Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/47275d-5fa7-4bb2-99eb-1f00737cb2a2/1/eZ368-eKya-VxQUE3eexYFmlPfI.roa
File:                     eZ368-eKya-VxQUE3eexYFmlPfI.roa (raw, json)
Hash identifier:          PWDl493rHDuQ3e4sx3uW49ekPSKcREFchgHdQnAXuFU=
Subject key identifier:   79:9D:FA:F3:E7:8A:C9:AF:95:C5:05:04:DD:E7:B1:60:59:A5:3D:F2
Certificate issuer:       /CN=9aeafa96c9d563e650ba592ffb06e2ceeb6a0859
Certificate serial:       06B13BA7
Authority key identifier: 9A:EA:FA:96:C9:D5:63:E6:50:BA:59:2F:FB:06:E2:CE:EB:6A:08:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mur6lsnVY-ZQulkv-wbizutqCFk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/47275d-5fa7-4bb2-99eb-1f00737cb2a2/1/eZ368-eKya-VxQUE3eexYFmlPfI.roa
Signing time:             Sat 01 Jan 2022 10:00:44 +0000
ROA not before:           Sat 01 Jan 2022 10:00:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     44951
IP address blocks:        195.230.114.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112278439 (0x6b13ba7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9aeafa96c9d563e650ba592ffb06e2ceeb6a0859
        Validity
            Not Before: Jan  1 10:00:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=799dfaf3e78ac9af95c50504dde7b16059a53df2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b7:3b:4e:3d:58:f8:da:26:67:6f:85:40:83:
                    5c:5d:98:bb:f3:4a:d6:e4:f0:fd:3a:04:15:94:a3:
                    4c:6b:7f:3e:4e:aa:8c:ec:af:8e:cc:ef:55:69:cf:
                    5c:71:b3:5f:f5:20:5f:e1:b4:1a:07:b4:25:7f:27:
                    ef:1e:07:34:fd:a4:ef:8e:96:69:39:37:da:b4:bc:
                    38:e1:ea:77:eb:48:6b:46:c0:f7:5e:d4:1e:b8:aa:
                    80:c2:f7:97:df:8e:44:a7:6c:5f:d3:59:ad:4a:e9:
                    dd:d8:0c:f8:a4:7c:35:e6:b2:e8:92:cd:10:9d:0a:
                    a4:60:53:30:f1:3f:55:0e:4a:55:ca:c7:2d:7c:52:
                    2f:0f:00:9a:06:aa:09:55:74:fc:f2:7c:a6:c1:0e:
                    c9:2c:75:76:73:d2:6f:79:4e:0a:53:c5:76:4a:87:
                    47:1b:a3:f7:d3:28:60:7c:58:3f:c8:4a:93:48:c1:
                    c4:04:24:cf:aa:7f:18:02:9c:da:60:2d:df:4c:18:
                    29:70:a0:5e:11:e9:bb:7a:e6:d5:06:0c:39:b2:c6:
                    85:af:ab:a6:d5:cb:f1:9e:45:3f:3e:bf:17:06:c0:
                    26:eb:ae:81:dd:23:47:52:a8:54:f8:f0:2c:c1:9d:
                    8c:b2:ea:dd:56:6b:a7:e0:b6:8c:88:e5:c2:54:68:
                    a6:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:9D:FA:F3:E7:8A:C9:AF:95:C5:05:04:DD:E7:B1:60:59:A5:3D:F2
            X509v3 Authority Key Identifier:
                keyid:9A:EA:FA:96:C9:D5:63:E6:50:BA:59:2F:FB:06:E2:CE:EB:6A:08:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mur6lsnVY-ZQulkv-wbizutqCFk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/47275d-5fa7-4bb2-99eb-1f00737cb2a2/1/eZ368-eKya-VxQUE3eexYFmlPfI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/47275d-5fa7-4bb2-99eb-1f00737cb2a2/1/mur6lsnVY-ZQulkv-wbizutqCFk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.230.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:3e:46:ae:93:e8:4e:e1:0b:6d:8b:d6:e1:6f:f6:f4:13:8e:
         3e:27:01:98:e0:4f:a4:d9:01:f1:6d:9a:e5:a3:c0:14:79:78:
         af:02:5d:d6:91:33:67:17:00:83:02:1f:61:55:d0:e1:ac:92:
         a2:df:cd:3f:87:40:28:0a:dd:e8:ed:74:f2:4c:3a:59:55:1f:
         fc:d6:98:d0:dd:dc:c2:62:15:84:d3:0c:ab:82:dc:5f:71:c0:
         85:90:a4:11:37:a5:14:2c:55:80:22:2a:ce:64:fd:30:30:a3:
         a1:c2:58:6e:d5:8a:f3:20:35:64:9b:34:b4:9c:8d:1d:d5:95:
         a3:ca:f9:6c:c6:c2:f2:0e:9b:d6:c9:e9:6f:40:04:f0:00:02:
         58:03:a0:e7:f4:0a:dc:4c:4a:d1:01:36:47:ad:0b:d4:40:72:
         1b:17:31:ba:de:c5:46:bc:8d:e3:e3:33:dd:1e:1d:60:dd:c6:
         9c:be:ad:1e:10:e5:cf:9b:ee:1d:8e:66:c4:2c:e1:e8:5b:93:
         8a:a9:57:4f:30:0c:03:b8:56:a8:04:05:98:ed:12:e0:9d:95:
         33:4c:36:5d:51:41:48:1a:ca:3b:de:e6:f6:32:14:ea:52:24:
         b4:10:93:e5:e9:a3:3b:ce:16:33:9d:0c:ed:1c:54:66:f1:07:
         21:54:76:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:34 2024 by rpki-client on console-ams.rpki-client.org