Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/yRXH9eGqvrl5EXoMk1kpCvF_Elc.roa
File:                     yRXH9eGqvrl5EXoMk1kpCvF_Elc.roa (raw, json)
Hash identifier:          q0zjdUyKPwFUQV85PJ3lBhLy9CjgofPjwiD4CwtqBLU=
Subject key identifier:   C9:15:C7:F5:E1:AA:BE:B9:79:11:7A:0C:93:59:29:0A:F1:7F:12:57
Certificate issuer:       /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial:       01855D0EFEA2D250BADD61FDF9429DF36E99
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/yRXH9eGqvrl5EXoMk1kpCvF_Elc.roa
Signing time:             Thu 29 Dec 2022 08:45:41 +0000
ROA not before:           Thu 29 Dec 2022 08:45:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60721
IP address blocks:        82.153.240.0/24 maxlen: 24
                          82.152.176.0/24 maxlen: 24
                          82.153.243.0/24 maxlen: 24
                          82.153.68.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:5d:0e:fe:a2:d2:50:ba:dd:61:fd:f9:42:9d:f3:6e:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
        Validity
            Not Before: Dec 29 08:45:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c915c7f5e1aabeb979117a0c9359290af17f1257
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ee:75:fb:91:3b:02:23:30:19:1d:00:a3:4d:
                    76:a7:e2:a2:2b:88:00:7c:d2:35:5f:b7:a4:da:91:
                    a8:f6:32:ce:fd:5d:e5:e9:65:12:b7:17:30:81:19:
                    63:08:eb:15:37:95:db:29:e2:21:a5:94:24:62:5d:
                    8c:12:95:37:3d:26:23:65:a6:0b:e3:84:2d:8e:67:
                    83:10:a0:b0:26:ce:26:e7:00:ef:45:62:32:64:20:
                    6d:b4:0e:0f:b6:7d:87:37:c4:40:2c:77:30:60:94:
                    03:72:a3:9c:f7:34:26:d3:0f:c0:6e:52:a6:9c:61:
                    78:87:43:65:76:9b:f1:ce:8a:23:3e:40:05:bc:2b:
                    55:42:64:1a:df:cf:01:f9:59:3d:a1:b9:de:37:81:
                    d1:0b:f4:04:8c:cf:c5:be:bf:74:04:93:b1:12:f1:
                    71:af:e5:39:19:88:92:9b:76:4d:92:36:48:fe:be:
                    eb:07:be:c3:9b:54:a3:1c:a1:49:a2:9f:44:6f:c0:
                    62:e1:99:2a:6b:50:82:7e:fa:0c:cc:fb:b3:28:21:
                    f4:75:05:96:77:65:bd:95:01:93:ad:48:4a:76:d6:
                    8e:71:9d:44:d9:e7:97:4e:f4:c2:f7:43:c4:c6:2e:
                    8e:bb:9b:45:ef:7a:c8:74:d2:f6:2c:bc:41:f5:70:
                    f9:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:15:C7:F5:E1:AA:BE:B9:79:11:7A:0C:93:59:29:0A:F1:7F:12:57
            X509v3 Authority Key Identifier:
                keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/yRXH9eGqvrl5EXoMk1kpCvF_Elc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.152.176.0/24
                  82.153.68.0/24
                  82.153.240.0/24
                  82.153.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:7b:d1:52:fc:02:0a:c6:88:10:8d:95:89:09:86:28:ff:0f:
         70:12:e0:07:fc:ef:5a:53:b4:02:0a:fd:0c:e7:37:34:af:8b:
         aa:b5:01:2d:81:d1:97:b9:b1:44:2f:4c:ea:66:cf:4b:52:c4:
         fd:80:3a:ae:ac:dc:0f:48:2b:28:3e:e6:da:76:26:d4:3c:1d:
         b0:7e:51:f1:67:8d:37:6a:0a:89:88:bc:48:82:ba:39:e9:1c:
         a2:f9:41:7f:b3:25:79:e9:b1:92:af:f6:70:56:ee:c9:52:dd:
         8c:67:5a:6f:af:69:c6:f7:2f:0f:21:1e:de:16:4c:10:df:df:
         7c:f5:4e:52:a1:3b:c6:a0:d2:d5:c3:1e:e8:f4:58:45:a9:41:
         54:2a:94:d2:72:31:cf:10:00:3f:ce:d8:63:e5:77:c6:40:98:
         1f:d1:c3:32:fc:65:83:eb:0f:7f:45:8d:8e:1a:13:35:8d:39:
         91:eb:16:c0:05:0f:07:29:a2:e9:6f:36:6b:b7:ca:83:6f:e9:
         49:c4:2a:b2:e8:dc:b1:7f:f8:ff:cd:ac:60:f7:10:e1:4d:d5:
         3c:26:67:06:99:08:3d:5d:76:db:1f:2f:8a:c4:29:ec:46:11:
         d8:ce:94:02:6c:0a:aa:a1:f9:83:62:c2:54:cf:5d:b8:63:b1:
         90:0c:eb:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:32 2024 by rpki-client on console-ams.rpki-client.org