Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/E1uYwt3fcBJ2rtp6XMoK2vNAh28.roa
File:                     E1uYwt3fcBJ2rtp6XMoK2vNAh28.roa (raw, json)
Hash identifier:          68Af0zzPUZmz1JnRTp5GY3XNA2BlrwsC7deLJzaeZ1w=
Subject key identifier:   13:5B:98:C2:DD:DF:70:12:76:AE:DA:7A:5C:CA:0A:DA:F3:40:87:6F
Certificate issuer:       /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial:       282B1EED
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/E1uYwt3fcBJ2rtp6XMoK2vNAh28.roa
Signing time:             Sat 01 Jan 2022 16:09:44 +0000
ROA not before:           Sat 01 Jan 2022 16:09:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     202969
IP address blocks:        95.47.158.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 673914605 (0x282b1eed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
        Validity
            Not Before: Jan  1 16:09:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=135b98c2dddf701276aeda7a5cca0adaf340876f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:dc:a0:9f:e5:0f:6e:f6:c5:69:79:6a:75:63:
                    ec:1b:f2:4d:b5:3e:cd:92:80:0b:00:cc:fd:d1:d0:
                    a1:93:f9:bf:e3:95:4c:dc:2f:c7:f0:06:0d:c0:95:
                    c6:6d:71:3d:9a:b9:5e:a8:5b:08:33:47:c0:01:02:
                    23:b7:ce:7b:08:e9:9b:22:a2:a4:5f:e4:b8:2f:a4:
                    b1:e4:8d:ce:7f:33:1f:ae:47:58:dc:2a:d8:d1:b7:
                    bb:70:3a:43:2d:c7:4f:c8:5d:85:60:86:5c:c4:2c:
                    2f:cb:41:0a:95:ba:ce:e7:b6:b0:3c:3c:f4:ff:37:
                    fe:d2:3e:4b:d9:c1:90:5c:86:20:6c:c4:7f:da:ad:
                    7f:ec:e3:80:5f:f6:26:96:1b:92:b0:c8:c3:1b:99:
                    f3:f7:d6:38:6c:83:35:88:14:4b:99:93:cd:e6:04:
                    ce:be:55:26:1a:fa:91:9c:06:d4:21:a6:18:3a:16:
                    ad:6b:6a:64:f0:03:b9:8e:f2:b4:cf:88:50:be:b8:
                    f7:bf:29:8a:2e:50:fb:23:e1:a7:fa:12:22:da:8d:
                    54:5d:de:00:12:11:5f:28:7c:3d:e2:9e:f0:a6:b3:
                    c2:7a:55:c1:a5:90:17:c2:95:ba:28:b6:25:77:ce:
                    75:dc:0f:b2:32:09:c5:12:66:4c:ab:bd:0c:85:6e:
                    41:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:5B:98:C2:DD:DF:70:12:76:AE:DA:7A:5C:CA:0A:DA:F3:40:87:6F
            X509v3 Authority Key Identifier:
                keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/E1uYwt3fcBJ2rtp6XMoK2vNAh28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.47.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:34:3d:1a:a5:d4:ed:7b:67:a1:cc:d5:10:5c:e0:6d:70:a5:
         ef:36:0c:a5:5f:90:5a:88:82:00:e3:8a:b1:f1:51:37:c4:9b:
         ae:74:ba:35:e1:b3:c1:66:c9:31:50:ea:8c:da:33:6e:9d:30:
         fd:a4:8e:27:72:5f:62:10:91:9a:2f:4a:86:70:25:b8:e4:cc:
         32:9f:67:65:46:06:0f:64:8c:9c:5a:c7:75:1d:c5:99:98:52:
         3a:5a:6f:24:0d:d4:75:95:09:92:fb:04:df:78:08:a5:06:a5:
         63:7c:2e:50:38:cd:5e:17:11:29:05:15:a1:56:01:1e:5a:ec:
         eb:2a:53:bf:a2:c9:8b:04:4e:b0:12:0c:c2:07:c3:75:9d:ef:
         1d:f7:0b:27:64:88:5b:23:28:53:4a:4b:dc:f9:06:dc:eb:56:
         8a:f0:94:29:0d:da:9e:d5:24:c5:02:75:67:1d:f8:47:b5:f2:
         06:bc:5c:fa:42:f3:83:2c:3e:88:75:a3:58:b0:b5:cc:ab:34:
         59:31:1b:f6:4e:8f:cf:5b:49:23:26:6b:f2:4d:16:54:7b:3b:
         28:fc:8c:b4:7c:0a:c5:5f:ad:b5:45:7a:6d:a1:90:bc:65:8f:
         7f:b0:97:32:0e:03:1e:a4:24:59:26:96:aa:2f:3d:1c:0e:e3:
         1b:30:28:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:49 2024 by rpki-client on console-ams.rpki-client.org