Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/TOazzzFUD6i-Hpmia7AAhNQ53ME.roa
File:                     TOazzzFUD6i-Hpmia7AAhNQ53ME.roa (raw, json)
Hash identifier:          1GiYirB9wcwJAi8sISWUGgKSIPSuSFP4MFUT4Z8wxXw=
Subject key identifier:   4C:E6:B3:CF:31:54:0F:A8:BE:1E:99:A2:6B:B0:00:84:D4:39:DC:C1
Certificate issuer:       /CN=74e3c336972094b1a8c13d41816857d197a3aae9
Certificate serial:       03A83EC3
Authority key identifier: 74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/TOazzzFUD6i-Hpmia7AAhNQ53ME.roa
Signing time:             Sat 01 Jan 2022 15:58:14 +0000
ROA not before:           Sat 01 Jan 2022 15:58:14 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     199431
IP address blocks:        94.247.229.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61357763 (0x3a83ec3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74e3c336972094b1a8c13d41816857d197a3aae9
        Validity
            Not Before: Jan  1 15:58:14 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4ce6b3cf31540fa8be1e99a26bb00084d439dcc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:a5:9e:30:78:c1:e9:d7:8e:1a:71:53:95:cf:
                    90:29:da:c1:89:27:87:c6:7c:04:df:15:88:90:6a:
                    3d:e8:cd:05:04:0f:26:76:74:06:f0:5f:24:a1:7f:
                    db:96:a6:1d:b1:18:df:0e:b9:ea:1f:1d:19:3b:94:
                    05:4b:53:d5:39:e2:c0:52:07:45:50:64:69:83:fd:
                    e1:3e:24:f5:35:bc:d9:de:b0:93:32:70:d2:13:9d:
                    51:5a:78:d0:76:d7:71:4c:c2:68:df:be:12:48:81:
                    cb:57:03:73:7f:3a:a2:ca:d1:18:58:78:fb:f5:d9:
                    a2:69:46:0f:d4:83:3d:67:68:c4:ee:ce:21:8c:7b:
                    69:43:b1:b4:a7:0a:52:8d:ee:0d:17:d7:1d:49:93:
                    a9:79:99:f1:06:f8:9e:ed:78:29:2c:a8:dd:90:65:
                    0a:f6:0f:c8:5d:48:13:eb:65:50:4a:5a:0e:3f:77:
                    d6:57:7a:42:cb:01:c8:9c:6a:a5:06:f6:11:17:6a:
                    2a:2e:af:5a:9a:a7:dd:34:50:30:49:da:79:d9:35:
                    ad:58:cd:60:39:1b:2e:76:13:dc:5a:d8:0d:43:02:
                    b6:f1:ac:e0:d5:a5:13:5a:a8:a5:e3:cc:c6:bf:e7:
                    c6:cb:46:3c:64:86:df:52:d2:4a:11:00:10:d9:77:
                    3f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:E6:B3:CF:31:54:0F:A8:BE:1E:99:A2:6B:B0:00:84:D4:39:DC:C1
            X509v3 Authority Key Identifier:
                keyid:74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/TOazzzFUD6i-Hpmia7AAhNQ53ME.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.247.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:0d:e0:41:70:93:44:c1:43:a5:af:ff:67:42:a4:62:c2:2e:
         42:10:92:33:b1:f1:67:77:93:6b:85:73:7a:11:36:d0:1e:c6:
         00:d0:4b:4b:60:6f:6c:39:12:32:c4:82:13:4c:b8:00:17:fd:
         b3:c5:b9:ef:4b:c8:f0:22:6c:e1:ec:fd:b4:12:26:35:05:3f:
         7c:08:d6:27:db:4c:47:7a:89:f3:f9:97:0e:fe:4e:66:51:8a:
         fd:96:5d:1b:ad:23:b9:d3:86:bf:4b:49:c7:1a:3d:f4:d3:79:
         70:da:ec:1e:b0:00:bd:df:73:38:90:79:5b:41:e9:c8:60:6e:
         01:0a:ba:2e:31:61:5f:d1:3f:9a:e2:dd:bd:d0:1e:ea:5f:98:
         fa:93:f8:7a:8a:77:99:35:3b:2a:57:ca:d3:f0:c0:5c:3b:59:
         db:1e:32:b8:ff:fc:b7:94:a4:e7:c8:63:fd:78:05:7c:5b:cb:
         93:3b:be:ab:36:1e:5f:f7:a8:c7:83:8b:09:d0:32:8d:8e:03:
         61:5d:a6:6d:45:d9:b8:02:c5:2d:f4:4f:27:b7:3c:9e:58:dc:
         a7:7c:c9:4b:11:32:f9:35:5c:8a:2e:df:a0:4a:b9:73:81:f5:
         80:be:f6:00:18:96:a4:09:50:65:52:0f:19:90:fa:fa:8a:67:
         c0:a4:39:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:36 2024 by rpki-client on console-ams.rpki-client.org