Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d351bf-71ce-4857-9e50-c2647385e727/1/UQUXphNWTZRuzoE_Ks40CxBPj-U.roa
File:                     UQUXphNWTZRuzoE_Ks40CxBPj-U.roa (raw, json)
Hash identifier:          qZgwafARzX+Qxa5+x4xOf31IWuapQW+M+TFu3UyOBTU=
Subject key identifier:   51:05:17:A6:13:56:4D:94:6E:CE:81:3F:2A:CE:34:0B:10:4F:8F:E5
Certificate issuer:       /CN=d9ad18f4c36067220f4d833cbc78a10f94eb0888
Certificate serial:       D39E
Authority key identifier: D9:AD:18:F4:C3:60:67:22:0F:4D:83:3C:BC:78:A1:0F:94:EB:08:88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2a0Y9MNgZyIPTYM8vHihD5TrCIg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/d351bf-71ce-4857-9e50-c2647385e727/1/UQUXphNWTZRuzoE_Ks40CxBPj-U.roa
Signing time:             Wed 06 Apr 2022 13:06:55 +0000
ROA not before:           Wed 06 Apr 2022 13:06:55 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     59781
IP address blocks:        185.72.48.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54174 (0xd39e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9ad18f4c36067220f4d833cbc78a10f94eb0888
        Validity
            Not Before: Apr  6 13:06:55 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=510517a613564d946ece813f2ace340b104f8fe5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:10:04:5c:d5:5e:79:64:ce:e6:91:7c:b7:25:
                    5c:96:ef:92:bd:e0:14:72:88:fa:8d:7c:c4:fa:30:
                    5b:ef:51:4b:5c:78:2d:bf:b6:86:14:1c:7a:0f:13:
                    45:7f:a5:68:71:a6:05:1d:ae:7d:3e:5c:8d:e7:61:
                    db:10:e5:a0:67:56:b4:82:e7:77:a4:ec:d9:1a:ac:
                    fc:2e:fd:e1:cb:50:60:c4:1d:5f:69:a1:be:0f:e5:
                    fd:bb:fa:20:d6:9d:74:70:7e:86:cc:8b:46:07:0d:
                    ad:e7:64:c1:3b:c1:3d:50:6b:25:d4:a2:a4:2a:a3:
                    0d:83:c1:d3:fe:98:b4:da:6d:02:ce:5f:18:48:53:
                    af:a0:87:70:d6:4a:34:a7:3e:29:1b:7a:ec:29:b9:
                    aa:64:48:dd:80:78:03:64:2e:06:dd:65:f7:6c:ae:
                    03:24:6a:23:e2:86:3f:e4:81:4c:06:21:5a:ac:86:
                    84:2c:92:3e:61:a2:3b:1d:55:23:57:8c:31:74:83:
                    e3:d1:99:07:2c:cf:17:1d:4d:1a:2a:c7:3a:f3:5b:
                    0c:86:e6:5c:ea:3c:e9:3c:ac:11:bd:42:92:e4:14:
                    27:da:42:f5:26:a4:47:de:36:c8:de:59:22:00:54:
                    e4:70:b9:c1:3a:89:c4:7f:06:46:3f:9f:06:e4:24:
                    5e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:05:17:A6:13:56:4D:94:6E:CE:81:3F:2A:CE:34:0B:10:4F:8F:E5
            X509v3 Authority Key Identifier:
                keyid:D9:AD:18:F4:C3:60:67:22:0F:4D:83:3C:BC:78:A1:0F:94:EB:08:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a0Y9MNgZyIPTYM8vHihD5TrCIg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d351bf-71ce-4857-9e50-c2647385e727/1/UQUXphNWTZRuzoE_Ks40CxBPj-U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d351bf-71ce-4857-9e50-c2647385e727/1/2a0Y9MNgZyIPTYM8vHihD5TrCIg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.72.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:ac:4a:56:93:ad:0c:2a:34:4b:61:d6:6d:e5:a5:1f:0d:a0:
         50:3b:6d:2e:92:31:ac:05:e9:73:ce:e3:00:ac:43:87:40:0b:
         24:ff:c6:51:ba:fe:26:66:72:6b:59:45:b0:d6:6f:a7:8e:21:
         7c:6f:21:d1:e5:38:ec:9f:5f:10:79:cf:05:d7:06:3c:ca:58:
         1f:71:76:a4:70:bb:a1:20:c3:a1:8f:15:8e:66:ad:2e:d1:c5:
         70:b7:ea:dc:8e:fe:6c:b4:30:c3:03:a5:11:38:e0:3f:f7:b4:
         7b:a6:ea:2e:cf:f6:7d:f7:f3:ea:88:ef:00:3a:3b:28:ac:54:
         e6:94:18:8d:36:ef:40:18:fd:59:f0:91:cd:2a:1d:a9:59:35:
         88:be:ae:9c:52:5d:16:2a:0a:99:a2:c1:7a:06:ba:88:42:88:
         20:30:9e:7d:32:e1:4c:ab:19:43:44:98:67:6f:a9:e5:a5:61:
         a7:a4:d0:1a:c2:86:a5:59:e0:80:2b:eb:cb:6b:71:fa:46:9c:
         22:f6:0e:17:b6:1b:96:ac:0a:7e:6f:ad:80:1f:58:d6:bd:ea:
         45:72:51:bd:51:4e:8c:a6:bc:48:87:df:0a:a2:4a:24:a1:5a:
         da:ff:64:3a:e0:d2:5b:4a:ed:24:55:5c:c2:63:01:d3:9c:67:
         c4:92:da:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:57 2024 by rpki-client on console-ams.rpki-client.org