Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/D6U8j5ZkDMHstUgKZY6zXPUA3Cg.roa
File:                     D6U8j5ZkDMHstUgKZY6zXPUA3Cg.roa (raw, json)
Hash identifier:          cp62juzK4YEO7L22gU/4n32mrd3Ierp4IQBlTo0pSqM=
Subject key identifier:   0F:A5:3C:8F:96:64:0C:C1:EC:B5:48:0A:65:8E:B3:5C:F5:00:DC:28
Certificate issuer:       /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial:       1D52B97D
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/D6U8j5ZkDMHstUgKZY6zXPUA3Cg.roa
Signing time:             Tue 29 Mar 2022 13:17:55 +0000
ROA not before:           Tue 29 Mar 2022 13:17:55 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204197
IP address blocks:        195.178.132.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 491960701 (0x1d52b97d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19426325acb8ce609a686fa655b058968809b346
        Validity
            Not Before: Mar 29 13:17:55 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0fa53c8f96640cc1ecb5480a658eb35cf500dc28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:89:47:cf:d3:cd:63:f0:7a:30:18:ad:3c:e7:
                    54:bc:12:10:94:e3:44:52:ef:ab:82:4b:7d:5a:01:
                    bf:b7:f8:d8:6a:ef:70:77:16:90:a5:fc:24:7d:30:
                    b7:f0:cd:7d:98:69:dc:1e:28:51:00:0a:6c:15:55:
                    3b:8c:65:3e:ba:89:9a:23:57:be:13:f0:3f:df:1b:
                    e7:5f:a0:54:aa:6f:86:fe:58:b4:e6:60:cc:9d:25:
                    f6:d8:95:66:e1:67:94:21:1f:b3:12:15:30:ac:8d:
                    18:ee:ad:f5:75:58:10:44:c1:ce:29:ad:ff:a5:cb:
                    82:be:99:6a:e5:21:5d:91:7c:9b:54:a2:b3:c1:5e:
                    26:00:35:97:d2:39:a9:18:1b:be:54:b0:98:d9:a8:
                    11:24:92:cf:2b:5a:c6:00:bb:e3:74:38:7f:a7:52:
                    75:bc:5a:7f:03:5d:e9:05:8b:7c:73:5b:23:06:38:
                    53:0a:c3:57:2e:38:fe:66:05:f5:12:d4:9f:94:37:
                    48:a8:2c:52:88:6a:bc:88:37:8d:bc:04:7d:9f:68:
                    6e:d6:a3:4d:b9:e4:4b:12:54:a5:b9:0b:2b:52:ed:
                    cb:1a:68:22:98:d5:54:27:6d:37:fd:6d:27:55:8d:
                    47:61:ac:4c:04:b6:28:46:b2:88:e8:32:4b:07:16:
                    f1:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:A5:3C:8F:96:64:0C:C1:EC:B5:48:0A:65:8E:B3:5C:F5:00:DC:28
            X509v3 Authority Key Identifier:
                keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/D6U8j5ZkDMHstUgKZY6zXPUA3Cg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.178.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cd:9c:07:0a:a1:7d:b5:4e:f2:5d:15:82:2b:bc:99:c3:37:a3:
         fe:75:7d:4e:72:20:b0:04:64:ce:cc:7c:60:19:3f:a8:71:58:
         49:7a:cb:1d:5b:9d:a5:8d:97:4e:a2:a9:2a:a6:ef:02:29:c1:
         bc:41:91:27:92:26:2f:a4:43:b2:91:5e:c5:05:b5:fd:5e:05:
         ee:51:59:fb:01:f7:ef:0a:78:0e:5d:7e:3d:ba:43:60:59:cc:
         0b:21:3a:48:33:e2:87:e1:e6:57:cf:fe:25:25:c8:50:7b:b8:
         c3:4b:11:af:87:88:c9:7e:44:fc:71:f3:ed:92:60:0b:c1:1e:
         74:6a:ee:81:e6:7f:18:a0:1d:85:4c:43:c2:42:14:3b:5b:71:
         76:72:01:e8:8c:7e:2f:bc:1e:77:f4:b2:55:5c:be:7f:f6:f8:
         9c:f5:27:58:af:2f:ca:ae:d4:87:7b:bb:cf:d1:21:1d:6f:0a:
         da:5a:bb:40:85:cf:96:54:a3:64:aa:d9:de:02:56:e4:9a:dd:
         5d:51:59:89:f4:d8:7f:e5:85:8b:56:00:48:1a:38:d2:ba:09:
         fe:4c:66:a6:80:d9:80:8d:2d:b6:3b:8a:49:ad:08:5c:d5:aa:
         51:82:13:bf:f3:44:a7:66:f6:5b:fd:4a:7d:70:7a:03:7a:8c:
         b8:71:4a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:42 2024 by rpki-client on console-fra.rpki-client.org