Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/077j6JqqQldb3vMm4gNMxCWyhd4.roa
File:                     077j6JqqQldb3vMm4gNMxCWyhd4.roa (raw, json)
Hash identifier:          Yb/EaMhrGu4wH3lc5ddTB03YTe0foK29huH8hgxTCok=
Subject key identifier:   D3:BE:E3:E8:9A:AA:42:57:5B:DE:F3:26:E2:03:4C:C4:25:B2:85:DE
Certificate issuer:       /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Certificate serial:       1F8E5BA5
Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/077j6JqqQldb3vMm4gNMxCWyhd4.roa
Signing time:             Sat 01 Jan 2022 14:06:37 +0000
ROA not before:           Sat 01 Jan 2022 14:06:37 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     24961
IP address blocks:        37.114.40.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 529423269 (0x1f8e5ba5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
        Validity
            Not Before: Jan  1 14:06:37 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d3bee3e89aaa42575bdef326e2034cc425b285de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:26:6a:b1:25:0c:60:02:49:9c:6a:ef:55:2d:
                    85:28:3a:19:38:ab:25:18:7f:d8:3a:21:68:18:d5:
                    c2:de:aa:2d:6a:4f:8c:84:86:24:23:18:96:eb:28:
                    41:9b:bd:00:dc:32:f0:58:c0:f0:6e:16:97:91:b8:
                    7b:1f:ae:d0:bd:87:97:e1:1d:f1:15:1b:88:64:82:
                    a6:30:2a:ff:45:cc:90:86:b0:ee:97:53:de:19:36:
                    e3:34:0d:95:a7:ef:1e:a5:9d:a2:e5:d9:5f:11:e6:
                    d0:6f:17:83:cb:76:6f:c1:34:e6:8d:7c:8d:18:ad:
                    f3:97:a3:00:10:88:f9:44:48:1a:ff:7f:ff:45:7b:
                    2b:fb:b0:30:e9:14:71:e7:ef:d1:9f:7e:db:e6:5e:
                    6c:0a:ff:46:db:70:ce:3a:b1:69:02:ca:26:a1:41:
                    45:3a:7a:ca:06:83:be:c7:1f:7c:78:bd:9a:73:a2:
                    72:71:2f:95:8a:ed:c9:fd:63:0a:d6:aa:4b:95:8b:
                    79:70:ac:e7:5b:56:51:a2:30:ad:73:1b:65:99:51:
                    ec:00:53:bc:e8:bf:1f:ef:bd:83:24:71:bb:b7:4e:
                    3b:dd:ea:21:3b:71:82:ad:67:62:67:06:38:cf:48:
                    4a:0c:06:c5:17:57:a3:6a:58:5b:a5:bb:c0:3f:95:
                    e8:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:BE:E3:E8:9A:AA:42:57:5B:DE:F3:26:E2:03:4C:C4:25:B2:85:DE
            X509v3 Authority Key Identifier:
                keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/077j6JqqQldb3vMm4gNMxCWyhd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.114.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:72:f8:43:88:24:67:f1:7f:08:5c:38:55:0c:dd:d3:9a:b3:
         25:3c:32:ee:14:f8:b1:10:0d:ff:e8:b6:0f:54:5e:03:0d:1c:
         b6:18:b1:96:72:36:d2:b9:17:b6:98:73:ef:ae:f4:6e:15:b0:
         f4:ce:6f:ac:0d:2e:29:0d:25:f2:76:b2:43:67:87:ab:7f:ab:
         c6:cc:ca:61:f7:89:c4:63:67:fe:34:ec:23:16:cb:98:6f:d0:
         c2:cc:a3:b7:81:82:94:af:32:ba:e6:2b:db:b6:40:8c:d4:41:
         6b:ab:04:85:28:ed:97:a9:7a:92:e4:78:eb:29:55:09:74:90:
         5d:12:f3:7f:cd:1b:66:cf:f0:78:b6:ac:84:ba:c9:14:a9:6f:
         3f:f9:e7:ea:0c:53:9e:9f:da:4b:04:9e:39:0a:e6:56:7b:32:
         2c:0e:4a:2b:e0:28:d4:30:05:99:c1:ab:a4:5e:aa:04:bf:cf:
         99:7d:41:10:ff:62:15:35:fe:1d:cf:aa:81:fb:fd:15:e0:74:
         68:b0:c0:5d:6e:3b:ee:48:00:c8:13:16:b8:b8:8c:e6:06:b5:
         12:08:bf:94:82:ea:c7:44:90:61:24:65:09:62:5a:7b:e5:7d:
         58:cd:62:1a:0e:4b:f5:e6:19:38:9a:be:f2:ec:c8:bd:9a:9c:
         8a:17:ce:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:17 2024 by rpki-client on console-ams.rpki-client.org