Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/pvReyQGvgqkm5j-bzZzc6Ix4VQc.roa
File:                     pvReyQGvgqkm5j-bzZzc6Ix4VQc.roa (raw, json)
Hash identifier:          XVpBab3K07GayKCUZ081cF4q/CfTSvgAOVwlglih7aw=
Subject key identifier:   A6:F4:5E:C9:01:AF:82:A9:26:E6:3F:9B:CD:9C:DC:E8:8C:78:55:07
Certificate issuer:       /CN=9944078b40772b172c7046e7446204980ceae139
Certificate serial:       05EAACA8
Authority key identifier: 99:44:07:8B:40:77:2B:17:2C:70:46:E7:44:62:04:98:0C:EA:E1:39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mUQHi0B3KxcscEbnRGIEmAzq4Tk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/pvReyQGvgqkm5j-bzZzc6Ix4VQc.roa
Signing time:             Sat 01 Jan 2022 04:55:51 +0000
ROA not before:           Sat 01 Jan 2022 04:55:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     43210
IP address blocks:        195.95.179.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99265704 (0x5eaaca8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9944078b40772b172c7046e7446204980ceae139
        Validity
            Not Before: Jan  1 04:55:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a6f45ec901af82a926e63f9bcd9cdce88c785507
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c4:bd:37:b6:2c:05:04:0c:6a:23:4a:a3:8c:
                    b3:c3:b7:74:a1:ee:79:a5:cb:86:88:da:c0:8e:e1:
                    f3:ee:f2:f6:7d:4d:cf:22:92:10:1f:f4:d5:34:4b:
                    41:a9:9f:94:5b:cc:d0:98:ef:e8:71:3e:b0:3a:12:
                    9a:c4:20:10:81:4e:c9:be:48:06:37:f4:f1:48:71:
                    0e:7b:7f:f4:28:32:cd:3f:e9:3b:b5:49:96:86:fb:
                    1e:f7:a3:32:36:e8:95:41:a0:57:8c:14:69:f1:c3:
                    c3:15:a7:aa:61:09:cc:82:80:d0:9f:f6:3b:19:90:
                    52:1b:bd:67:c5:91:0d:9b:29:90:7b:a7:f7:60:5f:
                    c5:11:5d:7b:02:75:47:40:b5:e3:cb:db:29:66:89:
                    c0:9e:8f:5c:4b:07:ef:b9:19:49:1f:6d:a0:0a:77:
                    bb:7f:3c:b9:12:c1:03:9c:54:27:74:87:96:2d:5d:
                    60:04:20:be:76:4d:1c:31:31:40:31:6c:03:57:34:
                    e1:6b:be:03:d8:77:ec:43:34:1d:ac:1a:05:4c:42:
                    9c:a1:79:f3:fb:41:52:a2:23:1f:e5:77:0c:eb:ab:
                    d3:0e:7d:5e:6d:ca:64:ea:67:58:5d:2b:fa:8e:e9:
                    dd:64:75:40:44:26:71:32:8e:2f:8b:5c:c7:6f:d9:
                    52:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:F4:5E:C9:01:AF:82:A9:26:E6:3F:9B:CD:9C:DC:E8:8C:78:55:07
            X509v3 Authority Key Identifier:
                keyid:99:44:07:8B:40:77:2B:17:2C:70:46:E7:44:62:04:98:0C:EA:E1:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mUQHi0B3KxcscEbnRGIEmAzq4Tk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/pvReyQGvgqkm5j-bzZzc6Ix4VQc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/mUQHi0B3KxcscEbnRGIEmAzq4Tk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.95.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:69:87:6e:83:5f:3a:04:d6:41:61:6d:6f:84:89:8d:6d:47:
         2a:da:aa:44:f6:66:04:21:df:f4:cb:26:73:78:7b:75:ea:43:
         5b:31:56:c2:b2:54:52:2d:03:3d:6e:29:39:fc:bf:0b:98:aa:
         3c:db:4b:f6:1c:be:98:bb:56:03:d3:ca:ad:8c:eb:57:f5:51:
         49:c0:9c:fd:2e:e6:53:50:f4:0c:01:0b:02:67:e1:60:de:78:
         64:af:36:da:12:35:54:44:7f:51:6e:05:16:6c:c3:7b:ce:24:
         8d:5b:94:9a:81:53:42:88:43:bb:f5:49:ce:54:69:e7:af:6e:
         45:ee:19:f4:ae:0c:ac:ca:4f:bc:5c:5b:0e:26:0b:a4:a7:ac:
         f4:74:0d:30:27:66:b8:df:62:2e:78:69:e7:37:b9:d9:44:71:
         b1:18:65:e8:49:3a:4d:e0:8d:65:f0:c7:45:2e:a1:87:07:68:
         d8:a6:08:93:d6:4b:6a:09:ed:4a:9e:a8:5b:d5:34:d7:f8:ac:
         9b:5f:e1:22:07:8b:ac:cb:9e:73:80:91:f9:49:34:1c:7a:3b:
         e4:32:52:c6:50:27:7a:42:5b:7d:da:03:4c:cb:99:b5:20:66:
         22:14:63:9c:d9:8d:6d:f5:41:d8:cc:f6:11:64:6c:76:2f:48:
         66:55:e2:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:42 2024 by rpki-client on console-ams.rpki-client.org