Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/imPRlomnQ_tSQmf8l-fLiiFJOyg.roa
File:                     imPRlomnQ_tSQmf8l-fLiiFJOyg.roa (raw, json)
Hash identifier:          W2YEMiMkS2TMQa+d4a8KKvZDhLKyrLAMjA+1p4Ghnfs=
Subject key identifier:   8A:63:D1:96:89:A7:43:FB:52:42:67:FC:97:E7:CB:8A:21:49:3B:28
Certificate issuer:       /CN=bfe3971a32c0692c4e342e911790662470cf31b2
Certificate serial:       044E9720
Authority key identifier: BF:E3:97:1A:32:C0:69:2C:4E:34:2E:91:17:90:66:24:70:CF:31:B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v-OXGjLAaSxONC6RF5BmJHDPMbI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/imPRlomnQ_tSQmf8l-fLiiFJOyg.roa
Signing time:             Mon 28 Feb 2022 15:12:36 +0000
ROA not before:           Mon 28 Feb 2022 15:12:36 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     201814
IP address blocks:        5.181.188.0/22 maxlen: 22
                          95.214.52.0/22 maxlen: 22
                          185.16.36.0/22 maxlen: 22
                          2a03:cfc0::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 72259360 (0x44e9720)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfe3971a32c0692c4e342e911790662470cf31b2
        Validity
            Not Before: Feb 28 15:12:36 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8a63d19689a743fb524267fc97e7cb8a21493b28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:11:fe:71:61:d5:f0:b8:84:5e:cc:d3:b9:d3:
                    b6:de:0f:36:52:0b:40:c6:b1:19:63:52:45:23:c4:
                    41:36:b1:a2:f0:92:5c:b8:a5:1d:39:e8:43:0b:1e:
                    98:65:09:dc:d6:a1:fe:9e:48:23:b1:90:1e:d4:e7:
                    aa:71:d1:47:bb:ac:9e:dc:b5:8d:d9:f7:0f:7f:a0:
                    01:e9:be:24:ff:59:08:5f:89:4c:18:61:dd:7c:27:
                    e3:b7:6d:39:ff:e4:b8:fe:c1:e4:4f:23:9b:34:2e:
                    c0:d0:a8:4f:db:1b:21:13:63:ee:7e:67:85:71:3f:
                    f9:41:74:fd:f8:2c:86:b3:eb:83:e6:7e:27:d5:7c:
                    81:f7:ba:ec:f5:78:84:fd:4f:39:0c:cb:20:a9:63:
                    14:45:df:86:21:19:cf:d4:ef:aa:0e:6e:5f:43:f6:
                    30:df:0e:2b:90:6d:60:05:84:90:fb:33:30:0e:5c:
                    87:de:0d:ee:c8:43:2f:4f:ab:da:7c:7d:e0:3c:7a:
                    34:47:e1:ef:69:af:62:31:9d:59:d3:66:b0:e5:c4:
                    0f:8b:60:f8:8a:96:f5:67:41:1c:60:0c:8a:0e:b2:
                    84:11:b7:74:ff:ad:56:ad:9c:9e:f9:4a:9a:a9:1c:
                    0c:aa:de:c3:0e:64:a1:ce:4a:5d:42:2d:54:25:5c:
                    de:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:63:D1:96:89:A7:43:FB:52:42:67:FC:97:E7:CB:8A:21:49:3B:28
            X509v3 Authority Key Identifier:
                keyid:BF:E3:97:1A:32:C0:69:2C:4E:34:2E:91:17:90:66:24:70:CF:31:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-OXGjLAaSxONC6RF5BmJHDPMbI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/imPRlomnQ_tSQmf8l-fLiiFJOyg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/v-OXGjLAaSxONC6RF5BmJHDPMbI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.181.188.0/22
                  95.214.52.0/22
                  185.16.36.0/22
                IPv6:
                  2a03:cfc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         02:8b:1f:3a:84:45:b0:56:66:a3:f1:d1:68:58:de:c5:60:61:
         fc:bc:2a:a4:a3:84:06:27:03:f5:2d:a7:d7:74:ba:65:dd:ac:
         0c:ea:5e:7f:e3:3e:1e:b3:f3:94:dd:a5:df:61:0d:87:46:3f:
         8e:f0:41:f1:ce:c0:03:ff:86:ec:73:56:cb:71:ad:be:4f:bc:
         ae:27:f9:ff:1b:ff:77:e2:9f:8d:f8:37:67:94:f9:3e:d6:9c:
         a4:08:c3:7e:c4:db:57:b0:36:3e:39:93:f4:c9:3c:e2:4c:07:
         4e:5b:7a:af:27:2f:ad:53:31:c5:e1:bf:68:f8:b9:f3:56:fb:
         dc:f3:5f:65:77:52:13:90:99:2d:6e:82:76:6f:22:f7:81:54:
         53:5e:56:47:77:af:4b:72:42:4f:46:06:ec:1a:93:80:8a:51:
         3d:58:44:5e:08:c4:e0:a7:f0:4b:5a:4e:8e:72:bd:a4:6a:23:
         44:c3:f9:59:2e:27:de:2e:b6:30:fc:ab:e6:2b:cb:31:a4:e8:
         35:fd:f7:2f:1f:0e:70:01:48:6b:b0:e6:20:1c:07:0f:4b:8e:
         b4:a0:c2:01:22:52:1c:d8:23:c5:e2:d4:18:66:1d:0b:64:26:
         29:ab:5b:48:01:f7:0f:f5:cd:a0:ae:a9:a3:1d:50:73:0c:d1:
         6f:de:dd:21
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:25 2024 by rpki-client on console-fra.rpki-client.org