Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/eSVT0vC_je6bod6jAlJvqqCK78Q.roa
File:                     eSVT0vC_je6bod6jAlJvqqCK78Q.roa (raw, json)
Hash identifier:          VhbTTfC0rki/toTDt4S9sZ3qNsGaOnQXbRSyOCNGIps=
Subject key identifier:   79:25:53:D2:F0:BF:8D:EE:9B:A1:DE:A3:02:52:6F:AA:A0:8A:EF:C4
Certificate issuer:       /CN=77b8cf454b0962d16a4855808fd3abc15852bbd8
Certificate serial:       3DD889BE
Authority key identifier: 77:B8:CF:45:4B:09:62:D1:6A:48:55:80:8F:D3:AB:C1:58:52:BB:D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d7jPRUsJYtFqSFWAj9OrwVhSu9g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/eSVT0vC_je6bod6jAlJvqqCK78Q.roa
Signing time:             Sat 01 Jan 2022 07:58:37 +0000
ROA not before:           Sat 01 Jan 2022 07:58:37 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     24976
IP address blocks:        185.39.232.0/23 maxlen: 23
                          194.88.132.0/24 maxlen: 24
                          194.88.133.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1037601214 (0x3dd889be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77b8cf454b0962d16a4855808fd3abc15852bbd8
        Validity
            Not Before: Jan  1 07:58:37 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=792553d2f0bf8dee9ba1dea302526faaa08aefc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:cc:a1:2b:3c:13:ca:d9:81:65:41:ad:70:19:
                    5a:ad:c6:45:3d:20:ec:c7:80:f8:3f:95:26:61:1d:
                    6b:a0:57:49:63:f2:86:2d:5c:0e:14:c4:dd:59:34:
                    0f:af:3a:5b:fb:71:8b:e9:1a:82:a1:6c:5b:0f:ee:
                    bf:d7:91:47:3a:8b:de:64:80:2b:01:b8:d9:d9:c5:
                    75:c7:99:d5:7e:df:a9:14:f7:7f:0f:eb:74:e6:57:
                    23:39:cc:8a:a2:ce:8b:7d:af:92:c4:21:20:b7:d6:
                    7e:67:31:96:18:1d:45:c0:5f:52:ab:81:0f:19:2c:
                    4e:47:00:1d:47:f4:50:0e:d0:da:70:4d:f9:fb:a8:
                    33:88:e0:95:04:e5:14:52:95:9d:02:a1:8a:38:5c:
                    88:9a:f5:e7:0f:85:bb:1f:35:4f:1e:84:b2:b6:0b:
                    2f:72:51:93:57:84:a9:d1:dc:71:01:33:f8:82:e2:
                    25:9a:a9:e3:6b:df:4f:f6:df:62:0b:db:5e:57:0b:
                    21:43:23:7d:6a:ec:4b:bd:10:a2:bc:86:93:ba:05:
                    0c:08:0b:d2:53:1f:b1:fe:5c:fa:94:fe:6b:ae:08:
                    df:69:76:41:b6:6f:b9:c6:9a:58:c9:6e:ff:95:f9:
                    f7:fc:48:f5:c6:b0:db:14:6e:f3:5f:4d:54:3f:4c:
                    be:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:25:53:D2:F0:BF:8D:EE:9B:A1:DE:A3:02:52:6F:AA:A0:8A:EF:C4
            X509v3 Authority Key Identifier:
                keyid:77:B8:CF:45:4B:09:62:D1:6A:48:55:80:8F:D3:AB:C1:58:52:BB:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7jPRUsJYtFqSFWAj9OrwVhSu9g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/eSVT0vC_je6bod6jAlJvqqCK78Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/d7jPRUsJYtFqSFWAj9OrwVhSu9g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.39.232.0/23
                  194.88.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         09:b0:b1:54:d2:e2:98:cf:27:48:2b:67:91:cd:e2:f0:5f:10:
         05:8f:62:39:7a:e3:86:97:5f:30:da:cd:e7:54:e6:11:5a:1b:
         22:8c:9d:7f:11:94:97:49:fe:50:bf:75:ef:ca:db:1c:3d:01:
         02:6f:43:9b:05:46:fd:98:b0:67:b2:3d:aa:fe:86:47:3d:4e:
         cc:2e:b0:96:ce:84:d0:10:85:3e:81:e6:00:77:5b:69:02:7b:
         3a:44:5d:78:86:ea:8b:69:e1:1a:6d:92:30:56:f8:a0:9f:ea:
         7f:5e:b5:6d:71:f3:68:8a:c8:24:d6:14:7b:4c:2c:9e:dc:1c:
         5b:dd:b4:32:d5:17:07:4e:4c:59:1c:56:51:6c:68:a4:b8:99:
         38:8a:3a:79:c0:53:62:97:94:ec:55:38:35:28:91:04:9f:42:
         43:c7:7c:62:a2:51:83:8b:1e:e5:5c:58:f8:42:4d:6e:1a:26:
         f2:65:26:6f:f2:43:13:64:dc:ea:7e:1b:6f:24:f4:f1:17:64:
         75:cf:ea:b1:e6:17:54:72:8e:41:5f:09:63:71:d7:00:f1:5e:
         77:97:0e:79:4a:2d:cd:07:8e:8f:a3:49:08:30:b4:ba:51:69:
         78:38:55:ca:ce:ac:60:c5:a3:8f:1a:50:bf:63:39:a0:4d:76:
         78:0c:59:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:24 2024 by rpki-client on console-ams.rpki-client.org