Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/51Nl7lH3hJoTP1RJSNc4wmUo31k.roa
File:                     51Nl7lH3hJoTP1RJSNc4wmUo31k.roa (raw, json)
Hash identifier:          lkIex5w1c4Sh6qBa43smc4ENfsbKUSAJUr1UZ0qM3K4=
Subject key identifier:   E7:53:65:EE:51:F7:84:9A:13:3F:54:49:48:D7:38:C2:65:28:DF:59
Certificate issuer:       /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial:       1C3E0638
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/51Nl7lH3hJoTP1RJSNc4wmUo31k.roa
Signing time:             Sat 01 Jan 2022 07:55:37 +0000
ROA not before:           Sat 01 Jan 2022 07:55:37 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     146993
IP address blocks:        195.178.136.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 473826872 (0x1c3e0638)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19426325acb8ce609a686fa655b058968809b346
        Validity
            Not Before: Jan  1 07:55:37 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e75365ee51f7849a133f544948d738c26528df59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:83:a0:73:75:65:e6:3e:f7:33:3a:f4:4c:a0:
                    2e:a1:fc:01:5f:29:c2:f3:03:2a:22:5c:32:6e:52:
                    84:73:f7:1b:61:a6:13:48:66:59:4e:4f:00:39:5f:
                    de:fc:cd:47:e8:3e:0c:a0:cf:8c:32:52:e6:86:7e:
                    c3:ce:33:16:8c:e6:77:86:ec:18:60:76:a8:12:24:
                    96:47:f4:6f:2e:e0:a3:7a:23:f1:39:92:04:b9:24:
                    22:aa:87:b1:3a:64:71:60:49:a8:a8:23:1c:a7:f9:
                    d1:9a:5f:4a:80:d5:c0:b6:10:64:65:f8:8e:39:eb:
                    89:50:1f:f6:82:06:77:bf:04:3a:0e:58:fa:3a:49:
                    e7:d5:54:b9:c9:7c:01:66:1f:ef:9c:b4:81:6b:dc:
                    12:5c:39:7f:10:76:e1:5f:fa:85:81:83:67:84:a1:
                    48:86:e3:42:2b:6a:6b:56:b4:b8:f1:9c:82:f5:85:
                    8e:3e:b7:01:d8:15:0d:61:2c:f9:df:e7:9f:35:e1:
                    66:27:1d:1c:d0:17:d8:c2:96:97:57:f2:b3:f7:8b:
                    83:61:47:4c:b6:1b:8b:af:3b:8b:b0:88:57:1c:4f:
                    46:c1:08:cb:67:f2:5f:8a:d5:c5:b3:c9:85:07:bf:
                    ae:e7:f0:80:7a:bd:9d:ea:a1:69:38:4b:22:c0:8d:
                    a0:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:53:65:EE:51:F7:84:9A:13:3F:54:49:48:D7:38:C2:65:28:DF:59
            X509v3 Authority Key Identifier:
                keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/51Nl7lH3hJoTP1RJSNc4wmUo31k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.178.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:9d:f0:15:ac:a0:12:a0:71:4e:1d:84:52:88:b2:2e:8e:6f:
         42:62:d9:a3:1c:9c:b6:94:c8:cf:80:7d:18:e8:83:64:ba:c9:
         1d:cd:db:e7:be:ed:52:a2:ff:c0:76:bc:3f:bb:b4:2f:25:9b:
         9a:a0:7e:7c:e7:1d:a1:b6:a2:a6:a5:8f:37:4a:9e:fd:11:e2:
         eb:6d:f6:b0:fd:54:b1:0b:76:7f:c8:ec:2a:32:95:a1:73:9d:
         f5:93:a4:f6:4b:a5:79:00:47:6f:63:a0:a0:19:f2:3a:82:b5:
         93:e9:3c:7f:ef:55:4a:9c:58:cd:fe:c1:44:c4:ce:e1:93:a1:
         20:d1:17:4b:68:2d:1e:0e:16:74:73:9a:e6:de:dd:9c:dd:1b:
         d5:b7:68:da:e4:5b:a7:85:bf:f5:2f:9d:fc:d6:f3:49:fe:b8:
         50:1c:09:80:a8:03:e3:66:9b:d6:be:de:28:0d:25:92:5b:55:
         1f:ae:f8:62:3e:a5:1c:78:83:cb:7b:2e:51:55:f6:53:06:3f:
         28:bc:4f:22:a0:e3:05:9c:94:c6:be:3a:be:8c:8b:ce:09:82:
         4a:81:2b:4d:26:f0:5f:e5:aa:56:0e:d1:ea:21:b1:05:1f:2f:
         a8:e0:98:71:73:fe:f7:89:ec:96:94:2d:e0:42:43:e5:82:32:
         c6:ab:dc:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org