Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/5b3Pdv1JyGqGMlkWIGrNw9Akuho.roa
File:                     5b3Pdv1JyGqGMlkWIGrNw9Akuho.roa (raw, json)
Hash identifier:          xDIGsMLEVkaEp5Kr9P2lQxkBp1j40JrItlclYWjDcGg=
Subject key identifier:   E5:BD:CF:76:FD:49:C8:6A:86:32:59:16:20:6A:CD:C3:D0:24:BA:1A
Certificate issuer:       /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial:       1CCDF452
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/5b3Pdv1JyGqGMlkWIGrNw9Akuho.roa
Signing time:             Tue 15 Feb 2022 16:04:22 +0000
ROA not before:           Tue 15 Feb 2022 16:04:22 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     43260
IP address blocks:        195.178.140.0/24 maxlen: 24
                          195.178.141.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 483259474 (0x1ccdf452)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19426325acb8ce609a686fa655b058968809b346
        Validity
            Not Before: Feb 15 16:04:22 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e5bdcf76fd49c86a86325916206acdc3d024ba1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b5:79:63:b4:3b:f9:88:f9:f6:4f:5f:f8:f1:
                    76:8f:e8:87:5b:c4:48:d5:d7:36:d6:e8:04:87:ba:
                    b9:ff:0c:80:85:e4:4f:f8:e7:3e:bf:4b:27:0c:3c:
                    c3:34:cb:f7:8a:37:53:c0:87:6e:4a:28:0e:3c:1c:
                    88:ea:a1:1a:df:bf:51:19:99:45:10:6f:ae:79:a8:
                    ff:61:a3:ab:f2:bf:14:65:97:29:9d:82:a9:64:b7:
                    70:cf:07:e0:6f:e8:a9:78:62:8e:24:6a:b0:72:1c:
                    b2:06:e9:1e:2a:98:82:c9:89:c7:25:44:43:6b:d0:
                    f2:5d:e9:16:e3:df:06:cf:0a:c3:33:80:14:a0:19:
                    24:46:53:6f:56:1b:c3:2f:cc:d2:b2:46:1d:5c:9d:
                    d4:27:a2:fc:0d:b8:24:e1:65:b0:60:69:84:34:ff:
                    93:61:cd:39:35:8e:86:b5:bd:01:2c:50:04:ab:65:
                    62:b4:10:11:91:18:fd:9a:3e:69:da:47:7a:5b:aa:
                    c8:cd:ca:a9:94:71:17:04:a8:15:4f:f3:a6:a5:0c:
                    27:72:11:18:3f:e5:56:00:e2:f2:44:7f:45:ff:dd:
                    46:3a:bc:3c:e2:ab:8f:fb:13:f6:f6:dc:60:1e:2e:
                    92:5f:18:94:76:bc:db:00:95:ac:2b:74:95:16:8c:
                    ba:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:BD:CF:76:FD:49:C8:6A:86:32:59:16:20:6A:CD:C3:D0:24:BA:1A
            X509v3 Authority Key Identifier:
                keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/5b3Pdv1JyGqGMlkWIGrNw9Akuho.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.178.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         38:d7:44:dc:36:4d:3a:9d:04:04:b1:79:7c:04:6b:d3:2d:02:
         11:23:c9:52:e4:c3:a2:96:0c:c1:86:85:73:8d:e6:4e:dc:0c:
         a2:07:be:84:85:f1:49:3b:f4:4d:c9:b6:d9:c0:c7:9f:3f:8f:
         7c:24:cc:87:86:15:ad:e3:f3:db:55:d5:57:de:1a:3c:c5:f6:
         56:f2:37:39:b8:f8:a6:48:25:b3:57:7e:c5:6a:03:8a:6c:26:
         06:3a:e0:6d:91:fd:ac:2a:47:1e:3a:db:46:60:2d:20:98:55:
         b0:6c:bd:49:0c:9b:a2:bf:19:87:c5:70:fa:6f:c1:b4:2c:fa:
         4f:ba:5d:f1:59:13:70:00:cb:9c:4f:0a:29:21:aa:73:40:26:
         91:91:50:8a:af:5f:72:29:7d:48:e3:04:1c:73:41:b3:5c:a5:
         00:fd:4f:33:bb:93:02:7b:be:a2:55:17:bd:f3:5c:cc:88:e2:
         ba:3c:78:0e:c5:c5:4f:f6:fd:8f:71:63:5c:5b:15:17:05:a1:
         4d:56:3c:d7:30:7c:9e:aa:d2:db:d1:a9:f3:36:2c:ca:47:ad:
         ee:31:43:ee:42:66:f8:0c:82:93:3f:19:4e:c4:c8:40:0b:fb:
         6f:00:61:57:74:d9:ea:01:ac:44:a9:5e:27:11:c5:0e:37:6e:
         5b:0b:bb:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:42 2024 by rpki-client on console-fra.rpki-client.org