed:c4:
         3f:be:eb:93:cf:17:46:6a:32:8a:b5:c5:77:47:86:be:4d:c4:
         0e:db:b2:e0:d6:a0:b8:81:c4:b7:84:a1:e5:5b:a6:eb:1f:14:
         c3:44:d6:15:57:e9:e7:03:16:2e:4b:ec:72:0a:95:02:af:34:
         ef:42:f4:3e:87:8a:68:fe:aa:5b:32:47:d7:c9:0a:b5:4c:a4:
         b7:62:e3:d0:f6:82:94:9c:c7:c1:d7:ed:b5:49:f6:1d:ac:5b:
         e7:dc:28:45:11:3a:2b:83:39:6d:88:8d:56:3c:35:57:48:00:
         ea:01:96:f5:54:6d:c0:1f:6d:ff:fb:40:a2:fa:ca:ba:ae:23:
         8e:85:92:c7:64:a1:0d:98:be:ab:6a:f3:2e:60:fa:a2:4c:82:
         60:99:0d:6e:b0:19:fe:c0:28:3a:7b:31:67:8d:0c:f3:83:62:
         7d:af:a5:51:3c:b5:a3:11:30:18:9e:1b:9b:36:e8:af:ae:2f:
         5d:15:44:2d:b7:72:0c:5c:23:d0:b5:7e:98:98:de:69:52:f0:
         cd:4f:a4:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:57 2024 by rpki-client on console-fra.rpki-client.org