Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/2UOaxbGxcv1kTlRqS9VIts9Gzzg.roa
File:                     2UOaxbGxcv1kTlRqS9VIts9Gzzg.roa (raw, json)
Hash identifier:          S2AWhpuRdPv9kd7KtbgZcCTWoolfYsIyyK9NQ748lFA=
Subject key identifier:   D9:43:9A:C5:B1:B1:72:FD:64:4E:54:6A:4B:D5:48:B6:CF:46:CF:38
Certificate issuer:       /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial:       04139A89
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/2UOaxbGxcv1kTlRqS9VIts9Gzzg.roa
Signing time:             Sun 27 Mar 2022 00:07:31 +0000
ROA not before:           Sun 27 Mar 2022 00:07:31 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207459
IP address blocks:        78.135.80.0/24 maxlen: 24
                          188.132.209.0/24 maxlen: 32
                          78.135.87.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68393609 (0x4139a89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
        Validity
            Not Before: Mar 27 00:07:31 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d9439ac5b1b172fd644e546a4bd548b6cf46cf38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7e:c5:bc:eb:0f:ab:18:f2:a5:eb:16:3c:02:
                    f7:4f:0e:8c:84:db:04:02:80:01:04:70:59:60:db:
                    39:07:09:bf:9a:2d:28:39:4f:07:fa:0d:35:ee:03:
                    41:f4:eb:14:b3:60:43:6c:35:ca:f0:5a:05:9c:56:
                    9d:68:ec:c9:af:c1:3e:4b:b4:ef:6f:ff:5a:b2:43:
                    af:3c:fa:20:e4:a6:b4:8a:a8:33:a8:00:3e:c4:e5:
                    72:22:85:b8:95:c6:bf:bb:b4:00:38:be:3d:52:e1:
                    31:fe:ce:5f:9a:1b:64:c4:7f:35:7a:d1:8e:be:fa:
                    2f:bd:07:ff:71:b4:d8:48:7f:71:d3:89:a4:a3:2f:
                    3f:2c:da:d6:45:51:ec:b6:50:c2:79:9f:4b:44:de:
                    a7:95:07:ba:85:5e:64:40:c7:92:ea:2a:1e:07:07:
                    45:02:30:84:09:3c:54:40:61:77:4c:ea:1b:39:ab:
                    39:2a:68:b8:7f:6d:0e:fc:60:08:66:67:d3:9d:f9:
                    1f:5a:4f:fc:d4:95:64:93:0a:8c:25:d4:81:3c:81:
                    93:eb:c5:b3:b1:82:fe:bf:38:42:70:bf:44:e6:43:
                    22:1a:55:72:e6:f1:0e:d1:ca:a9:97:63:39:11:d1:
                    62:30:7a:cb:34:9a:3f:f4:a3:52:4d:2e:e6:bc:c9:
                    d5:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:43:9A:C5:B1:B1:72:FD:64:4E:54:6A:4B:D5:48:B6:CF:46:CF:38
            X509v3 Authority Key Identifier:
                keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/2UOaxbGxcv1kTlRqS9VIts9Gzzg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  78.135.80.0/24
                  78.135.87.0/24
                  188.132.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:e8:ef:9c:84:29:32:e3:91:c5:1c:3b:fb:e4:98:21:f7:04:
         56:72:6b:85:49:e8:f7:85:d5:ab:78:df:6f:9b:9b:78:c2:96:
         92:c2:30:16:84:ce:ea:15:7f:df:a3:ad:c0:3d:21:6e:92:63:
         3c:da:e6:30:f5:5a:3f:b6:a9:dd:2b:2c:40:47:5f:f8:eb:b0:
         e2:ff:40:d7:e0:73:9d:7e:86:cc:b8:36:b5:df:9a:8b:a9:df:
         70:53:0b:1e:bf:ab:e8:52:c3:51:a3:e9:15:6e:cc:9c:68:a0:
         0b:a8:e0:d7:a5:82:ed:d4:fb:d3:15:d4:a7:ce:14:13:c6:72:
         5b:95:5d:cd:df:ed:b2:18:ba:8e:e7:2d:20:05:4c:ae:fd:a0:
         4e:83:35:63:a1:c7:24:c0:a9:57:4d:c0:3e:09:8a:31:08:e3:
         1c:00:04:8a:d6:06:80:13:cf:9c:f3:0b:fd:e1:3c:d5:3a:76:
         92:f0:bb:b7:3f:38:10:b5:8c:44:03:8d:76:54:5f:0b:d7:f2:
         9c:0c:96:65:43:58:9c:77:b3:f8:60:df:d0:80:97:67:b4:0b:
         cf:65:5a:57:02:a5:7a:b0:09:be:6f:6c:7b:0f:20:69:12:62:
         5a:e2:f8:c8:dd:1f:f7:e4:1b:cd:f4:a7:d7:f7:bd:b1:aa:6e:
         08:ac:19:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:58 2024 by rpki-client on console-ams.rpki-client.org