Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/X241zDBwWAkoKiVS2FmVuHIftoY.roa
File:                     X241zDBwWAkoKiVS2FmVuHIftoY.roa (raw, json)
Hash identifier:          kSjhy8A6IL8CyQbphxrlH2Wto9XhC0Bel32dErIO8EY=
Subject key identifier:   5F:6E:35:CC:30:70:58:09:28:2A:25:52:D8:59:95:B8:72:1F:B6:86
Certificate issuer:       /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial:       01828DD29563ACBE13FD6D44187734771BBB
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/X241zDBwWAkoKiVS2FmVuHIftoY.roa
Signing time:             Thu 11 Aug 2022 16:52:44 +0000
ROA not before:           Thu 11 Aug 2022 16:52:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61988
IP address blocks:        93.170.135.0/24 maxlen: 24
                          95.46.126.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:8d:d2:95:63:ac:be:13:fd:6d:44:18:77:34:77:1b:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
        Validity
            Not Before: Aug 11 16:52:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5f6e35cc30705809282a2552d85995b8721fb686
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:52:42:8b:ea:34:68:c7:8c:8b:09:dc:a2:ea:
                    88:95:3b:26:2f:64:94:fc:c7:bd:a1:c1:f0:3f:74:
                    42:68:2c:60:d6:90:39:07:99:fe:96:16:e0:1f:5a:
                    5c:7a:3c:6c:b1:a9:7a:49:05:99:c8:51:e8:69:ba:
                    52:ed:6b:4e:05:38:70:9e:7e:c8:e2:64:fb:4f:cf:
                    57:81:b9:49:30:dc:2e:e6:d7:90:ad:61:c1:01:22:
                    2e:b2:34:9c:9c:2e:8b:e0:a6:81:b8:c2:be:8a:ae:
                    8d:0b:ac:e3:2c:aa:27:aa:4f:e6:f8:2d:a2:4e:c7:
                    c3:31:22:91:8c:cb:3e:e1:43:21:42:37:b5:55:1b:
                    93:47:9f:ec:c1:22:d0:b6:c3:85:15:1e:35:4f:cc:
                    53:cf:4f:d0:a2:2e:81:c0:b5:35:f0:e4:26:e3:37:
                    2f:bd:4c:59:e6:22:87:03:89:18:68:d2:74:af:c0:
                    60:f5:27:f6:42:e9:31:29:34:70:d0:13:92:5b:77:
                    b1:71:70:52:26:8c:dc:2d:3a:0e:d4:e5:88:be:29:
                    e1:88:7d:9c:f6:4b:62:88:6d:e8:02:c8:f1:e9:c4:
                    b4:97:31:10:8c:50:00:db:db:ab:ba:e2:1d:c8:be:
                    7d:68:27:2d:68:5b:b8:7c:56:83:a8:14:b2:10:34:
                    36:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:6E:35:CC:30:70:58:09:28:2A:25:52:D8:59:95:B8:72:1F:B6:86
            X509v3 Authority Key Identifier:
                keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/X241zDBwWAkoKiVS2FmVuHIftoY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.170.135.0/24
                  95.46.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:13:6b:fd:d0:90:00:e5:84:ae:af:41:9a:85:30:00:e1:e8:
         95:63:34:b8:20:d6:63:6a:ee:22:0f:6a:2f:ce:fc:e7:64:d3:
         2e:99:4e:ae:9f:30:56:a9:39:55:3c:69:26:dc:ff:5e:ba:aa:
         bf:c9:a2:5c:7f:a5:3e:37:f2:56:b4:84:8f:cb:d0:83:a7:51:
         e6:48:7f:7e:1a:bc:10:5a:09:b6:80:22:b0:31:ff:d0:32:88:
         79:4c:a5:09:92:38:67:be:14:e2:22:39:00:54:b5:67:1a:c7:
         b8:01:29:a6:c7:7c:86:ff:b6:61:40:b8:ba:ae:77:90:dd:a7:
         30:3a:d5:d1:2c:1d:3a:09:4f:87:ad:bb:e4:44:46:70:54:e7:
         9e:e9:a4:74:2c:da:88:17:1f:1a:2e:e3:5d:da:8a:b5:93:47:
         0b:d6:4b:90:d9:eb:a4:ac:ef:af:2d:3c:27:76:5f:9c:44:bb:
         38:4c:e7:3b:2b:85:a1:15:2d:75:92:07:26:ed:05:bf:a4:82:
         ee:7b:ef:8c:c5:1d:bd:5a:a5:b9:83:95:03:de:4e:ac:30:8e:
         cc:bc:de:ff:ee:cb:65:2d:0c:da:eb:c4:82:8c:85:61:86:ab:
         a7:09:33:91:f9:f6:25:5a:ee:47:82:69:15:43:9b:a7:0c:4c:
         4c:ca:ba:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:50 2024 by rpki-client on console-ams.rpki-client.org