Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/FEcu0MRBl0htqVo3Umqy95MgoRI.roa
File:                     FEcu0MRBl0htqVo3Umqy95MgoRI.roa (raw, json)
Hash identifier:          Ho0CotT8x7bDs0/FNXZ3JJFmCEL6XNMiBQl9E4g5rEM=
Subject key identifier:   14:47:2E:D0:C4:41:97:48:6D:A9:5A:37:52:6A:B2:F7:93:20:A1:12
Certificate issuer:       /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial:       050DBFBF
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/FEcu0MRBl0htqVo3Umqy95MgoRI.roa
Signing time:             Wed 29 Jun 2022 14:01:02 +0000
ROA not before:           Wed 29 Jun 2022 14:01:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207326
IP address blocks:        78.135.67.0/24 maxlen: 24
                          78.135.83.0/24 maxlen: 24
                          78.135.82.0/24 maxlen: 24
                          78.135.81.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84787135 (0x50dbfbf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
        Validity
            Not Before: Jun 29 14:01:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=14472ed0c44197486da95a37526ab2f79320a112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:02:1b:d2:08:63:a5:b1:f1:d2:8c:db:d1:73:
                    e7:1d:0e:e4:63:8a:b0:2a:81:24:34:ca:7b:92:e9:
                    42:9f:89:4c:fe:f2:ff:8b:f0:bf:84:7c:26:49:ab:
                    ba:af:00:75:7d:81:90:3f:ac:35:f5:5f:f2:03:c2:
                    69:f6:dd:79:49:21:c7:63:39:92:f0:ca:58:a9:c8:
                    a0:3e:b5:7a:32:98:71:3d:75:85:5f:77:12:a6:47:
                    1c:55:89:24:f7:bb:60:97:a9:3c:46:05:b9:1b:73:
                    0b:52:8c:77:fd:58:f1:1e:9c:bd:ef:71:ab:eb:69:
                    a9:fb:a0:af:41:a3:32:fe:d9:8e:9e:d1:f1:1e:5d:
                    2f:67:00:62:5b:a2:ea:10:47:1a:70:b7:e6:ae:fd:
                    07:38:37:ed:fc:14:33:c9:cb:63:fc:ab:21:cc:43:
                    ba:f1:86:73:68:01:93:da:3d:4e:bd:7f:d9:bd:7a:
                    10:7d:bb:b3:4f:8f:e4:7f:02:0a:4e:ae:a9:b7:04:
                    45:c9:8e:ed:be:18:8e:17:eb:33:c0:36:9f:d0:73:
                    62:0c:7e:95:8b:68:93:10:17:b8:d2:82:1a:1d:fa:
                    d6:d8:e1:b8:bc:93:f5:fa:85:54:5b:f7:73:e4:17:
                    f7:84:dd:c9:98:09:22:5d:10:2d:9d:44:2c:51:59:
                    74:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:47:2E:D0:C4:41:97:48:6D:A9:5A:37:52:6A:B2:F7:93:20:A1:12
            X509v3 Authority Key Identifier:
                keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/FEcu0MRBl0htqVo3Umqy95MgoRI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  78.135.67.0/24
                  78.135.81.0-78.135.83.255

    Signature Algorithm: sha256WithRSAEncryption
         60:f0:35:b1:39:b9:ae:21:9d:2f:c0:e4:1a:c7:47:1a:cc:87:
         0c:c9:14:ad:29:31:c1:f0:69:98:da:79:49:b4:7e:c3:da:04:
         20:f5:6a:e4:0c:44:cb:95:68:e9:b1:34:5f:95:04:1d:61:0c:
         88:9e:26:0a:12:f8:a6:f8:ba:d6:24:06:55:ec:5b:3b:d2:db:
         14:07:07:91:81:c1:b5:29:65:88:03:01:80:a7:a5:9f:21:f6:
         6b:18:b9:e8:c1:0e:fe:89:b7:51:5f:ae:89:52:e2:b6:9d:36:
         51:d5:c9:d7:ba:ed:04:f4:5a:f9:a9:ee:65:24:68:3d:dd:f5:
         91:62:76:63:c4:2f:d7:81:e3:50:22:05:ae:93:c6:dd:0e:2d:
         9a:05:b2:56:0c:8b:1c:47:50:20:4c:11:95:a6:05:28:95:d0:
         04:bd:f1:f9:70:5d:8a:da:fa:86:4f:20:e3:09:4b:be:d6:1e:
         c6:30:d8:63:71:86:24:d4:7f:cf:ac:c1:9b:59:27:b2:52:bb:
         ce:ff:e6:93:18:8a:4e:51:f7:44:f7:c5:ef:cd:ea:b3:7d:34:
         cb:5f:ea:30:7e:a6:d2:78:38:14:d5:e4:75:54:f2:24:52:64:
         98:ec:2d:c6:55:79:60:99:00:62:61:0d:3a:73:e6:97:2a:ec:
         25:7b:cd:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:43 2024 by rpki-client on console-fra.rpki-client.org