Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/ELyrXRsvyQsJK30ow0ZOco-5sZo.roa
File:                     ELyrXRsvyQsJK30ow0ZOco-5sZo.roa (raw, json)
Hash identifier:          TEggg72LlkuzzowTKlI48lkfvvbEOdlWFroTbHPiXKQ=
Subject key identifier:   10:BC:AB:5D:1B:2F:C9:0B:09:2B:7D:28:C3:46:4E:72:8F:B9:B1:9A
Certificate issuer:       /CN=509bc63e68c90932b4fc28997fc3bf78de3b3743
Certificate serial:       94CD7B
Authority key identifier: 50:9B:C6:3E:68:C9:09:32:B4:FC:28:99:7F:C3:BF:78:DE:3B:37:43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UJvGPmjJCTK0_CiZf8O_eN47N0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/ELyrXRsvyQsJK30ow0ZOco-5sZo.roa
Signing time:             Sat 01 Jan 2022 02:01:20 +0000
ROA not before:           Sat 01 Jan 2022 02:01:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     34370
IP address blocks:        185.164.78.0/24 maxlen: 24
                          185.164.76.0/24 maxlen: 24
                          185.164.77.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9751931 (0x94cd7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=509bc63e68c90932b4fc28997fc3bf78de3b3743
        Validity
            Not Before: Jan  1 02:01:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=10bcab5d1b2fc90b092b7d28c3464e728fb9b19a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:01:0d:8b:8a:49:ef:cc:36:5a:24:67:2a:13:
                    e5:fe:87:a5:49:e6:2f:2f:da:ce:a7:9c:aa:23:17:
                    66:0b:90:42:f2:8e:7a:c0:3e:ca:a3:85:03:52:b9:
                    b5:17:b6:73:f0:44:2b:51:18:58:3d:ab:54:05:c8:
                    90:ca:15:0b:18:7f:69:fc:cf:1d:42:3e:53:1d:80:
                    86:57:95:c4:ba:eb:21:45:16:cb:05:e4:98:48:37:
                    b9:32:ae:0e:1e:b8:7d:43:32:43:7c:8e:9c:d9:1e:
                    15:0c:e2:51:cd:85:19:c9:a7:14:18:55:52:1e:c4:
                    d3:57:84:33:7b:06:a2:a4:ca:7a:b2:75:91:68:3c:
                    90:7e:a5:c2:0b:d9:e1:42:35:22:ba:3a:9f:67:6f:
                    89:09:74:2e:84:83:cf:ad:f9:53:fb:13:f2:fd:fe:
                    c4:8d:43:4a:ea:3c:f8:a8:c0:f6:9d:16:45:68:d5:
                    d7:5d:30:69:ab:f8:0b:79:e6:56:14:b8:f4:fd:20:
                    2f:d4:c4:c8:b8:24:a7:ff:9c:49:a9:6d:1b:0b:7d:
                    ec:69:25:f7:06:82:6f:7b:04:78:e4:33:85:08:f7:
                    0f:bc:90:f1:a8:94:c9:fa:9b:84:0d:19:ca:b9:5d:
                    09:c7:c6:97:ed:b9:28:82:6f:f3:d8:6c:7c:11:77:
                    53:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:BC:AB:5D:1B:2F:C9:0B:09:2B:7D:28:C3:46:4E:72:8F:B9:B1:9A
            X509v3 Authority Key Identifier:
                keyid:50:9B:C6:3E:68:C9:09:32:B4:FC:28:99:7F:C3:BF:78:DE:3B:37:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJvGPmjJCTK0_CiZf8O_eN47N0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/ELyrXRsvyQsJK30ow0ZOco-5sZo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.164.76.0-185.164.78.255

    Signature Algorithm: sha256WithRSAEncryption
         a4:30:bb:73:4a:57:10:1d:fc:c0:24:46:cf:65:8a:5d:ce:e1:
         49:e1:04:69:b6:8d:e2:86:0e:b0:35:94:76:11:da:4e:a7:cb:
         4b:d2:12:20:ef:25:aa:10:14:0e:10:ae:53:06:06:11:d5:73:
         ae:52:fe:04:f2:39:51:b1:13:80:b9:26:28:ae:a9:b9:45:51:
         2f:ee:23:85:38:f1:2c:fb:75:46:cb:62:70:3d:25:29:d2:6c:
         14:08:3e:c5:09:f5:94:77:96:b4:13:4f:84:65:e8:59:5f:9a:
         e9:a9:2e:d4:8e:35:bb:38:7e:1f:1e:97:de:04:aa:da:a0:15:
         d6:fe:44:01:8a:21:5e:26:86:cd:0d:84:91:0c:69:6e:be:c7:
         2c:13:53:f7:c3:ec:a0:c0:6c:73:3d:db:19:8c:10:40:b5:d8:
         17:d2:0d:ad:95:97:6b:d6:d4:dc:1e:50:a0:76:70:2f:80:9f:
         76:41:9a:95:1d:8d:0a:2e:df:d1:7d:fb:8e:94:9a:a7:1d:8a:
         f6:be:6b:18:41:79:49:42:d0:93:cd:e4:12:a6:25:ae:24:6a:
         54:14:1a:00:10:b9:94:b9:45:31:dc:81:82:71:fe:f1:83:af:
         21:10:8f:38:c6:36:fc:e9:79:1c:1e:dd:5d:5f:ef:cb:ca:a2:
         d0:6e:d7:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:28 2024 by rpki-client on console-ams.rpki-client.org