Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/kSnAyzga1ByMAxgGAY1jWZx87Wc.roa
File:                     kSnAyzga1ByMAxgGAY1jWZx87Wc.roa (raw, json)
Hash identifier:          iu2UbBZ96T1kC3hrzE/efnxfBWD97RmDO7jAoe5BywE=
Subject key identifier:   91:29:C0:CB:38:1A:D4:1C:8C:03:18:06:01:8D:63:59:9C:7C:ED:67
Certificate issuer:       /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial:       01D50C
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/kSnAyzga1ByMAxgGAY1jWZx87Wc.roa
Signing time:             Thu 03 Mar 2022 14:43:07 +0000
ROA not before:           Thu 03 Mar 2022 14:43:07 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     51440
IP address blocks:        89.46.183.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120076 (0x1d50c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
        Validity
            Not Before: Mar  3 14:43:07 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9129c0cb381ad41c8c031806018d63599c7ced67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:77:7d:30:8b:91:1a:ed:b4:d9:b0:10:67:f4:
                    80:73:6b:79:2e:7c:b8:b9:53:a7:b1:1c:73:3e:ec:
                    41:5a:f2:76:7c:34:49:67:cc:b8:76:71:b3:4f:27:
                    a5:95:3f:70:89:17:1e:2d:d9:2d:89:1f:c2:fb:ea:
                    62:16:20:87:18:a6:25:23:42:8d:bf:89:e7:c3:d8:
                    d4:d2:39:d2:45:97:71:2b:c6:09:a0:ac:a7:0b:b9:
                    dc:48:bc:ce:b7:55:bd:cf:54:de:cb:83:c9:69:e0:
                    1f:0f:2b:c3:8a:b2:e5:65:b5:69:a1:53:2d:ac:82:
                    f1:b5:6f:5e:77:61:95:cf:f1:45:54:d5:bf:94:29:
                    8d:90:d1:bd:5c:a2:58:78:53:9b:ed:15:e0:4c:fa:
                    07:1d:1e:9c:bc:44:0a:59:1a:14:d7:c2:d6:7c:e0:
                    69:b2:55:22:86:79:f1:27:6b:0d:bc:4c:6b:da:29:
                    0e:2e:fd:8b:8f:6b:12:ba:5f:8e:4e:75:af:84:66:
                    e4:07:95:99:11:0b:31:18:eb:aa:33:00:23:88:49:
                    8b:c4:b1:8a:0c:85:df:31:6c:1c:f6:6b:29:49:e3:
                    9d:93:b7:27:0e:11:42:44:17:9a:cd:50:4d:0a:7d:
                    8c:8d:a7:24:1c:a3:97:39:ad:e9:23:ee:b4:85:3f:
                    f5:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:29:C0:CB:38:1A:D4:1C:8C:03:18:06:01:8D:63:59:9C:7C:ED:67
            X509v3 Authority Key Identifier:
                keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/kSnAyzga1ByMAxgGAY1jWZx87Wc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.46.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:ad:7d:ff:27:71:69:d1:dc:84:8c:17:b3:c9:d7:43:35:3a:
         bf:d2:7f:15:57:f7:46:b5:48:8e:cb:f3:74:e3:88:a6:47:fe:
         95:ce:5f:a0:9c:ca:37:50:f2:d7:34:b4:0b:2a:36:f6:fc:01:
         76:e5:3c:e8:b7:49:96:8b:f3:18:b0:c0:72:c0:62:ce:f6:47:
         ff:ac:d0:46:95:cf:84:99:cb:91:f4:6b:c1:71:00:91:4f:ca:
         04:c3:7f:e5:cf:02:bb:67:eb:9d:fe:b5:83:de:b0:9b:48:41:
         cf:2e:85:40:d9:18:f6:96:df:ce:16:8a:89:9c:dd:e7:8a:29:
         c6:b4:df:dc:72:85:59:f0:7e:e1:b9:15:ed:29:c0:1b:95:5a:
         c7:31:cf:b8:f6:69:a7:7d:38:24:86:64:67:84:2a:51:bf:09:
         b1:61:b1:28:74:0f:a6:6d:57:3f:38:11:0f:ac:5c:b2:bc:ce:
         2e:67:2a:45:8f:fe:fe:00:bb:b5:4a:a4:7f:85:c8:c8:fc:27:
         81:13:f9:d8:c1:aa:1f:56:e7:b3:a5:c4:7c:18:5a:87:cf:ca:
         61:93:74:e7:5a:11:4a:9d:03:37:67:05:2f:e2:dd:15:82:b0:
         7f:d6:4b:f5:d3:ee:98:0c:b6:92:6f:06:9c:33:85:3a:e4:fb:
         aa:01:3f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:47 2024 by rpki-client on console-ams.rpki-client.org