Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/MUeFMlRHV2VdGQFHqvpXrZDoH60.roa
File:                     MUeFMlRHV2VdGQFHqvpXrZDoH60.roa (raw, json)
Hash identifier:          VRAxfBP68Gmz2aM3EE64qVuj8gQlPzJ9atSAhEGnddM=
Subject key identifier:   31:47:85:32:54:47:57:65:5D:19:01:47:AA:FA:57:AD:90:E8:1F:AD
Certificate issuer:       /CN=9e9e6887ea7572a6411306c87b0cc089397a6354
Certificate serial:       03F8E505
Authority key identifier: 9E:9E:68:87:EA:75:72:A6:41:13:06:C8:7B:0C:C0:89:39:7A:63:54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/np5oh-p1cqZBEwbIewzAiTl6Y1Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/MUeFMlRHV2VdGQFHqvpXrZDoH60.roa
Signing time:             Mon 30 May 2022 08:28:03 +0000
ROA not before:           Mon 30 May 2022 08:28:03 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49632
IP address blocks:        188.125.173.0/24 maxlen: 24
                          188.125.172.0/24 maxlen: 24
                          188.125.171.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66643205 (0x3f8e505)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e9e6887ea7572a6411306c87b0cc089397a6354
        Validity
            Not Before: May 30 08:28:03 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=31478532544757655d190147aafa57ad90e81fad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8d:6b:53:60:c9:e0:a0:9d:3f:20:03:c4:9a:
                    54:35:d5:01:3f:a8:b9:a1:50:de:47:d1:4e:42:7b:
                    76:9b:9a:80:3c:19:80:a8:62:b3:48:fd:db:a3:e8:
                    41:97:b4:36:8c:72:84:bf:01:91:a5:b3:8c:1f:84:
                    57:f1:bc:2a:b0:98:98:72:8d:86:14:f5:93:d5:c5:
                    93:b9:36:36:6e:55:98:cd:b3:5e:4d:26:f0:dc:9d:
                    c9:47:4e:ff:2a:6e:36:03:76:ac:08:09:a7:e3:b8:
                    4e:a4:10:b4:10:f6:16:da:ea:31:df:68:a9:4f:25:
                    0e:3b:54:64:66:2c:8e:e9:f7:af:4f:76:18:f3:d9:
                    6d:2a:2a:02:91:56:f1:9b:a6:19:37:70:da:af:c7:
                    47:39:6b:b3:cb:1e:b3:59:19:32:ca:8b:39:c6:28:
                    a9:d5:64:78:76:b3:e7:28:1f:9d:3b:57:af:03:fa:
                    9b:2b:c4:18:64:d1:d1:24:4c:d1:84:25:71:ea:72:
                    69:12:24:63:08:3b:1f:14:a8:d5:fc:64:84:ff:3e:
                    d1:5c:69:87:65:84:d9:d2:a7:8f:9a:45:4f:29:f4:
                    74:9f:16:c7:0a:46:45:e8:cb:33:ca:03:e5:cf:93:
                    67:a7:76:9d:57:a8:26:51:65:ff:ac:6e:e8:69:52:
                    d4:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:47:85:32:54:47:57:65:5D:19:01:47:AA:FA:57:AD:90:E8:1F:AD
            X509v3 Authority Key Identifier:
                keyid:9E:9E:68:87:EA:75:72:A6:41:13:06:C8:7B:0C:C0:89:39:7A:63:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/np5oh-p1cqZBEwbIewzAiTl6Y1Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/MUeFMlRHV2VdGQFHqvpXrZDoH60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/np5oh-p1cqZBEwbIewzAiTl6Y1Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.125.171.0-188.125.173.255

    Signature Algorithm: sha256WithRSAEncryption
         54:a5:44:14:e4:99:d2:f7:b5:24:7d:ba:2f:7f:b5:0b:e1:52:
         65:1e:9c:ed:9a:aa:2d:0a:24:c7:05:1b:03:f3:97:a5:fd:10:
         55:b6:14:30:cf:7b:aa:0d:4a:a5:42:d3:37:72:4b:a1:09:aa:
         c0:37:79:f1:69:f3:d0:fd:21:76:62:eb:ef:1f:06:e3:b6:d0:
         f0:f7:2e:0d:b4:21:ef:89:ac:ef:ff:31:ad:c1:86:93:8f:67:
         45:3a:da:d2:ea:74:69:b3:3a:55:ac:d5:45:2a:95:ed:d6:2c:
         f8:ac:56:65:7d:b2:b6:83:e4:eb:e0:7b:fc:28:9f:d2:e5:a8:
         d4:57:ec:9a:82:fc:02:36:ff:a0:9c:67:7c:a2:6c:b0:10:67:
         2f:4f:2c:b5:4f:43:35:db:96:e6:0e:6b:b9:3e:17:9b:7b:76:
         f7:20:61:ba:cb:ae:fa:c4:b0:1f:ab:7e:1a:d4:9a:85:a9:dd:
         dd:9b:a9:45:06:66:2b:6d:98:26:f9:d7:7c:6a:0c:42:44:08:
         79:44:52:88:01:df:37:16:3a:03:8c:f1:5e:7f:e1:f2:d8:c6:
         92:8b:0c:eb:f3:de:ba:b3:d4:5b:88:50:22:8b:c7:35:07:26:
         63:bd:b5:5c:63:a6:4a:43:ea:91:ee:3c:91:ff:db:17:dc:d0:
         71:f5:de:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:01 2024 by rpki-client on console-fra.rpki-client.org