Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/AuHNnc2RngrKXs_BaC22IwM0vVU.roa
File:                     AuHNnc2RngrKXs_BaC22IwM0vVU.roa (raw, json)
Hash identifier:          fGpUKWVVksZ+6mDIDu8Qw6B6A2e9hrwWIbd2jpbIMi0=
Subject key identifier:   02:E1:CD:9D:CD:91:9E:0A:CA:5E:CF:C1:68:2D:B6:23:03:34:BD:55
Certificate issuer:       /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial:       289AE4E7
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/AuHNnc2RngrKXs_BaC22IwM0vVU.roa
Signing time:             Wed 19 Jan 2022 10:57:29 +0000
ROA not before:           Wed 19 Jan 2022 10:57:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61988
IP address blocks:        93.170.135.0/24 maxlen: 24
                          31.148.175.0/24 maxlen: 24
                          95.46.126.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 681239783 (0x289ae4e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
        Validity
            Not Before: Jan 19 10:57:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=02e1cd9dcd919e0aca5ecfc1682db6230334bd55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:c2:a1:6f:5b:44:af:16:71:16:d1:a4:33:fb:
                    b4:05:0e:49:d0:58:6b:15:8b:f7:d4:5a:29:3c:9d:
                    d5:88:75:ef:9f:be:92:89:8e:37:72:5d:55:c1:da:
                    ac:d4:e4:67:bd:7e:08:fc:74:65:4a:77:f1:e8:de:
                    a0:46:db:ba:2a:13:5e:02:04:bd:ba:a3:ae:1b:f0:
                    53:18:3e:2f:a3:3d:ac:99:62:1e:9c:c0:73:f9:3e:
                    75:4d:a9:39:00:d7:e1:26:30:2f:58:f1:b1:c3:9b:
                    bb:a4:d9:fd:3d:b3:7c:fe:5a:d6:2e:58:06:c5:d1:
                    1c:f3:d1:d9:2c:e8:16:61:93:b2:4d:09:a0:51:f4:
                    cd:67:a3:77:ce:37:29:33:54:b6:de:df:2b:72:f0:
                    47:6a:49:d8:ca:d6:45:35:e8:d6:21:33:51:30:72:
                    f7:fe:fd:16:13:02:23:22:f2:d2:eb:03:ae:d8:7e:
                    14:f6:38:d5:d7:6a:b6:d2:ca:de:1d:bb:de:3e:23:
                    ca:3a:5d:27:e7:5b:3d:4b:66:28:c9:65:27:d4:a4:
                    5d:70:87:8b:ed:49:f9:0a:d7:27:ab:75:1d:03:e6:
                    34:7d:a4:01:ff:93:57:ea:d7:c0:3d:c2:c8:4f:9d:
                    9b:35:31:7e:94:c9:7e:5e:44:ea:c5:70:a2:8f:fd:
                    8e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:E1:CD:9D:CD:91:9E:0A:CA:5E:CF:C1:68:2D:B6:23:03:34:BD:55
            X509v3 Authority Key Identifier:
                keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/AuHNnc2RngrKXs_BaC22IwM0vVU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.148.175.0/24
                  93.170.135.0/24
                  95.46.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:7f:5d:f6:7d:60:64:6c:7d:14:9c:9f:b4:50:cc:ec:9b:cd:
         d0:2e:16:8c:e3:1c:05:b6:0b:0f:5e:55:a1:9d:ef:20:5a:e2:
         d4:5e:88:5c:44:d3:2b:cf:12:17:e9:86:66:1f:be:57:08:95:
         57:89:25:1b:39:ea:49:c5:09:e4:b4:13:c4:d0:ce:49:46:1a:
         8c:04:c6:1c:8e:94:58:4c:2f:87:13:2b:75:30:8c:76:13:aa:
         9f:2d:e2:f5:ed:c3:44:09:c5:c0:22:51:d8:1a:dc:4c:4b:6c:
         2d:b3:2b:04:c8:d3:c2:7a:0e:72:20:d4:dc:81:e3:22:f8:3f:
         06:f1:d5:d6:49:4f:98:89:2d:3d:d2:19:c2:c6:55:20:92:c4:
         f2:25:fc:c9:b4:f4:f1:1d:11:e7:1d:f2:dd:9f:1f:2e:dc:f0:
         01:d9:d7:55:2c:56:3d:be:33:bc:d3:5e:fd:9f:28:24:3e:06:
         7d:f6:94:b7:1f:69:3c:e1:e8:3d:da:a7:79:6c:5e:fe:d3:ea:
         80:46:54:83:44:37:40:ce:76:13:2e:5f:34:2c:63:b5:5e:b2:
         2a:f6:e7:d6:6d:29:51:76:99:23:42:ef:a9:c6:6a:c3:2e:ab:
         a5:28:77:c0:aa:7c:9d:b5:e0:1c:c9:b3:ca:13:22:7e:70:27:
         b0:82:ed:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:36 2024 by rpki-client on console-fra.rpki-client.org