Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/eJg0SoUmW_tYByCXim_eCCp9YVI.roa
File:                     eJg0SoUmW_tYByCXim_eCCp9YVI.roa (raw, json)
Hash identifier:          pAIqciJpl56X3k4WIycwV1DkbTIyxKpCN+dcYdjMVRE=
Subject key identifier:   78:98:34:4A:85:26:5B:FB:58:07:20:97:8A:6F:DE:08:2A:7D:61:52
Certificate issuer:       /CN=16ea37a8e73e7679a933d70f7b9c872081024455
Certificate serial:       01822AD82035293FEFC56013098C164524F6
Authority key identifier: 16:EA:37:A8:E7:3E:76:79:A9:33:D7:0F:7B:9C:87:20:81:02:44:55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fuo3qOc-dnmpM9cPe5yHIIECRFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/eJg0SoUmW_tYByCXim_eCCp9YVI.roa
Signing time:             Sat 23 Jul 2022 11:36:23 +0000
ROA not before:           Sat 23 Jul 2022 11:36:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     64458
IP address blocks:        194.59.170.0/24 maxlen: 24
                          185.81.97.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:2a:d8:20:35:29:3f:ef:c5:60:13:09:8c:16:45:24:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16ea37a8e73e7679a933d70f7b9c872081024455
        Validity
            Not Before: Jul 23 11:36:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7898344a85265bfb580720978a6fde082a7d6152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:c0:1f:e0:ba:2b:9e:21:75:12:a2:7d:b7:09:
                    3b:5a:9c:ef:99:2a:35:8b:93:7a:8e:47:87:e6:ed:
                    c3:bd:de:1c:2e:3a:b7:ad:3c:8a:96:44:bb:89:62:
                    c7:df:f1:c7:7b:05:bb:d8:91:74:65:6c:6b:90:46:
                    85:e8:32:e7:a6:df:08:b2:28:0d:2b:5a:a9:35:a7:
                    07:74:bf:f3:ac:ee:3a:a9:ba:fc:cb:7a:1c:f5:46:
                    74:55:cb:23:83:fe:34:f1:3d:96:ba:5b:4f:8a:ff:
                    50:aa:a8:84:03:83:2a:15:f2:08:72:6a:6e:58:1a:
                    e1:8e:e2:c9:69:01:fc:2a:40:dc:62:2f:34:e3:29:
                    06:f2:1b:c3:13:32:59:d0:3b:10:18:00:ac:11:5d:
                    9c:c5:ae:d9:ae:ff:a2:36:99:9a:fa:6d:34:9a:90:
                    09:d8:9a:ae:77:c0:a6:9a:d4:7b:96:e2:95:d8:59:
                    9f:8b:0b:90:48:14:50:00:6a:b6:06:50:fb:d0:19:
                    f8:01:a0:bd:38:ee:76:d1:f0:5d:13:bc:fb:ab:eb:
                    c1:8a:67:6e:af:70:c2:11:5e:bd:d7:43:7b:a0:94:
                    20:f3:c2:5a:b2:b5:17:d4:bb:d4:51:43:60:59:a0:
                    a7:74:be:ca:f4:32:dd:d7:b2:6c:3b:a2:f0:6e:9a:
                    be:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:98:34:4A:85:26:5B:FB:58:07:20:97:8A:6F:DE:08:2A:7D:61:52
            X509v3 Authority Key Identifier:
                keyid:16:EA:37:A8:E7:3E:76:79:A9:33:D7:0F:7B:9C:87:20:81:02:44:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fuo3qOc-dnmpM9cPe5yHIIECRFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/eJg0SoUmW_tYByCXim_eCCp9YVI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/Fuo3qOc-dnmpM9cPe5yHIIECRFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.81.97.0/24
                  194.59.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:d9:48:ad:3a:71:98:bc:ef:53:54:e7:1a:fa:9a:e2:55:2d:
         53:1a:3e:72:4b:7f:f1:71:4a:77:e3:9d:97:65:83:62:a8:3b:
         bb:3a:e9:97:40:5c:99:df:ed:ac:c3:f2:0f:bd:af:c1:ce:f0:
         92:d9:6b:cb:01:20:ef:65:ca:c7:d2:22:aa:96:3b:ac:45:8e:
         87:f7:40:53:77:2a:aa:68:a0:5a:3d:ef:af:ce:59:f7:e3:b9:
         c2:39:39:07:08:a3:40:45:0f:05:fb:09:68:31:25:72:5e:6b:
         f9:cb:bc:66:db:52:65:d5:b0:1a:7a:ba:1a:49:80:29:de:a6:
         67:c7:0a:2a:08:10:fd:07:fd:e3:5e:47:72:3c:3a:fb:3b:55:
         83:82:42:c7:1e:52:06:d2:8a:df:36:32:aa:e2:75:96:e1:0a:
         02:84:4c:5c:c0:3b:a7:31:f2:24:19:ed:0e:dd:d0:fd:0b:d0:
         69:0b:11:09:45:f0:c6:0d:bb:71:94:3d:77:db:f0:a1:aa:dd:
         9f:e9:e4:30:28:72:dc:d4:a5:d4:c7:df:44:cb:4f:dd:a9:40:
         8d:ab:5b:81:fa:b4:26:bd:53:bb:5f:e4:69:e6:1e:f9:49:c1:
         d9:c0:37:f1:14:9b:05:e5:7e:e4:e5:ab:63:ac:c3:19:d3:63:
         e6:dc:7f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:54 2024 by rpki-client on console-ams.rpki-client.org