Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/CszSm3u_9NscUHGHZE2hoxIyilA.roa
File:                     CszSm3u_9NscUHGHZE2hoxIyilA.roa (raw, json)
Hash identifier:          okXkn23W433Eg/JvayAyZYDgYQQKK5Kz9nwlBx5+RWk=
Subject key identifier:   0A:CC:D2:9B:7B:BF:F4:DB:1C:50:71:87:64:4D:A1:A3:12:32:8A:50
Certificate issuer:       /CN=272ed090acf7c829a22bbfbe2b0e998cd20ad826
Certificate serial:       051DF854
Authority key identifier: 27:2E:D0:90:AC:F7:C8:29:A2:2B:BF:BE:2B:0E:99:8C:D2:0A:D8:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/CszSm3u_9NscUHGHZE2hoxIyilA.roa
Signing time:             Sat 01 Jan 2022 04:04:15 +0000
ROA not before:           Sat 01 Jan 2022 04:04:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     34636
IP address blocks:        95.81.82.0/23 maxlen: 24
                          95.81.80.0/24 maxlen: 24
                          95.81.81.0/24 maxlen: 24
                          95.81.88.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85850196 (0x51df854)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=272ed090acf7c829a22bbfbe2b0e998cd20ad826
        Validity
            Not Before: Jan  1 04:04:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0accd29b7bbff4db1c507187644da1a312328a50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:6d:4f:ee:a5:52:f0:70:ee:04:ea:57:97:20:
                    32:c5:8b:ec:06:0f:25:06:25:70:12:31:b4:ac:4e:
                    9e:95:4d:f0:1e:0c:e2:c6:69:f4:1c:f1:6c:72:6a:
                    16:2b:16:0b:a6:2e:a5:f7:9a:ee:e3:af:07:01:e0:
                    b2:0a:52:00:3d:bc:32:62:b9:7c:4b:2e:30:63:18:
                    9c:57:04:e2:50:e0:ce:ec:85:3b:c2:e8:61:45:35:
                    89:44:2d:6d:af:96:3a:d0:11:d0:fa:b2:20:a3:06:
                    d5:28:d5:0c:76:e2:f1:7b:c1:5a:af:3a:ad:0e:98:
                    e1:47:2b:f1:da:b8:1b:c5:53:71:84:02:a2:30:cf:
                    0d:12:ea:ce:61:9c:b7:04:ba:2e:c3:5f:6b:8e:07:
                    6d:a6:fa:6b:0e:13:1f:d7:d7:bf:c2:4a:51:2f:25:
                    28:92:5c:7d:99:50:59:37:ad:36:fb:0f:fc:af:71:
                    55:c0:54:e7:b1:db:79:d8:c1:c0:70:96:10:02:80:
                    42:b1:32:43:31:a1:f4:21:87:48:9b:be:b2:0c:27:
                    92:32:fe:e9:70:66:a9:d9:dc:fb:6b:ac:39:84:a7:
                    1e:ae:e6:7d:12:31:62:7e:60:34:ee:2b:dd:86:2f:
                    9f:87:5d:d1:3a:51:bf:5e:f8:f9:25:49:a7:cf:1b:
                    e6:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:CC:D2:9B:7B:BF:F4:DB:1C:50:71:87:64:4D:A1:A3:12:32:8A:50
            X509v3 Authority Key Identifier:
                keyid:27:2E:D0:90:AC:F7:C8:29:A2:2B:BF:BE:2B:0E:99:8C:D2:0A:D8:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/CszSm3u_9NscUHGHZE2hoxIyilA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.81.80.0/22
                  95.81.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:ac:16:a6:3a:43:7c:67:75:6a:c9:bd:6d:b2:c7:2a:ce:af:
         7f:47:a9:72:a9:bc:9e:34:55:8a:a1:36:6d:b0:70:99:9f:d9:
         24:bf:93:c6:49:15:60:e3:cb:01:84:97:21:87:78:be:90:f5:
         a3:6c:a4:79:3d:2c:8d:d1:ad:ce:91:55:3e:f8:7c:28:d1:f2:
         8d:fa:bc:d2:fe:33:a0:5d:8e:2c:18:e5:17:58:87:b7:18:5a:
         c8:c9:9a:83:e4:df:f3:db:93:c7:08:b1:bf:ca:59:29:1e:4a:
         d3:e7:2d:e3:88:a9:d3:a6:4c:bd:85:80:d0:c7:e2:9d:35:b2:
         62:0e:9f:0a:78:8d:cb:9d:94:f9:96:73:e0:7b:04:de:c9:0a:
         b3:58:6b:03:9c:2c:70:b5:47:30:8d:35:eb:96:c0:f5:4c:a5:
         25:40:95:e4:58:15:2a:ba:d8:15:10:ae:c4:87:e2:c0:47:b0:
         02:01:a0:cf:f0:6c:b5:76:c1:92:57:19:c6:8b:6b:f2:88:0d:
         ac:de:09:e4:84:34:de:8b:bb:a3:c3:4d:8b:b7:a3:65:45:7b:
         8e:7a:55:10:b9:db:3e:1f:27:4e:02:ae:1f:48:5a:11:fe:69:
         07:26:11:44:40:0d:7e:bf:f8:71:cc:bb:73:90:3d:34:96:77:
         36:13:5d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:42 2024 by rpki-client on console-fra.rpki-client.org