Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/vMViEhBV7xQC1kqp_7XL9E_ME00.roa
File:                     vMViEhBV7xQC1kqp_7XL9E_ME00.roa (raw, json)
Hash identifier:          f6niFdT02dxxwuIsg3oFckc35Dd6EIfsAdnEOOMOU0Q=
Subject key identifier:   BC:C5:62:12:10:55:EF:14:02:D6:4A:A9:FF:B5:CB:F4:4F:CC:13:4D
Certificate issuer:       /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial:       27FAC0F1
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/vMViEhBV7xQC1kqp_7XL9E_ME00.roa
Signing time:             Sat 01 Jan 2022 16:09:17 +0000
ROA not before:           Sat 01 Jan 2022 16:09:17 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61196
IP address blocks:        95.46.44.0/23 maxlen: 24
                          93.171.215.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 670744817 (0x27fac0f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
        Validity
            Not Before: Jan  1 16:09:17 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=bcc562121055ef1402d64aa9ffb5cbf44fcc134d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e4:4e:1f:ee:8d:f3:c0:c3:67:c6:b5:78:de:
                    8c:f0:db:fd:98:1b:23:94:2c:16:72:34:23:d2:18:
                    72:7f:a8:e1:34:ec:61:12:76:31:65:3f:d5:b4:f0:
                    6c:8b:e3:76:4b:c7:47:c5:7e:29:1e:32:21:06:2f:
                    fb:7a:87:d2:72:1f:9e:84:f2:5a:f8:ca:ce:2b:f0:
                    4b:47:7a:bc:b5:be:fd:d6:87:11:1b:be:99:d9:14:
                    04:d1:43:57:09:22:bb:d6:8b:19:f4:ce:f6:94:57:
                    33:45:19:61:3a:48:ec:f3:25:43:6b:ac:cc:f7:93:
                    bc:db:83:db:b7:e4:f0:e6:3c:8e:19:08:dd:a5:3d:
                    97:f5:00:41:2b:89:ca:36:28:80:33:12:8a:e5:e1:
                    71:3b:43:c9:d5:37:4f:d3:2a:a6:93:e0:24:f5:f6:
                    dc:d5:d8:9d:ec:c6:f3:b7:a2:73:57:fa:b7:eb:8e:
                    43:ae:00:c2:96:98:b0:93:d9:dd:5e:95:b5:f4:39:
                    e4:c2:96:7e:c2:c0:76:36:50:b1:d7:85:2c:db:6c:
                    ba:6d:ee:42:e0:75:8a:e1:ed:a2:a8:85:74:52:d8:
                    2d:fb:52:00:d6:7f:a8:45:da:4b:54:39:32:ec:a6:
                    01:5d:c4:f2:2f:a1:e8:42:f5:78:36:c9:1f:9c:3a:
                    e6:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:C5:62:12:10:55:EF:14:02:D6:4A:A9:FF:B5:CB:F4:4F:CC:13:4D
            X509v3 Authority Key Identifier:
                keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/vMViEhBV7xQC1kqp_7XL9E_ME00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.171.215.0/24
                  95.46.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:2c:87:59:84:3e:c6:1a:69:e3:02:97:77:59:83:aa:8e:c0:
         0a:34:01:9e:ee:f7:9e:f7:f0:d8:ac:65:92:e5:73:f2:ab:72:
         15:01:90:cd:56:d9:9e:41:bf:f3:f2:50:fb:23:21:43:93:b8:
         bf:d0:c0:31:80:6c:f6:c8:15:75:55:57:cd:e1:48:c8:f1:fa:
         55:cc:5d:92:c1:95:74:02:8b:9e:2d:fb:4c:6e:03:01:37:13:
         c1:29:06:2e:72:ce:a5:1a:8a:02:cf:93:5b:25:5f:aa:7b:50:
         b5:b9:76:4b:f4:fe:69:c8:1e:ac:53:80:35:de:81:fc:77:d0:
         25:d2:a0:09:a3:32:a6:6d:03:23:b3:d9:62:b2:11:a9:d4:56:
         d7:21:51:51:55:88:ff:bb:43:c7:3b:30:c2:46:68:83:1a:4c:
         8b:dd:55:27:54:1b:5e:1e:99:e3:85:f4:e1:57:5f:38:f0:86:
         10:b2:3b:a3:a1:15:ad:5b:65:1a:32:14:b3:bc:4f:bf:79:5b:
         48:44:ea:2e:7b:41:12:04:17:a7:7c:87:c1:30:0c:df:19:6b:
         da:fb:a8:20:58:56:c1:a6:2b:a4:92:cd:dd:c6:45:66:26:7f:
         d7:45:a6:c6:9a:a5:1b:d9:ce:ac:ae:2c:e3:1a:d3:49:0a:dd:
         66:13:5b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:25 2023 by rpki-client on console-ams.rpki-client.org