Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/4u6E2zhNHA5m_9qaoOoQWeUN1vc.roa
File:                     4u6E2zhNHA5m_9qaoOoQWeUN1vc.roa (raw, json)
Hash identifier:          39lvbcjZF65PU51zK3dBBVO05yk+Pm/6cQo/ywSWAM4=
Subject key identifier:   E2:EE:84:DB:38:4D:1C:0E:66:FF:DA:9A:A0:EA:10:59:E5:0D:D6:F7
Certificate issuer:       /CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9
Certificate serial:       06C8DCDE
Authority key identifier: 4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/4u6E2zhNHA5m_9qaoOoQWeUN1vc.roa
Signing time:             Fri 03 Jun 2022 13:56:20 +0000
ROA not before:           Fri 03 Jun 2022 13:56:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207326
IP address blocks:        194.34.105.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113827038 (0x6c8dcde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9
        Validity
            Not Before: Jun  3 13:56:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e2ee84db384d1c0e66ffda9aa0ea1059e50dd6f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:10:2b:8e:fa:7b:61:fb:6b:f8:d1:9c:c9:25:
                    50:7f:2e:04:ca:ab:fa:5d:40:25:75:51:13:1a:10:
                    76:ee:cc:a2:72:ff:55:f3:da:6f:93:f6:0e:bf:16:
                    2a:12:de:7b:dc:f8:01:38:f7:f4:ee:6c:53:af:cf:
                    90:d3:41:43:59:07:66:ea:ff:72:ae:fe:f5:58:95:
                    c2:a6:f1:9d:ee:d9:c0:e1:88:65:49:bc:4e:91:56:
                    9e:d5:36:96:0c:65:c7:55:1c:d3:40:d8:5c:35:ac:
                    2b:c5:04:bd:32:94:30:65:8a:7a:da:50:b0:9b:66:
                    a4:e8:dc:47:d5:5b:57:f6:7a:ff:43:9b:23:77:37:
                    2f:98:17:c0:c8:7d:3d:9c:4e:4c:00:84:46:14:4d:
                    b5:0b:b8:7f:0a:d7:fe:91:1f:6a:05:5e:3a:75:ff:
                    2f:3e:46:04:6b:d7:f5:75:19:8b:13:8c:27:d4:4f:
                    be:7b:93:66:00:f6:59:30:8c:23:99:b2:89:94:12:
                    23:05:44:98:e1:0e:b3:f6:3c:08:49:a1:8e:fb:b9:
                    7f:49:14:7e:25:e1:60:25:4e:6d:0c:bb:77:da:44:
                    f2:82:8f:2a:ed:dd:63:ce:72:da:f2:a9:5c:03:bf:
                    fb:f0:44:3a:4f:71:ac:15:62:b9:27:eb:f2:9a:76:
                    8b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:EE:84:DB:38:4D:1C:0E:66:FF:DA:9A:A0:EA:10:59:E5:0D:D6:F7
            X509v3 Authority Key Identifier:
                keyid:4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/4u6E2zhNHA5m_9qaoOoQWeUN1vc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.34.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:2b:19:2f:5f:cf:fb:d8:57:8a:02:dd:52:5b:5f:d6:65:17:
         49:91:d0:14:3d:cc:81:46:4f:92:c7:11:0d:2a:1f:4e:cd:0c:
         0f:5d:05:dd:7f:40:2f:20:e3:9a:6d:61:4e:89:1b:0b:80:55:
         37:b2:e2:be:b8:44:d3:eb:53:3f:75:6c:a4:d6:94:60:48:ef:
         08:4c:7f:28:e2:13:e3:2b:19:bd:9a:0b:ae:20:d4:3a:1a:55:
         32:ad:a3:3c:61:b3:b7:88:08:a3:59:ec:a5:82:ac:36:88:99:
         83:eb:6a:6d:7e:77:9a:88:e4:b8:3d:53:ed:8b:70:73:8b:bc:
         ba:24:40:f2:f6:46:ec:b9:cb:38:c9:05:2e:35:58:c0:b7:3a:
         f2:2d:33:3d:de:cf:0d:6d:6a:c1:c6:d7:77:65:6b:21:7d:5f:
         07:d0:72:36:1c:a1:f2:94:1d:d3:37:cf:b1:f8:d5:1d:ca:6b:
         d1:55:8e:9f:b3:e8:8a:8e:ea:79:cb:c4:44:03:a9:7b:32:1b:
         17:fa:95:56:6b:21:b6:15:f8:a6:e6:ad:5f:a2:eb:8b:72:c4:
         db:b1:2f:fd:b1:49:3d:be:ca:2b:18:b5:89:71:c2:6f:95:5e:
         44:d3:ff:fc:3e:99:20:c5:4b:86:27:5e:21:82:63:cb:17:08:
         07:9f:ca:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:12:14 2024 by rpki-client on console-ams.rpki-client.org