Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/9Q-O39a5W4pv1RzAhtoyEwU6GxU.roa
File:                     9Q-O39a5W4pv1RzAhtoyEwU6GxU.roa (raw, json)
Hash identifier:          oyrWAqzMPNb7nylPV8gznnpdHgZgGARN8OvGN643wjA=
Subject key identifier:   F5:0F:8E:DF:D6:B9:5B:8A:6F:D5:1C:C0:86:DA:32:13:05:3A:1B:15
Certificate issuer:       /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial:       0909C083
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/9Q-O39a5W4pv1RzAhtoyEwU6GxU.roa
Signing time:             Wed 11 May 2022 18:42:02 +0000
ROA not before:           Wed 11 May 2022 18:42:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210993
IP address blocks:        84.54.36.0/24 maxlen: 24
                          84.54.37.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 151634051 (0x909c083)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
        Validity
            Not Before: May 11 18:42:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f50f8edfd6b95b8a6fd51cc086da3213053a1b15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b8:28:e7:c6:d8:58:b5:b2:5f:09:84:30:48:
                    7a:f3:90:14:4e:72:91:35:bd:7c:e8:00:fb:e7:62:
                    b6:2c:75:14:69:e0:ea:1b:c9:4c:95:52:30:7d:74:
                    2a:3d:52:2b:9c:69:5b:68:71:fa:f7:98:49:e9:30:
                    8f:7a:7b:32:a1:bc:68:7b:84:30:73:e2:cf:f0:b9:
                    4c:98:4f:08:32:12:76:36:ce:10:7f:20:4d:9c:61:
                    57:20:c5:fe:3c:f2:47:9f:8a:3d:08:42:5a:cd:ba:
                    60:a8:1a:4e:c0:13:bd:5a:e5:d0:e8:95:c1:ab:f7:
                    24:ff:15:a4:23:03:c6:41:28:ac:b0:bc:49:4f:d7:
                    c6:fa:60:1f:e7:7c:96:0b:fc:31:1d:30:f0:62:8f:
                    c7:7d:73:38:8c:a4:e9:ca:97:a4:31:b3:a4:19:48:
                    16:df:9a:7b:64:64:62:01:c0:b7:de:d7:3b:b4:76:
                    3e:0a:a1:58:b3:5b:7b:0c:73:cf:fe:b7:bb:11:78:
                    61:01:dd:33:c0:c2:c9:a3:67:15:b3:f2:01:4f:66:
                    1e:29:88:5d:e9:0b:df:4e:1f:6f:75:8f:28:41:1a:
                    08:9b:a3:89:7d:e7:f3:80:71:8f:92:a8:f6:a6:a7:
                    41:d2:ad:ae:d7:01:26:2b:17:f8:8f:5f:2c:f9:7c:
                    9e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:0F:8E:DF:D6:B9:5B:8A:6F:D5:1C:C0:86:DA:32:13:05:3A:1B:15
            X509v3 Authority Key Identifier:
                keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/9Q-O39a5W4pv1RzAhtoyEwU6GxU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  84.54.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         82:b2:93:01:c3:98:52:ba:0f:29:35:5a:9e:62:4f:8b:39:21:
         6f:0c:30:29:f0:09:8a:c9:01:84:51:56:d5:b9:80:04:56:c5:
         e5:69:1c:f0:91:bd:32:3a:65:8d:5d:af:d3:52:20:b1:4d:24:
         05:fd:c3:92:24:70:50:6a:9e:56:60:e1:43:04:90:3d:41:20:
         fc:1d:89:39:67:18:c7:3e:e4:7d:a4:18:32:e2:77:ec:2b:fb:
         c5:4f:b6:5d:d8:99:a8:53:bc:b0:d9:e8:2c:84:f0:56:82:78:
         c1:28:8d:e5:02:c9:d7:cc:99:97:86:8e:21:b3:eb:04:52:41:
         d3:72:6d:a6:8d:8d:39:04:34:c5:4f:36:a9:43:d7:0b:9f:a6:
         35:40:0b:f6:80:2b:5c:de:0b:ab:0c:a0:9d:4f:35:9e:ea:d3:
         9f:51:6c:b3:11:e7:c0:a0:cb:b5:b2:5c:72:c8:80:6b:3c:0a:
         2f:9b:58:da:5e:39:b7:0f:d5:72:b5:83:db:35:60:0b:59:2c:
         23:e2:b3:a5:41:35:73:58:90:c8:e1:be:86:fb:7a:4d:0b:4e:
         f7:36:63:c6:ac:98:04:73:fc:8e:12:34:17:bf:7b:b8:02:65:
         e1:a1:4b:8e:56:41:f6:64:6a:c3:f6:95:b6:d8:51:85:ce:68:
         e0:fc:ee:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:58 2024 by rpki-client on console-ams.rpki-client.org