Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/c90860-8138-433c-b24f-92c780ca3260/1/8vsuun08WiDDuNQDNCD_zyZNf8o.roa
File:                     8vsuun08WiDDuNQDNCD_zyZNf8o.roa (raw, json)
Hash identifier:          o/OhB7fHCRVQ5dON/vOy6KBEqYOB5cl2zLbn/JCmRKc=
Subject key identifier:   F2:FB:2E:BA:7D:3C:5A:20:C3:B8:D4:03:34:20:FF:CF:26:4D:7F:CA
Certificate issuer:       /CN=269f4f7143b4067805cba9a40f639732ee7d42e5
Certificate serial:       37140949
Authority key identifier: 26:9F:4F:71:43:B4:06:78:05:CB:A9:A4:0F:63:97:32:EE:7D:42:E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jp9PcUO0BngFy6mkD2OXMu59QuU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/c90860-8138-433c-b24f-92c780ca3260/1/8vsuun08WiDDuNQDNCD_zyZNf8o.roa
Signing time:             Sat 01 Jan 2022 13:59:03 +0000
ROA not before:           Sat 01 Jan 2022 13:59:03 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     50378
IP address blocks:        188.64.146.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 924059977 (0x37140949)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=269f4f7143b4067805cba9a40f639732ee7d42e5
        Validity
            Not Before: Jan  1 13:59:03 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f2fb2eba7d3c5a20c3b8d4033420ffcf264d7fca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ed:40:97:55:5b:72:d8:73:fc:5f:ca:f9:ee:
                    b6:44:22:66:e1:bf:81:99:e8:40:f7:39:23:41:40:
                    42:a4:13:9c:b1:90:de:a7:a9:91:c8:88:4f:47:9c:
                    2c:8e:83:50:11:89:db:e7:77:de:b2:f8:31:26:ba:
                    58:68:d6:6b:39:b8:76:74:20:46:e9:65:a2:c7:91:
                    50:c5:ac:7f:30:c2:c1:f8:e1:02:dd:70:2f:cb:a1:
                    68:a8:ef:55:2f:af:cf:e1:4f:21:ef:79:c3:c3:1c:
                    35:41:1d:9e:d7:13:64:e7:4e:2d:13:ee:dd:85:f4:
                    14:ff:0c:99:77:dc:b8:1e:2c:c5:e1:39:72:ef:65:
                    33:40:dc:35:90:f2:43:a3:5e:f0:dd:7d:6a:43:14:
                    d9:ba:71:a3:82:01:15:10:62:0c:da:c7:c5:db:e5:
                    06:ea:cd:d6:66:3c:15:e4:eb:7f:d3:3f:e7:a8:c2:
                    dd:6a:e3:98:54:43:78:42:e9:f4:76:ed:dc:22:4f:
                    52:1d:d3:92:f6:d5:0f:8d:6d:74:61:b4:cd:b2:2e:
                    e1:d8:8c:e6:6a:d0:00:42:6e:63:c9:5d:af:8a:c7:
                    2e:01:20:77:b3:a4:80:50:e3:14:65:bb:26:be:d8:
                    23:df:f8:78:f0:3b:07:7b:b6:fa:c9:8e:1f:cd:26:
                    89:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:FB:2E:BA:7D:3C:5A:20:C3:B8:D4:03:34:20:FF:CF:26:4D:7F:CA
            X509v3 Authority Key Identifier:
                keyid:26:9F:4F:71:43:B4:06:78:05:CB:A9:A4:0F:63:97:32:EE:7D:42:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jp9PcUO0BngFy6mkD2OXMu59QuU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c90860-8138-433c-b24f-92c780ca3260/1/8vsuun08WiDDuNQDNCD_zyZNf8o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c90860-8138-433c-b24f-92c780ca3260/1/Jp9PcUO0BngFy6mkD2OXMu59QuU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.64.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:5d:09:73:32:e4:7d:d8:56:3a:c5:3a:15:57:b1:5a:5a:75:
         b8:09:65:d9:ad:4b:0d:33:bd:82:47:8d:f3:1d:8d:cd:71:a9:
         f6:ea:d4:96:78:64:ee:76:31:40:89:19:2a:2c:e6:24:93:bd:
         36:74:2b:50:ba:07:03:00:e6:00:0e:cb:8b:39:9e:bc:32:e7:
         09:1d:5a:f1:28:18:bf:f6:a8:25:b5:40:c7:d8:dc:29:63:68:
         ad:b1:e1:99:35:31:26:8c:5f:dc:f7:0b:47:9c:88:ac:ec:69:
         cf:fc:9d:ee:ff:76:f7:6d:86:ce:a5:9b:de:4a:58:fc:0c:94:
         1d:85:30:4d:57:9e:6c:30:66:b3:92:ba:1c:b0:d4:c4:0a:03:
         88:d0:44:75:5e:35:3d:f3:7b:94:d8:4c:d1:62:c7:07:6a:50:
         d5:bf:6c:12:1f:30:f5:30:51:72:5e:26:b6:11:7b:45:73:78:
         15:4a:32:15:d1:0e:46:9b:a1:41:72:fe:39:cf:da:4e:4c:8a:
         a7:9f:98:d3:63:0e:a7:c7:ac:b7:c2:b6:0c:fe:e6:c3:bd:a4:
         0d:e5:3c:57:d4:6e:fa:a1:b2:1d:1b:97:e0:c4:09:0d:6f:70:
         b1:1c:21:b1:dc:18:6b:cd:6d:18:38:a5:6a:38:4f:d2:b9:22:
         9c:97:e1:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:57 2024 by rpki-client on console-fra.rpki-client.org