Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/GGD_rXpyMBH4BFSE__-gnVyi7uM.roa
File:                     GGD_rXpyMBH4BFSE__-gnVyi7uM.roa (raw, json)
Hash identifier:          SaBP8Ofn0DADz8ibeTBhHeKQnMq8C1tT+g9lMYbRkxQ=
Subject key identifier:   18:60:FF:AD:7A:72:30:11:F8:04:54:84:FF:FF:A0:9D:5C:A2:EE:E3
Certificate issuer:       /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial:       2799574F
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/GGD_rXpyMBH4BFSE__-gnVyi7uM.roa
Signing time:             Sat 01 Jan 2022 16:08:23 +0000
ROA not before:           Sat 01 Jan 2022 16:08:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     45001
IP address blocks:        95.46.154.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 664360783 (0x2799574f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
        Validity
            Not Before: Jan  1 16:08:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1860ffad7a723011f8045484ffffa09d5ca2eee3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4c:cb:cd:1a:9b:a3:47:71:05:58:aa:d1:53:
                    5f:f5:d8:a6:e0:6f:23:3f:fe:1c:f1:7b:ae:15:da:
                    34:fe:50:0a:ac:55:41:fd:8d:dd:7c:7d:96:05:75:
                    d5:0f:f7:31:29:4b:db:87:5c:a0:bb:42:0c:e7:c8:
                    ee:6c:8a:23:2b:67:62:f1:ea:0e:4c:9a:95:bb:68:
                    c3:d5:8e:f0:2a:2a:77:b5:66:b5:ed:57:34:28:44:
                    c3:e9:ab:a8:20:85:0f:a9:35:3d:b4:ab:5a:56:bc:
                    38:28:07:f3:e1:a4:dc:e3:1a:a2:94:c5:b7:05:2e:
                    08:3a:d6:ef:6d:ab:08:3e:02:1a:4a:08:75:55:a9:
                    40:9f:45:ad:04:44:ff:9b:26:2a:87:1e:dc:29:d3:
                    67:3d:d2:3f:7a:1e:87:81:c4:00:3a:8b:75:4e:4a:
                    9f:99:0b:e2:b9:01:bd:09:20:57:43:b1:b9:7c:5d:
                    05:19:e7:d3:85:50:f7:a9:da:9f:56:71:e0:4e:23:
                    41:2c:32:35:c3:d0:a5:9e:a5:1f:67:de:ff:ee:57:
                    45:84:71:af:83:43:ca:ba:c7:85:65:4a:60:dc:54:
                    8a:7a:17:9f:83:c5:d9:28:14:ee:7d:99:70:49:7d:
                    6a:31:e8:bd:47:78:64:e9:6e:7b:7b:29:08:58:f2:
                    09:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:60:FF:AD:7A:72:30:11:F8:04:54:84:FF:FF:A0:9D:5C:A2:EE:E3
            X509v3 Authority Key Identifier:
                keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/GGD_rXpyMBH4BFSE__-gnVyi7uM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.46.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:a5:eb:39:fb:f9:43:75:e9:94:08:b4:16:9a:de:55:1b:fc:
         54:e5:a6:31:5b:77:fb:ee:cf:aa:8c:5e:fa:29:1a:5e:c4:d2:
         8d:46:ad:b7:bb:fd:7d:05:9f:9a:fe:fc:82:01:ce:8f:13:0e:
         57:e4:2e:d9:62:03:49:74:37:ea:92:73:15:0f:f0:5e:ed:a8:
         10:b2:41:93:57:ec:9b:97:ff:92:38:fe:95:32:9b:b1:28:20:
         30:1e:16:db:18:ea:d4:ae:db:15:46:ba:ac:fb:2a:0d:e3:af:
         b8:b8:b3:a6:e7:86:ce:6e:ca:cf:c3:f7:13:e0:31:31:59:7f:
         db:f6:01:b0:77:69:33:b3:d3:cd:d2:b7:18:25:d0:d6:61:ce:
         15:9c:62:ed:92:f8:7d:8a:e7:dd:28:49:d3:52:ab:61:32:95:
         11:5c:84:b4:77:49:77:a0:f1:10:87:2c:db:e1:51:76:29:a3:
         6f:c8:ea:03:52:5b:c5:40:ce:ba:38:c5:4e:56:9b:81:bc:b5:
         8a:c7:6e:cb:66:08:21:db:e2:ae:cd:00:80:8d:c1:fe:4e:d7:
         f1:7a:e7:b4:f0:72:e8:9f:52:d2:72:ac:e0:d2:c4:9c:1b:cc:
         7f:ed:bc:e1:aa:83:33:4b:c5:10:25:76:d5:4a:64:4a:8d:f2:
         11:05:32:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:36 2024 by rpki-client on console-fra.rpki-client.org