Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/VyhH_8kUtOj8NYc-tNSuRHFQWV8.roa
File:                     VyhH_8kUtOj8NYc-tNSuRHFQWV8.roa (raw, json)
Hash identifier:          QPMpgTs4512dEXrib63bqM1OAq35oQYr+ciaj7wJePk=
Subject key identifier:   57:28:47:FF:C9:14:B4:E8:FC:35:87:3E:B4:D4:AE:44:71:50:59:5F
Certificate issuer:       /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial:       2845BD18
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/VyhH_8kUtOj8NYc-tNSuRHFQWV8.roa
Signing time:             Sat 01 Jan 2022 16:09:59 +0000
ROA not before:           Sat 01 Jan 2022 16:09:59 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208605
IP address blocks:        93.171.227.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 675659032 (0x2845bd18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
        Validity
            Not Before: Jan  1 16:09:59 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=572847ffc914b4e8fc35873eb4d4ae447150595f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c3:46:15:2d:17:21:11:9b:d7:fc:15:6c:d8:
                    29:dc:9e:9d:35:b6:2f:43:bd:2e:55:35:6e:fc:ec:
                    80:2d:69:11:12:fa:b4:d8:8c:e5:1b:d3:f2:05:4c:
                    07:85:e6:e5:0b:d0:67:91:2b:4b:c5:f4:8a:d8:b5:
                    17:f2:7a:df:b2:15:48:8b:8c:00:7d:b2:f3:ad:4f:
                    be:97:5e:90:0b:43:85:77:78:d7:e7:bb:32:80:a8:
                    0a:ee:47:07:84:d6:52:73:25:62:ae:2b:cb:d2:ab:
                    3b:7d:f2:06:51:b6:db:df:02:31:b5:17:00:d8:e4:
                    2f:ad:57:24:ff:57:bf:08:78:ae:35:44:ae:95:32:
                    eb:a5:01:9e:f8:e9:ec:48:3a:cb:62:76:0b:8d:05:
                    3b:62:90:f2:1a:f3:a3:61:e2:76:53:3d:b9:13:4f:
                    e2:22:f2:11:b7:0e:35:12:bc:cf:07:82:89:0b:76:
                    e5:66:4b:2e:c2:d3:ff:f8:a9:fa:16:19:69:3a:bd:
                    dd:cf:11:d4:8c:77:48:78:82:b9:9c:0f:43:0f:f6:
                    53:50:c8:3c:c4:ec:bf:56:3b:0a:1f:58:4e:2f:a9:
                    99:a1:85:7f:33:78:24:b2:69:63:36:eb:fb:cd:82:
                    05:7d:dc:50:cc:c6:3f:c5:c8:c5:88:31:1a:18:97:
                    9b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:28:47:FF:C9:14:B4:E8:FC:35:87:3E:B4:D4:AE:44:71:50:59:5F
            X509v3 Authority Key Identifier:
                keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/VyhH_8kUtOj8NYc-tNSuRHFQWV8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.171.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:61:d7:6d:cc:ce:89:21:59:53:04:49:e4:79:ff:f1:82:94:
         45:0c:e8:8d:c9:d0:25:1a:5a:5c:43:90:57:20:72:98:a7:8c:
         c4:e3:f1:61:17:6c:1c:07:fc:66:be:70:59:0b:2c:1f:4c:25:
         cf:ce:87:c7:ff:7a:9f:6a:c4:2e:6b:6b:e6:15:78:6b:35:f0:
         5b:60:5f:f5:29:1c:01:de:69:a3:72:1c:10:8f:9f:33:90:60:
         8e:b5:6a:91:c3:a6:94:90:8a:1c:ad:4e:49:e1:d6:79:f1:36:
         79:0f:78:a7:d1:c4:c2:7e:4e:c8:2e:22:cc:6b:da:e5:d7:55:
         34:78:4b:56:9b:54:49:e6:45:98:73:ed:df:d8:80:ad:2e:a2:
         89:90:96:7e:7c:96:9b:66:37:0c:f8:76:f7:d9:d6:07:2c:40:
         f5:f3:ee:dd:7c:e3:7c:68:ed:32:40:c1:e9:c4:f7:10:48:cf:
         4d:d8:c0:a4:32:ef:11:95:65:1b:e3:cb:68:97:64:13:f7:0d:
         8c:9b:26:1e:de:d4:24:41:1f:c2:7a:48:3c:97:71:66:88:41:
         27:41:f2:87:61:1c:2e:bd:78:f7:06:8b:2b:bb:d2:42:3d:1f:
         88:a3:c0:1a:3d:f5:c4:4c:31:ba:49:6b:d7:96:81:df:49:a8:
         7e:46:a8:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:37 2024 by rpki-client on console-fra.rpki-client.org