Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/cf8b14-b7f7-405a-b66e-387a8fbb1042/1/MOLzqwrbiz8jF6AjosxbmNUaoLw.roa
File:                     MOLzqwrbiz8jF6AjosxbmNUaoLw.roa (raw, json)
Hash identifier:          Q7ey5nO5JNU5P/vSYx6Mlsbad774HbeZxH/Dl7HqhwA=
Subject key identifier:   30:E2:F3:AB:0A:DB:8B:3F:23:17:A0:23:A2:CC:5B:98:D5:1A:A0:BC
Certificate issuer:       /CN=0be779eb90be7d5be0c1dc48a6cd23dbd43b97c8
Certificate serial:       34CB0AE1
Authority key identifier: 0B:E7:79:EB:90:BE:7D:5B:E0:C1:DC:48:A6:CD:23:DB:D4:3B:97:C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C-d565C-fVvgwdxIps0j29Q7l8g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/cf8b14-b7f7-405a-b66e-387a8fbb1042/1/MOLzqwrbiz8jF6AjosxbmNUaoLw.roa
Signing time:             Sat 01 Jan 2022 12:57:15 +0000
ROA not before:           Sat 01 Jan 2022 12:57:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     44295
IP address blocks:        92.42.176.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 885721825 (0x34cb0ae1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0be779eb90be7d5be0c1dc48a6cd23dbd43b97c8
        Validity
            Not Before: Jan  1 12:57:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=30e2f3ab0adb8b3f2317a023a2cc5b98d51aa0bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:34:46:7c:9e:04:b5:80:1d:1b:bc:c6:59:d3:
                    a2:f7:b7:50:ae:04:01:a1:3b:a2:80:f9:b2:19:d1:
                    85:15:f7:fd:fb:a4:f2:e2:c1:f0:8e:5e:23:c2:a9:
                    95:5c:cc:5d:f0:08:66:95:20:32:2b:09:ac:fd:64:
                    57:5f:05:d2:96:dd:22:cb:7b:4f:63:71:ff:ec:0a:
                    9e:b4:41:d7:82:07:03:7c:b1:41:ef:dd:b1:8f:f9:
                    f5:32:82:2d:ea:25:4a:f3:6b:92:81:6c:34:a9:05:
                    6c:c7:6c:56:11:48:c5:45:e1:0b:69:19:e1:af:f8:
                    81:de:74:aa:fa:c9:30:cb:bd:8f:39:a3:eb:df:ea:
                    08:7b:1e:24:ac:cf:70:4b:29:09:1b:1f:e3:21:24:
                    f6:6d:23:b3:73:82:7f:da:33:ff:05:07:66:ff:39:
                    70:82:ed:6a:9f:4d:c2:5c:e2:58:5f:79:c2:59:e9:
                    9b:00:00:d3:07:53:17:53:7d:f7:b0:db:84:6a:49:
                    a0:bb:25:b7:57:d5:2b:e9:e3:6e:0b:d4:c6:16:7a:
                    5f:69:6a:e6:27:c3:ba:72:aa:54:36:9b:6e:b7:e5:
                    64:3b:12:dc:e0:f2:5e:e1:4e:c0:e9:5f:63:4c:e7:
                    89:94:2b:e7:34:e7:f7:70:37:21:1e:bb:62:75:8c:
                    cb:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:E2:F3:AB:0A:DB:8B:3F:23:17:A0:23:A2:CC:5B:98:D5:1A:A0:BC
            X509v3 Authority Key Identifier:
                keyid:0B:E7:79:EB:90:BE:7D:5B:E0:C1:DC:48:A6:CD:23:DB:D4:3B:97:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-d565C-fVvgwdxIps0j29Q7l8g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/cf8b14-b7f7-405a-b66e-387a8fbb1042/1/MOLzqwrbiz8jF6AjosxbmNUaoLw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/cf8b14-b7f7-405a-b66e-387a8fbb1042/1/C-d565C-fVvgwdxIps0j29Q7l8g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.42.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         d4:d9:2c:61:38:7b:78:a6:2e:24:19:79:24:f2:43:9a:4a:18:
         ec:e7:a6:a3:a5:9f:12:84:77:3a:7a:0d:be:0f:41:b3:b3:95:
         b5:01:15:bc:2f:37:46:63:f6:b9:f6:8c:4c:2c:6b:b8:bc:c9:
         7a:e6:37:8c:c3:70:4c:c2:db:07:06:6b:0f:b2:17:a6:a3:3f:
         f0:6a:2b:b5:2b:c7:18:f8:80:30:bd:fd:6a:96:a4:b1:2b:92:
         13:d7:4d:10:f0:c1:69:46:dc:cb:1b:c3:2c:ff:b4:e2:d0:53:
         a7:68:47:3a:87:07:53:6a:22:b2:f5:83:cb:ef:28:bf:92:e2:
         40:7f:7a:15:39:3d:b2:2d:6e:ea:3c:d5:dc:5f:68:86:3d:c5:
         ba:f5:2d:e5:91:cf:44:73:ff:fb:6e:24:a6:cc:d1:a4:e3:21:
         73:c4:d9:96:07:11:33:0a:69:28:bb:0b:71:c1:86:20:37:92:
         6c:e1:14:c1:ab:35:57:62:08:97:42:9e:2a:db:d2:d4:46:a4:
         a1:f6:85:2a:d4:4d:ad:12:ee:da:1f:65:14:91:14:e4:d3:20:
         33:c7:2d:99:5b:98:05:e7:e4:12:aa:b6:0b:bd:a8:00:ab:99:
         d5:19:6b:3b:2d:57:f3:d4:ae:11:79:3f:e5:a7:ef:47:8e:0e:
         c9:cc:83:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:12:07 2024 by rpki-client on console-ams.rpki-client.org