Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/3ITSaaU9p9Eer3_lUaDBNmErGgs.roa
File:                     3ITSaaU9p9Eer3_lUaDBNmErGgs.roa (raw, json)
Hash identifier:          y4njVfmx+BKiFw+7EAfmsYM36jz+VQ4IUNfFUVWyJz8=
Subject key identifier:   DC:84:D2:69:A5:3D:A7:D1:1E:AF:7F:E5:51:A0:C1:36:61:2B:1A:0B
Certificate issuer:       /CN=7445ddeedfbd72d313e9ee8cceeae8403cc34146
Certificate serial:       018413FF58DC01354CA22E43F52CBDD9FEA8
Authority key identifier: 74:45:DD:EE:DF:BD:72:D3:13:E9:EE:8C:CE:EA:E8:40:3C:C3:41:46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dEXd7t-9ctMT6e6MzuroQDzDQUY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/3ITSaaU9p9Eer3_lUaDBNmErGgs.roa
Signing time:             Wed 26 Oct 2022 11:13:32 +0000
ROA not before:           Wed 26 Oct 2022 11:13:32 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     16418
IP address blocks:        185.8.134.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:13:ff:58:dc:01:35:4c:a2:2e:43:f5:2c:bd:d9:fe:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7445ddeedfbd72d313e9ee8cceeae8403cc34146
        Validity
            Not Before: Oct 26 11:13:32 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=dc84d269a53da7d11eaf7fe551a0c136612b1a0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:86:3b:ac:da:5b:c2:de:2f:75:ee:81:93:20:
                    d3:81:76:1f:b0:33:3a:21:a7:09:7a:01:e4:1e:46:
                    44:b0:b8:be:65:13:c9:05:7b:09:cb:07:13:0b:df:
                    d2:bc:27:23:57:13:1b:73:1d:3c:eb:de:49:b3:30:
                    5a:7b:73:e5:89:a2:34:ef:fe:f3:c4:48:89:8a:f0:
                    81:f6:4a:5f:0e:62:b0:ed:2b:c3:94:3f:09:34:fc:
                    89:df:f8:77:95:df:81:f5:05:00:df:d1:36:dd:c1:
                    42:41:61:3e:f8:db:c7:2e:0e:ce:6f:de:29:82:d8:
                    82:f8:88:f4:6a:c4:b5:31:3d:d1:06:39:b0:35:11:
                    bb:78:67:7c:73:20:ee:76:7d:b4:00:ad:96:4b:6a:
                    c4:e3:6c:bf:7b:49:fc:2e:9f:bc:54:c8:46:00:7e:
                    92:59:a7:ff:08:f5:78:8f:4b:cf:ce:00:67:6c:f5:
                    64:c0:e5:7a:99:bf:ea:23:a7:78:50:30:c2:55:a0:
                    30:24:dd:a2:59:f9:37:74:58:9b:1f:1d:fb:f8:df:
                    42:3d:42:98:4b:90:82:4d:2a:30:19:76:7a:06:34:
                    b8:ab:38:0b:0e:e4:69:33:4a:36:c8:2c:76:7a:0c:
                    e9:20:53:ec:ab:6f:28:83:8d:c2:89:b7:f6:55:8c:
                    b9:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:84:D2:69:A5:3D:A7:D1:1E:AF:7F:E5:51:A0:C1:36:61:2B:1A:0B
            X509v3 Authority Key Identifier:
                keyid:74:45:DD:EE:DF:BD:72:D3:13:E9:EE:8C:CE:EA:E8:40:3C:C3:41:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEXd7t-9ctMT6e6MzuroQDzDQUY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/3ITSaaU9p9Eer3_lUaDBNmErGgs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/dEXd7t-9ctMT6e6MzuroQDzDQUY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.8.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:14:1b:e3:4a:2c:85:f0:d4:bf:94:2f:2f:97:a1:cb:0b:e8:
         8e:01:4a:b6:d9:d2:de:e7:49:de:f4:64:3a:7c:64:b4:18:c3:
         e4:35:23:88:07:69:92:35:f1:8a:7d:62:f8:97:22:e6:04:af:
         91:42:85:72:a4:a8:98:8b:61:1c:f8:26:04:19:02:92:64:9b:
         46:c3:d1:30:76:5d:80:ea:ca:48:ea:81:2b:c1:4f:03:09:4e:
         5e:64:e3:af:30:f7:88:c8:32:9f:48:e1:8a:79:0c:4f:a4:9b:
         49:d9:64:8e:f1:a5:96:f0:0a:56:4c:22:75:4a:93:d3:44:62:
         71:df:6e:6c:3a:b1:59:c9:5a:ae:08:6d:a6:d2:7e:79:75:f0:
         42:5e:5f:60:ed:44:83:6a:25:91:7b:3b:61:b3:b2:b1:14:11:
         84:db:ea:ea:5d:10:b0:ec:3d:d9:9c:ec:aa:97:68:2c:eb:2f:
         c1:1e:17:e4:d8:18:a1:be:3d:4d:29:c8:d4:82:87:12:dd:d7:
         50:dc:28:c5:88:55:98:b3:d2:b7:61:b6:ac:8e:5a:86:40:06:
         25:64:fc:b2:74:d3:52:b6:df:1d:2e:46:b8:ea:68:75:80:27:
         6d:50:c8:65:f0:e0:c7:0a:90:3c:e1:fc:4b:63:4b:3b:d9:14:
         8c:26:e9:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:41 2024 by rpki-client on console-ams.rpki-client.org