Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/RgLAdAfkQ9zQoPFHD0ceTHSjSfQ.roa
File:                     RgLAdAfkQ9zQoPFHD0ceTHSjSfQ.roa (raw, json)
Hash identifier:          mg22Fnm3T4NkjJFjAEXb4Uu6R22hP4SiSVRDvvVLM10=
Subject key identifier:   46:02:C0:74:07:E4:43:DC:D0:A0:F1:47:0F:47:1E:4C:74:A3:49:F4
Certificate issuer:       /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial:       279EEA0B
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/RgLAdAfkQ9zQoPFHD0ceTHSjSfQ.roa
Signing time:             Sat 01 Jan 2022 16:08:26 +0000
ROA not before:           Sat 01 Jan 2022 16:08:26 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     47966
IP address blocks:        95.46.47.0/24 maxlen: 24
                          95.47.237.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 664726027 (0x279eea0b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
        Validity
            Not Before: Jan  1 16:08:26 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4602c07407e443dcd0a0f1470f471e4c74a349f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4e:ef:fb:69:f6:d5:d0:ff:c0:8d:87:90:c3:
                    61:d7:17:e6:d8:84:ab:36:4e:4e:9a:59:1a:b3:1e:
                    66:a9:3a:ae:5c:65:d7:8f:17:df:df:cc:54:df:1d:
                    ae:5a:33:04:a4:8f:11:85:5b:3f:40:28:f9:12:ab:
                    a6:34:05:52:a0:4f:79:69:5e:d7:81:93:ca:11:13:
                    b5:27:4b:e4:4a:8c:7f:ef:9f:9a:64:ae:9d:63:b7:
                    c0:cb:87:1c:9a:f1:8e:75:41:24:50:dc:78:c9:a2:
                    8a:2e:d8:df:6d:d8:0b:60:9a:75:79:b5:39:eb:90:
                    db:8c:76:13:1f:01:88:94:00:aa:76:c8:cc:88:86:
                    1d:89:c9:51:3b:36:8f:e9:03:6f:28:93:3e:dc:54:
                    44:bc:d2:98:e0:e0:37:09:7b:a0:7a:94:0f:87:5e:
                    1e:d4:60:f9:18:c3:6c:d5:e1:fa:4b:ee:91:31:d6:
                    89:ae:fb:85:a1:70:e4:cc:23:43:4c:fa:c2:07:78:
                    0e:5c:13:40:f4:f3:cf:67:73:33:4c:cb:fd:48:ae:
                    38:70:c8:f7:51:58:24:89:7e:83:cc:4b:ef:b7:11:
                    eb:b3:26:dd:b2:87:17:19:92:48:21:b2:79:c3:10:
                    40:39:8c:0a:90:70:a0:83:b0:94:b3:32:17:55:67:
                    6d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:02:C0:74:07:E4:43:DC:D0:A0:F1:47:0F:47:1E:4C:74:A3:49:F4
            X509v3 Authority Key Identifier:
                keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/RgLAdAfkQ9zQoPFHD0ceTHSjSfQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.46.47.0/24
                  95.47.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:35:f8:52:1d:16:d6:ba:2e:30:fa:03:11:40:03:66:b0:2d:
         d0:2c:0f:6e:b8:8b:97:af:ce:ac:5e:d4:bb:03:3a:6a:68:54:
         ad:51:66:6c:72:4d:4c:aa:f6:1a:ce:da:69:76:71:72:5f:cf:
         7e:f3:f3:6f:85:f2:e1:42:62:b6:86:91:1c:e4:80:14:a1:fe:
         ef:e2:ba:ca:53:53:17:42:56:be:4d:fa:71:47:a7:00:4a:60:
         f4:1d:99:a5:47:54:9b:49:9b:03:53:24:b4:40:e4:22:b0:bf:
         3b:a2:ca:67:c5:1c:cc:da:c4:fb:4a:8e:31:b2:63:10:e9:dd:
         72:e6:85:e0:ec:7b:ca:36:3c:41:ec:e8:b0:12:11:39:2d:4d:
         d4:6c:1d:a2:f2:74:8d:f8:84:a7:c0:63:23:e6:1f:e3:1f:ea:
         b2:46:0a:62:5e:2b:17:9e:bb:8a:97:75:9f:86:6b:de:2a:09:
         f9:c4:b2:4b:58:4c:89:fb:49:6c:d1:81:90:f1:74:ae:1d:1c:
         c7:d4:c0:ac:d7:f8:9e:cc:23:65:8d:b5:20:82:48:3e:7d:c6:
         e8:4a:df:87:b2:4f:83:47:14:11:4c:14:8a:46:e3:d0:ea:5c:
         5b:44:e6:7d:ac:2b:e4:7e:fe:a0:81:27:d6:4f:be:f8:a6:84:
         c5:a6:0b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:37 2024 by rpki-client on console-fra.rpki-client.org