Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/0jfvOh6vsBN6kTLupi6_8xIpiDQ.roa
File:                     0jfvOh6vsBN6kTLupi6_8xIpiDQ.roa (raw, json)
Hash identifier:          wix0SlOohhVbsS/i4V7oIqNm4s3E9T4MHCz/Y9b2smE=
Subject key identifier:   D2:37:EF:3A:1E:AF:B0:13:7A:91:32:EE:A6:2E:BF:F3:12:29:88:34
Certificate issuer:       /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial:       1CE2F664
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/0jfvOh6vsBN6kTLupi6_8xIpiDQ.roa
Signing time:             Mon 21 Feb 2022 19:07:44 +0000
ROA not before:           Mon 21 Feb 2022 19:07:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209371
IP address blocks:        212.111.200.0/24 maxlen: 24
                          77.47.241.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 484636260 (0x1ce2f664)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19426325acb8ce609a686fa655b058968809b346
        Validity
            Not Before: Feb 21 19:07:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d237ef3a1eafb0137a9132eea62ebff312298834
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5f:d6:f8:45:dd:27:0b:af:83:94:2f:10:f0:
                    e6:03:47:cb:cf:3e:a1:2b:4f:11:b2:54:98:fc:37:
                    0c:fe:f0:39:e2:ad:12:4a:a6:74:f5:f5:40:ab:f2:
                    a0:23:87:93:65:fd:34:ab:fa:a1:71:95:d2:b5:ed:
                    db:4a:4c:28:f3:77:64:a9:59:3f:67:85:7d:71:65:
                    5a:5f:71:2a:82:97:90:6a:95:7d:b1:17:2e:f9:a2:
                    9f:08:4c:dd:7c:08:46:83:c0:42:bd:6c:b2:a8:4e:
                    60:2c:e5:3a:6d:17:cd:ae:77:bb:7f:ed:67:27:0e:
                    79:8d:4b:10:f2:35:17:77:96:4a:df:0c:89:44:ac:
                    80:7b:39:c2:2d:29:0b:84:7e:db:08:cd:f2:4c:d4:
                    e8:c3:b0:32:2d:6b:90:e3:34:82:b5:d1:88:79:c9:
                    5d:34:fc:d6:9b:5a:a8:82:5f:30:2a:b7:c5:63:33:
                    a3:3b:a8:85:a2:93:07:95:da:8a:02:1d:1b:de:44:
                    98:6f:e6:01:cc:27:8f:24:66:c9:a7:4a:ad:d1:6a:
                    fe:4a:05:0b:13:c0:bd:80:b6:00:25:62:18:3d:23:
                    5a:10:fa:0c:3f:5a:57:18:b9:4a:02:84:16:68:d6:
                    dc:89:8a:39:92:e6:24:6c:5c:f7:90:7c:a5:bf:37:
                    99:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:37:EF:3A:1E:AF:B0:13:7A:91:32:EE:A6:2E:BF:F3:12:29:88:34
            X509v3 Authority Key Identifier:
                keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/0jfvOh6vsBN6kTLupi6_8xIpiDQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.47.241.0/24
                  212.111.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:9d:14:34:b8:b9:3c:14:f3:a0:0e:d1:31:6e:87:e3:41:61:
         f6:f9:d7:a7:95:ef:dd:a7:bd:82:61:bb:ab:0f:92:fb:12:ef:
         63:e4:55:fd:2d:aa:09:f6:da:1d:e6:8a:d6:3e:8c:dc:c6:f5:
         74:b9:b9:63:83:9a:18:05:e5:ca:a8:6c:59:07:c1:e3:d7:98:
         eb:25:90:ef:4f:a2:07:d4:74:36:a1:5b:36:ce:17:76:22:54:
         6c:e7:4b:21:9f:d2:73:25:52:25:30:a3:28:89:8f:dc:55:24:
         a4:28:3c:7e:b7:cf:5d:58:31:47:eb:bc:2b:06:34:03:3c:44:
         84:15:b2:8a:95:3c:1c:04:5c:df:03:7e:b2:8c:bf:e1:f2:2f:
         35:ec:58:f4:84:d5:f6:76:cb:4d:7a:d5:ef:c6:4d:82:88:17:
         48:b5:76:d9:21:e4:0d:a5:05:02:a5:df:83:ea:ff:14:1b:ab:
         65:bc:d9:2e:d1:0d:7e:13:3b:09:b6:5a:bd:a3:40:b3:9b:7f:
         18:32:31:14:18:81:80:16:f5:ba:50:8a:43:f7:10:44:92:dc:
         9f:eb:2b:e2:b0:bd:94:d9:e2:58:dd:fb:34:c1:80:f2:69:eb:
         11:51:aa:42:72:d1:0c:c4:35:67:b1:6e:67:a9:dd:de:82:30:
         04:44:be:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org