Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/hPergF5N_gZ4-CP07DW0Bq2omOc.roa
File:                     hPergF5N_gZ4-CP07DW0Bq2omOc.roa (raw, json)
Hash identifier:          K5AJblNXjrBZg3pEBBuAaSoF6zHslsNA7t5jb6sINMU=
Subject key identifier:   84:F7:AB:80:5E:4D:FE:06:78:F8:23:F4:EC:35:B4:06:AD:A8:98:E7
Certificate issuer:       /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial:       0B3FDC7A
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/hPergF5N_gZ4-CP07DW0Bq2omOc.roa
Signing time:             Sat 01 Jan 2022 13:04:55 +0000
ROA not before:           Sat 01 Jan 2022 13:04:55 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     31554
IP address blocks:        89.44.214.0/23 maxlen: 23
                          89.35.160.0/23 maxlen: 23
                          89.39.110.0/24 maxlen: 24
                          89.33.248.0/23 maxlen: 23
                          89.37.156.0/23 maxlen: 23
                          89.33.5.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 188734586 (0xb3fdc7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
        Validity
            Not Before: Jan  1 13:04:55 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=84f7ab805e4dfe0678f823f4ec35b406ada898e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5d:68:b5:70:20:28:2e:24:27:49:ac:2c:78:
                    44:82:f6:27:37:7b:f0:58:ee:e2:2e:97:c7:1a:e0:
                    84:02:8e:83:57:e1:2a:dd:bd:62:21:e3:e4:62:6c:
                    85:80:92:2c:21:7d:7a:f6:5b:3b:08:86:08:f7:31:
                    19:87:94:cf:5d:31:85:70:cc:81:9c:3a:8a:8c:6b:
                    cb:44:9d:82:6c:2f:ff:8d:bc:a3:1b:4a:96:10:3c:
                    14:83:a4:92:46:f1:c1:78:a7:37:6b:52:d0:2f:76:
                    1f:e0:2a:d5:ef:21:e3:29:9c:aa:51:db:a3:a9:05:
                    a4:06:bc:b3:2e:e2:7c:3f:96:ba:0b:28:47:c8:91:
                    16:b2:88:a1:7b:44:f6:55:a5:fe:df:8d:5c:1e:17:
                    f5:1d:e0:46:25:e7:59:d2:c5:bb:b1:91:bf:f5:a4:
                    df:16:d6:5e:6a:bf:38:ec:bb:a4:a2:9b:cd:e0:bb:
                    e9:66:b0:36:f8:95:9a:bd:42:e0:76:fa:d0:75:0b:
                    6c:83:47:da:b8:9b:4f:d5:ec:79:64:b4:ee:67:07:
                    7b:56:dd:33:8e:0a:1f:55:e1:b4:89:0e:3f:37:21:
                    05:64:3d:3f:2a:bc:3a:11:a4:d5:b6:0f:63:b6:9a:
                    2a:a9:41:c3:0e:03:4d:87:59:80:9e:e6:87:2d:a2:
                    ed:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:F7:AB:80:5E:4D:FE:06:78:F8:23:F4:EC:35:B4:06:AD:A8:98:E7
            X509v3 Authority Key Identifier:
                keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/hPergF5N_gZ4-CP07DW0Bq2omOc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.33.5.0/24
                  89.33.248.0/23
                  89.35.160.0/23
                  89.37.156.0/23
                  89.39.110.0/24
                  89.44.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         00:ae:4d:c0:e3:5e:c7:56:6f:3d:d5:79:53:d8:ee:9f:fe:44:
         3d:81:c1:28:85:51:6e:2c:8b:1d:6c:ef:eb:8c:87:97:32:75:
         40:c0:1e:60:4f:69:04:91:71:3a:fb:df:78:7c:f1:b8:7b:70:
         9c:8f:3a:9d:83:6f:eb:3d:a3:5a:04:51:3c:49:86:9a:cd:96:
         fa:39:41:16:1d:df:08:be:50:61:31:23:f9:75:52:63:c7:b3:
         5a:f0:c7:46:a2:6b:85:11:90:d3:e5:24:df:5f:cc:7f:04:1a:
         c1:bd:c8:7e:22:59:88:70:60:72:d2:77:e3:e1:d9:6b:d2:26:
         1f:8e:bb:55:5e:f4:26:92:70:ff:75:41:33:8a:2b:67:dc:91:
         83:f2:f2:f1:0b:98:68:c0:b6:50:98:aa:23:59:76:b2:92:43:
         ba:3c:87:1f:5c:e5:b5:85:40:f9:30:c5:ef:cc:5f:8b:56:2e:
         13:5e:21:a4:2b:ee:af:a1:00:a2:2a:45:5d:32:dc:92:47:e6:
         4a:cf:70:22:78:90:da:35:1f:a6:91:31:d3:48:ca:74:38:59:
         ce:e4:cf:4d:fc:9f:ea:db:9e:f2:f7:5b:c1:48:f2:7c:79:3c:
         ea:25:b3:fd:c6:21:45:7a:df:2d:47:96:71:2f:7d:b5:5f:6b:
         8f:ee:3a:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:29 2024 by rpki-client on console-fra.rpki-client.org