Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ab7a04-ffe1-4a05-a5ef-8f539b64b8db/1/QEeZSVUGY-uh9jve_bUFZCfDI38.roa
File:                     QEeZSVUGY-uh9jve_bUFZCfDI38.roa (raw, json)
Hash identifier:          vN4eHcmnxvgp+c9On/tkZPFBnYwbsgSZ2So3yKg/apw=
Subject key identifier:   40:47:99:49:55:06:63:EB:A1:F6:3B:DE:FD:B5:05:64:27:C3:23:7F
Certificate issuer:       /CN=7b8254253dc0213fe58a7aff4b82463e47978063
Certificate serial:       0184150A90032E92EF39E95E47B3C249A490
Authority key identifier: 7B:82:54:25:3D:C0:21:3F:E5:8A:7A:FF:4B:82:46:3E:47:97:80:63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e4JUJT3AIT_linr_S4JGPkeXgGM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/ab7a04-ffe1-4a05-a5ef-8f539b64b8db/1/QEeZSVUGY-uh9jve_bUFZCfDI38.roa
Signing time:             Wed 26 Oct 2022 16:05:24 +0000
ROA not before:           Wed 26 Oct 2022 16:05:24 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     50533
IP address blocks:        178.213.74.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:15:0a:90:03:2e:92:ef:39:e9:5e:47:b3:c2:49:a4:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b8254253dc0213fe58a7aff4b82463e47978063
        Validity
            Not Before: Oct 26 16:05:24 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=40479949550663eba1f63bdefdb5056427c3237f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:56:c7:1a:74:92:19:f5:65:13:ec:1c:15:21:
                    a1:67:74:71:ca:93:4d:d0:c6:01:80:e3:07:3d:30:
                    2d:f8:4e:fb:8a:d0:2f:cf:b0:93:d4:d9:07:ab:dc:
                    c7:a9:c4:56:ab:27:5d:5d:cc:8e:95:9c:22:43:af:
                    49:cb:8b:f0:a2:ee:99:b3:51:ff:0b:5c:d7:6b:b9:
                    42:77:a8:a0:54:19:b5:24:43:b4:5a:ca:4f:22:c9:
                    14:81:ab:2f:64:82:03:81:4c:97:f1:8a:9c:93:5b:
                    bb:d8:01:f5:e0:be:6c:4a:08:95:e1:14:49:0f:1f:
                    01:13:40:28:34:c6:d3:ca:f0:70:48:f0:10:9c:08:
                    9f:e8:a9:5b:bf:2b:8c:d0:4c:82:06:41:16:dd:c8:
                    ec:0e:e4:e0:4e:11:2a:b8:af:3a:b5:d1:12:34:8e:
                    66:ee:82:a2:a4:8b:6e:94:6b:d8:76:5f:ae:69:4e:
                    f8:1c:d5:c3:68:a3:42:50:2b:a5:aa:c5:6f:3e:9f:
                    e5:01:a3:01:74:76:ff:66:11:a9:2f:54:9f:fd:e5:
                    76:c4:ef:3f:8e:ab:91:e0:a3:90:70:91:8c:eb:b3:
                    06:30:d4:37:11:ee:74:cc:92:74:7e:60:f7:a7:f4:
                    82:ae:81:14:76:98:64:2c:01:47:43:64:91:ce:f7:
                    7c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:47:99:49:55:06:63:EB:A1:F6:3B:DE:FD:B5:05:64:27:C3:23:7F
            X509v3 Authority Key Identifier:
                keyid:7B:82:54:25:3D:C0:21:3F:E5:8A:7A:FF:4B:82:46:3E:47:97:80:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4JUJT3AIT_linr_S4JGPkeXgGM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ab7a04-ffe1-4a05-a5ef-8f539b64b8db/1/QEeZSVUGY-uh9jve_bUFZCfDI38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ab7a04-ffe1-4a05-a5ef-8f539b64b8db/1/e4JUJT3AIT_linr_S4JGPkeXgGM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.213.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:b5:6c:11:39:6a:88:15:92:d7:9d:d5:91:9b:c1:14:ea:29:
         6a:9b:0b:47:ef:57:7b:15:8d:e8:b8:97:cb:7d:5f:f4:c9:69:
         80:12:b5:9d:ac:e2:63:86:63:58:ca:df:78:13:f0:e1:c7:84:
         d2:84:70:ca:33:b9:70:98:51:0b:36:ae:ab:0e:6d:ba:87:c8:
         6a:68:60:f3:5e:88:aa:4c:8b:73:90:ee:99:8a:0b:45:2a:94:
         c8:3f:49:5d:32:d5:f8:3b:f8:25:11:4b:95:d7:d6:ec:c1:36:
         db:36:a2:f5:9b:75:b1:07:ac:13:63:f8:67:73:68:b2:e1:ab:
         6f:e5:cc:73:a8:1c:f1:80:f2:10:14:58:e1:68:46:2b:bf:8d:
         16:8c:15:d9:70:fa:95:25:40:e1:cc:45:8e:5a:1f:cf:68:6f:
         c4:9b:e1:6f:37:2d:2a:6d:f0:17:ff:f5:d7:0f:4d:09:f7:6d:
         30:50:17:db:f0:11:13:a1:80:02:ad:fd:97:a9:11:9a:2e:58:
         af:18:48:3c:8a:03:55:d6:c5:61:c4:d2:51:74:83:ea:33:2a:
         4b:14:e9:63:28:51:93:0e:62:a7:08:d6:cb:14:71:39:0c:90:
         cc:7b:a9:15:bf:b3:95:cd:83:f4:5b:53:ee:12:58:6c:4e:a2:
         f1:2d:ed:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:04 2024 by rpki-client on console-ams.rpki-client.org