Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/538194-7560-4456-b45c-ca26c22cfafd/1/EMoi2R2NE_4nPxG8pS5Z5qp2qjQ.roa
File:                     EMoi2R2NE_4nPxG8pS5Z5qp2qjQ.roa (raw, json)
Hash identifier:          rKm/Z/xE0zNlTkRKHQIVph5Q7XnfxiE63E12t0/YT8o=
Subject key identifier:   10:CA:22:D9:1D:8D:13:FE:27:3F:11:BC:A5:2E:59:E6:AA:76:AA:34
Certificate issuer:       /CN=8a695b3aba1ea4e654788c51641458cc99578040
Certificate serial:       16ABAABB
Authority key identifier: 8A:69:5B:3A:BA:1E:A4:E6:54:78:8C:51:64:14:58:CC:99:57:80:40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/imlbOroepOZUeIxRZBRYzJlXgEA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/538194-7560-4456-b45c-ca26c22cfafd/1/EMoi2R2NE_4nPxG8pS5Z5qp2qjQ.roa
Signing time:             Sat 01 Jan 2022 15:56:33 +0000
ROA not before:           Sat 01 Jan 2022 15:56:33 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     42874
IP address blocks:        185.81.73.0/24 maxlen: 24
                          185.81.74.0/24 maxlen: 24
                          185.81.75.0/24 maxlen: 24
                          185.81.72.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 380349115 (0x16abaabb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a695b3aba1ea4e654788c51641458cc99578040
        Validity
            Not Before: Jan  1 15:56:33 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=10ca22d91d8d13fe273f11bca52e59e6aa76aa34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:91:c4:f4:e4:c9:68:05:89:b3:f0:f8:a3:da:
                    bd:48:9a:b7:bd:98:50:91:7a:c8:fe:34:f4:50:30:
                    80:84:95:51:21:c8:0a:e4:76:4c:b8:62:1b:03:5e:
                    1b:65:9e:0c:1b:ac:2f:61:e0:c1:be:89:d6:5e:3f:
                    d1:c8:89:0c:00:c6:74:b9:4f:78:aa:e1:d8:8c:b6:
                    02:87:5e:4f:4d:d6:8f:2c:44:f0:51:44:ae:49:2d:
                    e1:ff:32:3b:9d:e5:00:48:ba:93:f2:75:1d:31:ff:
                    06:62:9e:c8:cd:80:25:8e:c5:1e:df:af:df:13:ac:
                    48:55:d1:c7:94:07:0b:5a:77:32:22:f5:7d:58:12:
                    56:a9:ca:38:a5:e8:46:d4:b2:b7:9e:4b:b3:b9:94:
                    9b:33:d1:73:9e:b9:0b:47:d5:e8:a3:03:dc:6c:68:
                    e5:2b:9a:56:b3:ec:0e:da:e1:68:8e:e9:1e:7b:73:
                    c6:ed:9a:8f:9e:dd:e6:07:52:60:7f:bd:ee:cc:e1:
                    c8:b9:84:95:dd:20:92:be:15:e6:88:22:1c:41:e7:
                    1f:49:6c:e6:81:e8:b3:f1:10:d3:68:35:7a:56:5c:
                    2a:08:ca:3d:a0:ef:d9:4e:7e:dc:9f:72:9d:23:fa:
                    85:27:74:d9:c6:47:a1:d8:4d:c7:e1:f6:57:2d:35:
                    f4:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:CA:22:D9:1D:8D:13:FE:27:3F:11:BC:A5:2E:59:E6:AA:76:AA:34
            X509v3 Authority Key Identifier:
                keyid:8A:69:5B:3A:BA:1E:A4:E6:54:78:8C:51:64:14:58:CC:99:57:80:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imlbOroepOZUeIxRZBRYzJlXgEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/538194-7560-4456-b45c-ca26c22cfafd/1/EMoi2R2NE_4nPxG8pS5Z5qp2qjQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/538194-7560-4456-b45c-ca26c22cfafd/1/imlbOroepOZUeIxRZBRYzJlXgEA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.81.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:7a:d9:90:3f:34:6e:41:03:1a:85:36:40:65:ba:1f:3f:55:
         8f:91:30:e4:09:0d:f7:6b:20:a9:59:e7:1e:f4:f7:e8:b8:42:
         f7:06:cc:85:e1:f8:a6:04:5f:d7:62:92:d4:06:67:ba:b1:06:
         cf:11:ca:8f:31:17:22:49:be:61:fd:aa:bb:40:be:e0:69:44:
         c6:af:fb:05:f1:66:1d:cf:bd:43:c1:5b:96:42:6c:7b:0d:ce:
         02:f2:8b:67:5c:14:cf:b0:57:03:69:55:d1:fd:5f:8d:f4:4c:
         d4:e9:5e:25:e5:d7:d4:b2:72:b1:f1:59:15:29:16:4b:c0:53:
         a3:12:42:96:ec:33:e3:e4:68:2d:1b:6a:be:17:ba:ad:47:db:
         80:2d:ec:3a:94:44:2e:4c:fc:05:84:60:47:11:59:0a:27:3e:
         4e:6d:f0:39:62:ba:ce:48:1a:02:64:98:3b:7d:50:6b:ef:97:
         ae:41:4f:6e:60:fe:01:0a:12:e3:c8:b8:34:a0:95:72:bf:ff:
         23:a1:12:c7:00:1a:f6:d8:e1:e7:c8:ba:9c:9e:d1:d5:9a:21:
         7d:ee:d4:6b:43:76:13:6b:a2:31:82:06:10:25:c5:7f:8c:96:
         a6:de:52:fd:ad:7f:bd:a7:68:40:b5:76:7c:80:16:78:07:ac:
         2e:a4:3f:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:58 2024 by rpki-client on console-fra.rpki-client.org