Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/CV9ARjp9SZaIjQRA2jJ9bjErXyY.roa
File:                     CV9ARjp9SZaIjQRA2jJ9bjErXyY.roa (raw, json)
Hash identifier:          v5KQVRV4NroxcqREhjDvfXpafmqs52ER43BFq4ekaUI=
Subject key identifier:   09:5F:40:46:3A:7D:49:96:88:8D:04:40:DA:32:7D:6E:31:2B:5F:26
Certificate issuer:       /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial:       1DFFFB7C
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/CV9ARjp9SZaIjQRA2jJ9bjErXyY.roa
Signing time:             Fri 20 May 2022 16:13:30 +0000
ROA not before:           Fri 20 May 2022 16:13:30 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204197
IP address blocks:        195.178.132.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 503315324 (0x1dfffb7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19426325acb8ce609a686fa655b058968809b346
        Validity
            Not Before: May 20 16:13:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=095f40463a7d4996888d0440da327d6e312b5f26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6f:6e:72:ba:af:3b:05:7d:a7:1d:90:e7:53:
                    07:68:e9:eb:70:8f:d1:6f:39:5e:fc:28:c5:09:36:
                    99:09:f3:dd:14:8c:ca:ea:c6:be:6f:76:3b:08:1a:
                    ce:82:d4:9b:1c:df:23:cc:c1:1c:91:fd:25:10:d1:
                    fd:09:57:14:c1:04:5a:14:e9:bc:d9:54:16:cc:47:
                    2a:87:11:d3:2b:04:8d:c4:6e:53:e0:56:2c:2d:0e:
                    fe:2f:91:a6:f5:d2:02:8c:63:7a:d4:9b:44:2b:e5:
                    37:b2:d8:b1:e0:81:9f:30:36:8c:75:72:8c:b9:b9:
                    c3:a6:a2:38:31:1f:94:7b:30:71:f4:1a:e6:28:8c:
                    4e:f4:d9:28:7f:a0:d4:96:ed:cf:c4:f9:44:54:c0:
                    c3:1c:30:81:4b:6d:47:35:68:93:a5:4f:08:5c:22:
                    26:6d:dc:e2:0c:51:65:e3:0d:82:d8:c6:27:f4:06:
                    e7:81:35:c4:36:87:b8:89:75:53:66:ec:d6:75:99:
                    79:f1:ef:d7:d4:4c:60:d3:fa:4d:39:ca:4c:6a:04:
                    c5:bf:32:ec:0c:d5:b6:59:22:42:e3:06:2f:e2:93:
                    fb:6a:35:e7:1d:db:9b:bd:74:f7:3b:b7:5c:73:46:
                    a3:2b:99:b3:b7:32:d5:ec:bf:06:89:73:76:06:3c:
                    c8:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:5F:40:46:3A:7D:49:96:88:8D:04:40:DA:32:7D:6E:31:2B:5F:26
            X509v3 Authority Key Identifier:
                keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/CV9ARjp9SZaIjQRA2jJ9bjErXyY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.178.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b1:29:c8:22:d3:93:5a:7b:90:cd:59:98:47:5c:f2:8b:b2:db:
         62:61:8f:83:21:35:21:a3:ab:fe:f2:05:db:bb:44:e4:85:05:
         f4:28:84:01:b4:67:bd:1e:de:2e:c4:83:77:6d:5f:53:7a:de:
         e4:88:f5:88:76:7b:fa:e9:2c:16:09:76:41:25:18:14:3b:4a:
         d0:fe:6b:d9:67:92:4c:ee:a0:ea:5e:00:b3:ab:4a:14:a0:a8:
         4f:1d:81:f8:08:2c:b7:0b:95:8c:06:ab:9e:ee:e8:ad:45:4f:
         8e:ea:10:2b:1d:ec:ff:c7:c4:50:64:ea:cf:cc:57:84:07:ef:
         f9:42:90:ec:82:38:29:d3:a8:d6:65:9a:b7:b5:2f:3e:43:07:
         40:55:ba:17:ae:aa:fe:63:65:43:2d:0e:71:aa:6d:1f:4c:c6:
         f2:6d:92:c5:d7:b8:86:94:2b:69:a9:f3:04:15:06:3e:31:1c:
         ef:1d:36:1a:f0:ac:0a:5d:0a:82:e6:79:98:77:76:44:57:5c:
         42:80:2e:2e:ec:6c:03:95:27:3d:35:5b:d3:86:f0:00:34:fe:
         43:f9:e1:d7:14:a2:ce:ef:fa:5f:45:37:8f:3e:a9:f6:76:75:
         60:12:72:d2:fd:86:6f:41:3e:2b:f7:51:c2:c6:3a:20:1b:b7:
         3b:8f:46:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:42 2024 by rpki-client on console-fra.rpki-client.org