Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/E5U5XcYmE59R1D_8neWtUuV276A.roa
File:                     E5U5XcYmE59R1D_8neWtUuV276A.roa (raw, json)
Hash identifier:          tucm9zyTLfjyBWSjtOA/rRWMayq9KK+eZLl1GZYQUaQ=
Subject key identifier:   13:95:39:5D:C6:26:13:9F:51:D4:3F:FC:9D:E5:AD:52:E5:76:EF:A0
Certificate issuer:       /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial:       1B647D48
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/E5U5XcYmE59R1D_8neWtUuV276A.roa
Signing time:             Sat 01 Jan 2022 10:02:36 +0000
ROA not before:           Sat 01 Jan 2022 10:02:36 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     30917
IP address blocks:        195.56.141.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 459570504 (0x1b647d48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
        Validity
            Not Before: Jan  1 10:02:36 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1395395dc626139f51d43ffc9de5ad52e576efa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5d:0d:b2:d9:ba:b2:d2:95:44:ed:28:09:4e:
                    d3:9a:bd:90:3a:7b:97:f6:d0:09:b2:fc:bd:c8:87:
                    9a:aa:29:04:8b:71:79:48:04:38:e3:ec:7b:93:d8:
                    97:e5:eb:7e:b8:8e:36:e7:5a:67:cd:d8:0e:d1:60:
                    e3:c3:f4:e8:e5:08:45:f4:7a:48:90:0a:b2:6f:10:
                    8c:b7:d8:3a:b2:e0:fa:4e:98:d4:6c:d9:83:7c:85:
                    f0:b5:2b:35:13:98:7a:39:d3:67:db:c9:93:7f:7c:
                    fc:67:bd:45:9f:19:01:59:cf:1f:16:94:d7:69:05:
                    5e:ae:b2:dd:40:b6:36:5d:08:b1:41:1b:99:90:26:
                    b2:27:19:7c:44:89:1a:26:c9:53:2e:29:f1:4c:22:
                    02:01:a6:11:35:04:0a:15:b7:01:75:65:d1:14:a0:
                    88:9c:15:a6:d2:b7:17:0c:46:43:3c:87:08:9e:bf:
                    88:4b:09:27:68:4a:4c:fa:4d:8b:2a:ec:ac:72:49:
                    7a:b9:d5:00:d6:58:3d:c7:81:b2:a4:b4:22:bb:01:
                    c1:b5:3f:4d:e6:8f:55:42:0e:57:89:45:1f:19:d8:
                    75:20:41:48:1e:25:46:d1:3b:50:4c:8f:05:08:b2:
                    ca:83:97:3b:39:a2:28:71:d6:d9:58:0d:29:c1:0e:
                    41:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:95:39:5D:C6:26:13:9F:51:D4:3F:FC:9D:E5:AD:52:E5:76:EF:A0
            X509v3 Authority Key Identifier:
                keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/E5U5XcYmE59R1D_8neWtUuV276A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.56.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:2f:d9:29:ac:c8:43:95:31:6d:3e:45:90:71:c4:9d:65:aa:
         bf:56:ed:21:4a:17:e0:dc:c4:c3:c1:56:0c:7d:5b:ea:dc:f5:
         de:28:b3:f4:47:b1:99:ef:e5:6c:4e:24:e6:0a:55:45:32:e9:
         03:63:a8:44:a0:c5:d4:f9:bb:dc:32:56:cc:f0:0e:5b:19:ee:
         40:16:44:4e:00:10:24:1f:4e:9b:51:98:e1:85:80:81:00:67:
         d7:eb:7c:8d:10:8f:03:3a:22:5b:b4:f5:c4:74:11:42:59:f5:
         ff:32:25:79:b3:3c:ea:12:d3:91:28:7e:92:de:25:b4:b9:a5:
         fb:de:d5:6b:68:38:a0:52:ee:84:bf:b1:e7:38:cd:27:7b:be:
         fd:5e:af:77:0a:25:c0:ac:69:35:a0:d9:eb:7d:85:61:74:f1:
         0e:ba:d5:19:3e:a2:e8:3f:68:95:32:bd:a3:09:d4:df:61:99:
         27:e0:23:7a:84:9f:db:79:2f:5a:dc:42:3c:0a:c9:8a:89:fb:
         23:c0:05:e4:49:c7:cd:91:ff:62:2f:22:96:13:a1:2f:a3:df:
         04:89:1b:45:fc:47:51:01:b4:08:36:29:ce:16:1a:af:4b:45:
         71:47:c8:07:2c:c3:61:85:e1:3d:43:91:ed:dd:9a:ca:7f:f5:
         fb:e1:e1:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:47 2024 by rpki-client on console-fra.rpki-client.org