Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/gyGFS1dUnBLh3R7CA6_Iz4EIyn0.roa
File:                     gyGFS1dUnBLh3R7CA6_Iz4EIyn0.roa (raw, json)
Hash identifier:          IePesBrh5R0rFWuaPRqXMXkN2+tHQyMM3dxR3Bk4vfc=
Subject key identifier:   83:21:85:4B:57:54:9C:12:E1:DD:1E:C2:03:AF:C8:CF:81:08:CA:7D
Certificate issuer:       /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial:       054C2F96
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/gyGFS1dUnBLh3R7CA6_Iz4EIyn0.roa
Signing time:             Fri 11 Feb 2022 18:48:58 +0000
ROA not before:           Fri 11 Feb 2022 18:48:58 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     43624
IP address blocks:        185.61.219.0/24 maxlen: 24
                          185.61.218.0/24 maxlen: 24
                          185.61.221.0/24 maxlen: 24
                          147.78.182.0/24 maxlen: 24
                          185.61.222.0/24 maxlen: 24
                          93.177.118.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88878998 (0x54c2f96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
        Validity
            Not Before: Feb 11 18:48:58 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8321854b57549c12e1dd1ec203afc8cf8108ca7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:33:7e:53:35:49:4c:22:2b:96:cd:3b:9b:83:
                    12:d6:95:52:92:a2:07:d7:cd:25:00:6e:ab:59:20:
                    44:d3:e6:53:19:98:5a:9b:ff:f1:00:d0:0d:26:de:
                    40:22:46:b0:5b:a4:59:d0:33:12:da:c4:84:15:ba:
                    b8:a0:7a:ce:61:1c:42:27:c0:be:fb:c5:a5:07:9b:
                    5a:2b:b1:40:e3:99:01:30:f3:0c:a2:39:61:88:5c:
                    c4:b3:f7:e2:19:6f:3c:63:0c:d7:66:ff:04:65:78:
                    71:95:32:a3:98:6d:b1:85:b2:16:91:8c:82:f1:5d:
                    e9:f7:a5:de:2b:71:75:ef:3d:84:7d:3a:fb:9d:2d:
                    a8:46:6d:38:69:4f:82:a5:8b:34:79:2d:aa:80:ff:
                    bd:6b:fd:2c:5c:34:7f:33:4e:a6:27:4a:60:5a:3c:
                    55:e3:0d:4f:0e:54:b0:8d:5d:70:31:97:28:52:f3:
                    2a:db:86:61:84:17:91:9d:bf:d4:e2:9e:f6:52:66:
                    7c:92:ab:15:c5:7a:ce:17:a9:49:ca:57:87:dd:54:
                    9b:28:8b:29:45:89:c4:81:66:50:46:1e:4c:61:f0:
                    a3:ba:65:21:f3:a2:44:92:98:a9:b8:ab:c2:cd:fa:
                    95:38:02:8d:ca:ed:e3:2a:61:46:33:82:a0:f0:9d:
                    a8:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:21:85:4B:57:54:9C:12:E1:DD:1E:C2:03:AF:C8:CF:81:08:CA:7D
            X509v3 Authority Key Identifier:
                keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/gyGFS1dUnBLh3R7CA6_Iz4EIyn0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.177.118.0/23
                  147.78.182.0/24
                  185.61.218.0/23
                  185.61.221.0-185.61.222.255

    Signature Algorithm: sha256WithRSAEncryption
         04:cf:36:94:82:83:54:59:55:ee:78:79:9b:23:17:15:70:b4:
         d6:6e:5a:6c:60:f5:67:de:0b:a5:46:b2:eb:43:e6:47:3e:36:
         27:f6:79:96:b8:35:19:c0:37:55:8d:7d:3b:b2:87:a1:50:92:
         d7:be:0f:54:91:d5:03:16:07:c9:3e:29:d5:8c:84:b6:f3:7c:
         a9:68:00:57:44:39:44:c5:db:aa:bd:b1:1c:86:81:6f:58:59:
         3b:d5:f2:33:35:6e:fe:01:7c:83:90:48:3a:6a:91:d1:09:e8:
         fd:ec:fd:7b:d9:65:9c:02:f6:5b:b3:8d:2a:51:dc:60:e7:07:
         df:d4:f6:22:07:f5:af:a5:41:d6:af:cb:97:51:10:ef:08:8d:
         ee:c0:1b:c1:fa:20:42:60:49:62:db:c3:de:b9:5e:cd:f2:af:
         16:3e:aa:64:62:e9:5f:e2:a0:e8:dc:9b:52:f8:01:b4:7e:24:
         97:16:34:4d:6f:55:88:a3:2a:dc:4c:bf:9f:ac:8d:fc:7f:a2:
         d6:d6:3b:38:cf:8c:73:91:86:b1:21:12:51:11:af:5c:65:9b:
         57:1f:a9:95:4b:e7:96:7f:7c:f5:a1:62:ba:6f:fb:aa:15:96:
         e3:2e:e6:49:58:84:93:a0:47:7a:2c:60:d1:31:30:36:b3:ef:
         0f:5c:94:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:59 2024 by rpki-client on console-fra.rpki-client.org