Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/vJhdi8qTgmloL5toz5f5WE1Pc1M.roa
File:                     vJhdi8qTgmloL5toz5f5WE1Pc1M.roa (raw, json)
Hash identifier:          Ij2YdVC0syo6IrMYbVvIEBa/wDwuHmtb6AlatIKye+8=
Subject key identifier:   BC:98:5D:8B:CA:93:82:69:68:2F:9B:68:CF:97:F9:58:4D:4F:73:53
Certificate issuer:       /CN=2236ed5f5623edeb7910acd31d5f6ee81e5cb17e
Certificate serial:       016278
Authority key identifier: 22:36:ED:5F:56:23:ED:EB:79:10:AC:D3:1D:5F:6E:E8:1E:5C:B1:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/vJhdi8qTgmloL5toz5f5WE1Pc1M.roa
Signing time:             Mon 31 Jan 2022 15:13:21 +0000
ROA not before:           Mon 31 Jan 2022 15:13:21 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     43009
IP address blocks:        83.166.78.0/24 maxlen: 24
                          83.166.79.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90744 (0x16278)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2236ed5f5623edeb7910acd31d5f6ee81e5cb17e
        Validity
            Not Before: Jan 31 15:13:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=bc985d8bca938269682f9b68cf97f9584d4f7353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d0:c1:48:cc:ee:b3:dd:65:3e:5d:36:99:73:
                    d9:da:c4:b9:78:37:fb:be:eb:88:79:51:da:5b:30:
                    15:94:72:77:3f:f4:f7:93:6c:4c:8b:e0:f5:17:90:
                    93:3b:cb:82:49:0c:8e:26:b0:ab:b3:ad:ee:83:73:
                    8c:14:b4:a1:9a:f4:b8:cf:b2:92:34:3f:c2:8b:4d:
                    80:83:b0:41:fd:c9:2d:81:66:76:46:bf:5a:03:3f:
                    e8:05:19:12:3a:56:cf:c5:68:76:b7:29:e1:4b:71:
                    ab:97:65:75:eb:ec:b8:79:ad:68:0e:9c:3a:af:fa:
                    10:a4:f9:1f:b1:45:10:ef:86:18:42:a1:19:12:6c:
                    ac:8c:0e:bc:ec:5a:28:9a:a0:ca:5d:16:9d:85:6d:
                    69:f6:97:86:db:7d:47:97:eb:0a:e3:b5:ba:d8:79:
                    db:fd:60:fa:a8:b7:a3:d3:34:7a:f4:7c:eb:03:8b:
                    e1:08:3a:f5:52:aa:56:6c:8b:cd:ea:f3:99:a1:ea:
                    9a:97:73:0e:39:16:46:de:0b:46:2c:2f:ad:cf:f7:
                    a7:e6:15:63:94:bc:ff:2b:b9:1e:03:72:f1:7d:1a:
                    f6:f0:b8:42:94:96:ed:26:d3:94:57:3f:da:2a:cc:
                    61:76:8c:0c:b9:06:2c:b8:a2:e9:81:e1:05:10:1e:
                    0c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:98:5D:8B:CA:93:82:69:68:2F:9B:68:CF:97:F9:58:4D:4F:73:53
            X509v3 Authority Key Identifier:
                keyid:22:36:ED:5F:56:23:ED:EB:79:10:AC:D3:1D:5F:6E:E8:1E:5C:B1:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/vJhdi8qTgmloL5toz5f5WE1Pc1M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.166.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         13:a4:1d:c3:e4:ce:08:34:da:6f:fd:dc:d7:dc:83:00:6f:eb:
         57:c2:31:94:71:8f:95:c0:4d:f0:67:7d:69:08:f4:06:ef:09:
         14:07:ee:c3:7c:a0:a1:c3:19:67:ec:53:0c:90:11:5c:5c:45:
         be:c4:b3:8e:4e:98:99:58:8a:bb:ad:26:95:c0:8e:b0:e8:74:
         39:35:90:63:ee:55:24:6d:3d:23:6f:98:7d:e4:62:54:af:11:
         cd:53:b3:99:e7:5d:d2:ad:74:46:22:48:ee:f9:ee:a8:26:05:
         a1:d4:bf:b9:57:01:ce:c5:c0:26:9b:55:1a:6f:72:69:55:2b:
         1e:e9:0b:ac:ba:a7:54:30:58:21:5d:f9:14:b7:52:96:5f:45:
         d4:89:7a:b3:39:a2:f8:92:ed:a4:a3:ad:19:eb:5f:de:0a:31:
         54:5b:92:16:56:18:6e:e6:61:5b:8d:e7:db:9e:aa:87:9d:15:
         f2:3c:19:4c:f8:9c:b7:87:11:46:47:2b:a9:a2:05:5c:f5:1d:
         c5:ee:27:08:b0:37:21:b1:3a:2c:66:4f:a6:6d:9b:b1:27:0d:
         20:82:72:3d:c1:2c:33:45:f9:cf:3a:d5:69:fc:a5:58:32:ab:
         81:8e:4b:3a:5c:62:87:c8:cb:4d:c9:5a:74:27:fb:ae:13:d8:
         64:e1:f5:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:51 2024 by rpki-client on console-ams.rpki-client.org