Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/7tN-1A1uhHU7J2fpkmnIv06BBVg.roa
File:                     7tN-1A1uhHU7J2fpkmnIv06BBVg.roa (raw, json)
Hash identifier:          6UMs/Z61UmkyV8725/dwnpKdUC9nt1NZQ+m09ncva3w=
Subject key identifier:   EE:D3:7E:D4:0D:6E:84:75:3B:27:67:E9:92:69:C8:BF:4E:81:05:58
Certificate issuer:       /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial:       275A6103
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/7tN-1A1uhHU7J2fpkmnIv06BBVg.roa
Signing time:             Sat 01 Jan 2022 16:07:50 +0000
ROA not before:           Sat 01 Jan 2022 16:07:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     12365
IP address blocks:        92.38.96.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 660234499 (0x275a6103)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
        Validity
            Not Before: Jan  1 16:07:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=eed37ed40d6e84753b2767e99269c8bf4e810558
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:60:45:36:8d:16:a4:4c:e2:89:94:41:4d:47:
                    d3:f7:e4:63:53:38:f6:54:3a:ae:60:59:58:01:02:
                    cc:32:b8:52:64:48:b6:53:8b:05:76:0d:48:f4:b1:
                    f5:70:cb:25:d9:51:ba:9d:2f:32:1a:4a:4f:91:33:
                    06:f5:e4:b1:4c:bf:69:73:90:80:25:45:d7:72:38:
                    81:81:ae:d2:5e:44:86:66:a3:4e:c5:86:2f:66:19:
                    61:bd:bf:4d:3c:ea:22:cc:6a:da:72:9d:53:2a:d8:
                    a4:47:1b:0b:3e:b7:77:9f:e9:34:b7:0f:bb:c3:d5:
                    39:cc:63:31:95:32:b6:b2:65:ac:2b:13:67:97:6c:
                    37:4b:f6:06:59:6d:2c:52:55:86:e7:66:94:87:66:
                    96:a9:82:f2:21:c2:49:38:26:f6:1c:ab:c7:65:48:
                    26:0c:c3:e4:0b:fa:4e:d2:ce:50:12:bb:f2:97:6d:
                    57:27:4a:d7:0c:dc:05:98:52:ef:60:da:49:02:24:
                    57:b9:1b:71:b0:ce:c8:9f:3c:14:d5:19:ce:2e:2f:
                    5e:30:ad:67:f0:ac:8e:2d:d9:43:22:a3:a9:a6:36:
                    3f:b5:d6:f0:f3:07:0f:91:d6:75:e9:24:12:c5:7a:
                    c1:15:17:75:37:b0:c3:3e:61:af:63:56:bc:13:a4:
                    1b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:D3:7E:D4:0D:6E:84:75:3B:27:67:E9:92:69:C8:BF:4E:81:05:58
            X509v3 Authority Key Identifier:
                keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/7tN-1A1uhHU7J2fpkmnIv06BBVg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.38.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8d:aa:fa:7e:9d:f3:ac:b8:22:b5:4f:fd:09:a8:29:93:2c:be:
         0c:07:60:7c:fd:b7:62:6d:34:11:4f:3c:83:b5:00:83:73:80:
         6e:8c:3f:36:ec:ac:d5:84:7e:4a:04:4b:8d:b9:d5:57:b4:21:
         ba:33:ee:73:be:0e:16:75:a4:01:11:17:5e:83:d0:1e:2e:e1:
         2d:0d:77:11:ce:12:89:1f:39:3d:11:ab:d7:a5:23:b7:af:85:
         2a:dc:a8:64:af:c8:d6:93:96:bb:15:2f:64:94:9e:17:f8:d3:
         8f:af:59:05:57:8e:e4:ec:1f:c1:6e:b2:4f:27:b0:0a:43:e4:
         2f:ba:d5:ee:73:1b:b3:bc:00:f2:b9:19:17:41:3b:78:70:de:
         88:66:3d:6b:24:4e:10:2f:9d:21:de:4d:63:f4:4a:12:57:48:
         c3:92:57:fc:42:5b:10:1f:0f:3c:27:6f:63:b6:e8:0c:0c:e7:
         c3:1e:17:df:ff:3c:59:2f:15:4c:ee:a2:d9:9e:98:6a:dc:68:
         1f:4f:2d:c5:ad:b3:b4:82:4d:8b:b9:6c:77:f7:62:89:eb:e8:
         b3:14:8e:29:57:63:9c:26:79:d4:9a:e1:cb:1d:c3:f0:06:b3:
         c9:28:47:34:a8:96:83:7e:a6:aa:61:5f:10:74:9d:b3:9f:51:
         9c:e7:7e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:49 2024 by rpki-client on console-ams.rpki-client.org