Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/8fe938-97e7-4bf1-9b1d-92fcdcfc0e08/1/7vpwqKXC1AxfhZRYQhH_o-BHRJs.roa
File:                     7vpwqKXC1AxfhZRYQhH_o-BHRJs.roa (raw, json)
Hash identifier:          INC41uXZMHJBXKsG3r8gCStzhUKHpGBeaDIbyozvPvY=
Subject key identifier:   EE:FA:70:A8:A5:C2:D4:0C:5F:85:94:58:42:11:FF:A3:E0:47:44:9B
Certificate issuer:       /CN=7ccc95c952551b0f9054c74f7c139043bd3f6211
Certificate serial:       058D3AB8
Authority key identifier: 7C:CC:95:C9:52:55:1B:0F:90:54:C7:4F:7C:13:90:43:BD:3F:62:11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fMyVyVJVGw-QVMdPfBOQQ70_YhE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/8fe938-97e7-4bf1-9b1d-92fcdcfc0e08/1/7vpwqKXC1AxfhZRYQhH_o-BHRJs.roa
Signing time:             Sat 01 Jan 2022 07:01:14 +0000
ROA not before:           Sat 01 Jan 2022 07:01:14 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     9026
IP address blocks:        62.212.0.0/19 maxlen: 24
                          185.120.40.0/22 maxlen: 24
                          2a02:20::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93141688 (0x58d3ab8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ccc95c952551b0f9054c74f7c139043bd3f6211
        Validity
            Not Before: Jan  1 07:01:14 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=eefa70a8a5c2d40c5f8594584211ffa3e047449b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:eb:5d:c5:f3:42:64:07:94:fc:7f:5b:15:e1:
                    2a:1e:23:5a:de:5d:72:58:7a:38:78:d3:b6:fb:b3:
                    89:ab:a8:5e:72:14:e0:4c:c4:da:c3:df:38:2f:ae:
                    6b:6d:5a:68:c5:6c:92:34:bd:ee:eb:48:37:71:97:
                    4b:0e:40:20:c9:bf:58:c6:66:4a:4e:e0:e4:87:a8:
                    d0:32:a4:43:66:96:05:5a:ea:ee:a9:87:73:87:bc:
                    f2:1f:64:f4:6e:b5:a2:1c:e1:46:b2:c8:58:61:49:
                    20:ee:5c:ed:06:56:c2:81:77:b8:90:ad:6f:38:22:
                    d6:ab:ce:39:6a:f3:9e:8d:8c:2f:d6:af:36:fe:9d:
                    37:e4:2f:4e:01:8e:a7:d4:03:f8:d8:be:ab:39:21:
                    c1:4d:d1:f2:0b:cd:b6:5f:0f:2e:fe:77:3a:7e:ee:
                    80:6a:d5:86:83:9b:65:75:41:c2:ec:81:10:ff:dc:
                    2a:81:29:cb:60:46:1a:33:e6:db:a0:f0:48:49:38:
                    eb:1c:c1:22:33:3b:57:9b:c6:8e:ee:94:fb:e1:8c:
                    58:ee:02:e4:d1:ac:69:78:14:43:9f:9d:3d:ab:59:
                    83:7c:f1:8d:0e:71:7e:95:09:55:b6:1a:1e:69:7d:
                    0b:bb:ea:e6:d5:4e:fc:c7:55:c2:5c:6f:b5:9e:97:
                    32:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:FA:70:A8:A5:C2:D4:0C:5F:85:94:58:42:11:FF:A3:E0:47:44:9B
            X509v3 Authority Key Identifier:
                keyid:7C:CC:95:C9:52:55:1B:0F:90:54:C7:4F:7C:13:90:43:BD:3F:62:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fMyVyVJVGw-QVMdPfBOQQ70_YhE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8fe938-97e7-4bf1-9b1d-92fcdcfc0e08/1/7vpwqKXC1AxfhZRYQhH_o-BHRJs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8fe938-97e7-4bf1-9b1d-92fcdcfc0e08/1/fMyVyVJVGw-QVMdPfBOQQ70_YhE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.212.0.0/19
                  185.120.40.0/22
                IPv6:
                  2a02:20::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:5c:7b:c4:6a:82:cf:fd:b7:f4:3a:7f:0c:83:5a:18:28:e0:
         9d:5f:c3:79:e0:09:ab:96:84:22:a3:78:66:05:e0:2e:bb:3c:
         eb:05:64:60:f1:31:a1:88:5e:0a:79:9e:ca:d0:27:1c:22:70:
         54:5b:7f:41:6b:dc:74:40:9d:4f:a6:e7:38:bd:78:6e:7c:50:
         a1:3a:f4:6e:02:11:e5:55:2d:ec:1b:d2:33:b0:a2:b4:c4:33:
         e9:e5:b2:0a:b6:e5:2d:26:e5:02:6c:f4:57:1c:f7:1f:1c:9e:
         64:2e:9a:4a:e0:17:24:99:1e:32:90:71:27:40:dd:8f:fe:fa:
         19:6a:98:ca:11:3e:37:ac:1e:12:bb:ec:fc:d0:1c:80:69:fc:
         8a:a2:4a:83:94:5c:88:d1:56:99:c8:86:5b:46:f1:66:d6:d8:
         22:23:f9:f2:d6:1b:cc:20:2c:35:ab:60:b5:37:82:f8:8d:c3:
         51:44:e4:8c:53:db:e4:e5:88:e0:4b:08:f3:10:9c:b6:87:1f:
         fe:98:8a:36:a3:d7:67:69:28:e7:da:a7:d7:f2:49:af:c3:54:
         55:ee:f6:d9:04:0f:94:4e:2c:b0:ed:c1:41:0c:8a:c6:90:e7:
         71:40:f7:6f:a9:8b:27:de:ee:fc:ce:d7:2f:8f:86:60:e6:4e:
         57:d1:72:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:36 2024 by rpki-client on console-fra.rpki-client.org