Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/ee8c1a-e501-4f31-99e9-3a6640360993/1/79Cw_dMSgUSi98Z1OXtQ2rSELE8.roa
File:                     79Cw_dMSgUSi98Z1OXtQ2rSELE8.roa (raw, json)
Hash identifier:          MPe5O3imzWn0Zu3co6MReheTZT+HkJwaxHC3AKxd14o=
Subject key identifier:   EF:D0:B0:FD:D3:12:81:44:A2:F7:C6:75:39:7B:50:DA:B4:84:2C:4F
Certificate issuer:       /CN=2d4c93ae051ce26cfbc87efe08e109e4b2cee0b2
Certificate serial:       B845
Authority key identifier: 2D:4C:93:AE:05:1C:E2:6C:FB:C8:7E:FE:08:E1:09:E4:B2:CE:E0:B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LUyTrgUc4mz7yH7-COEJ5LLO4LI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/ee8c1a-e501-4f31-99e9-3a6640360993/1/79Cw_dMSgUSi98Z1OXtQ2rSELE8.roa
Signing time:             Thu 10 Mar 2022 10:24:30 +0000
ROA not before:           Thu 10 Mar 2022 10:24:30 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     44019
IP address blocks:        146.19.241.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47173 (0xb845)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d4c93ae051ce26cfbc87efe08e109e4b2cee0b2
        Validity
            Not Before: Mar 10 10:24:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=efd0b0fdd3128144a2f7c675397b50dab4842c4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:4d:f7:6d:92:f6:48:91:b9:cb:31:91:53:11:
                    32:71:f3:a0:ed:94:bd:8b:43:01:65:a8:c4:a1:4f:
                    9c:01:f5:d5:d4:a5:d9:ac:dd:23:5d:53:6c:41:ea:
                    88:11:c3:a0:50:b7:ea:4a:ef:9f:38:b1:4f:e7:d2:
                    49:b9:af:70:65:85:8d:33:0a:94:03:a8:2d:0b:5c:
                    2f:46:cb:46:64:3a:c2:f5:d0:ad:6a:60:4e:fc:8d:
                    e6:17:c1:9b:2d:0a:c0:6a:ca:24:3b:2c:2b:e0:fe:
                    78:2f:f1:3f:1b:92:7e:34:5b:9a:b1:20:24:36:19:
                    2a:5c:4d:6e:bb:fb:19:b3:e9:c6:4e:8d:c6:fd:41:
                    1e:59:96:1e:64:bb:cb:e2:27:41:07:8d:df:88:48:
                    59:3d:03:62:08:69:bf:de:0e:3e:15:5b:5d:e2:0a:
                    30:72:a6:65:18:e1:40:79:09:d4:81:df:36:9a:6f:
                    e0:43:b5:43:69:48:5f:06:9a:ca:05:e3:f6:1c:97:
                    39:07:ed:4e:9b:b6:b6:f0:0c:d9:02:37:64:f9:60:
                    33:9b:70:87:30:0f:42:de:cb:e5:72:3b:e1:9e:6c:
                    dc:42:ae:1a:ac:d1:9c:f6:94:77:84:05:cc:5a:7c:
                    ae:ca:f5:48:fb:31:58:26:7b:75:68:19:57:19:1b:
                    ba:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:D0:B0:FD:D3:12:81:44:A2:F7:C6:75:39:7B:50:DA:B4:84:2C:4F
            X509v3 Authority Key Identifier:
                keyid:2D:4C:93:AE:05:1C:E2:6C:FB:C8:7E:FE:08:E1:09:E4:B2:CE:E0:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUyTrgUc4mz7yH7-COEJ5LLO4LI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/ee8c1a-e501-4f31-99e9-3a6640360993/1/79Cw_dMSgUSi98Z1OXtQ2rSELE8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/ee8c1a-e501-4f31-99e9-3a6640360993/1/LUyTrgUc4mz7yH7-COEJ5LLO4LI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:6b:df:e7:da:98:a5:b9:dd:90:8b:af:82:85:b2:19:1c:f3:
         5e:62:fe:93:7e:d3:16:82:b9:86:d4:fa:ec:4c:f9:eb:58:b2:
         23:50:ee:5b:a7:7b:28:58:57:0f:f1:33:b4:49:4e:39:e6:88:
         35:7a:9f:cf:72:93:32:f1:f1:c4:c6:81:b2:13:dd:e5:15:a8:
         2f:2d:17:38:6d:68:cc:2e:71:b8:7c:99:13:fc:17:04:88:ab:
         ed:00:29:ed:a9:6d:5e:95:3f:f0:68:5b:1d:aa:2a:43:bb:de:
         6f:26:87:ff:20:c9:10:0b:cd:5d:bd:89:62:9e:bd:63:b7:16:
         a1:a5:f0:42:9d:57:eb:fd:96:2a:f7:9b:2c:f7:fc:27:b5:19:
         6f:40:39:70:a1:c8:c7:06:6e:08:e0:dd:08:13:8d:56:c2:be:
         a0:05:02:32:d4:73:8c:5e:e1:b3:94:b9:d3:12:21:bb:1b:dc:
         fa:6b:04:56:db:a8:1d:75:d9:48:a6:41:31:e8:c4:48:38:56:
         6d:bb:fe:1a:dc:65:9f:2d:8a:04:5a:d6:4c:84:c0:b9:01:0c:
         8b:53:77:40:d8:8e:f2:f8:ae:6d:d0:64:45:5f:25:55:25:bf:
         ff:a3:1d:8f:34:3e:db:37:ce:fd:05:60:00:f8:7a:fe:2f:c2:
         4c:4d:dc:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:50 2024 by rpki-client on console-fra.rpki-client.org