Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/T8ELVGiYuUV9hA87la83uoUfz_E.roa
File:                     T8ELVGiYuUV9hA87la83uoUfz_E.roa (raw, json)
Hash identifier:          3yD+4T53lPMuKDcozWscf+/ESafpCyIQpOqdWs56zTc=
Subject key identifier:   4F:C1:0B:54:68:98:B9:45:7D:84:0F:3B:95:AF:37:BA:85:1F:CF:F1
Certificate issuer:       /CN=e0e3976d9ecb8309a8181fbd025ca52fef161999
Certificate serial:       01854DD94083CF1E0A67F29A936D46E0753F
Authority key identifier: E0:E3:97:6D:9E:CB:83:09:A8:18:1F:BD:02:5C:A5:2F:EF:16:19:99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4OOXbZ7LgwmoGB-9AlylL-8WGZk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/T8ELVGiYuUV9hA87la83uoUfz_E.roa
Signing time:             Mon 26 Dec 2022 09:52:41 +0000
ROA not before:           Mon 26 Dec 2022 09:52:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200348
IP address blocks:        185.179.89.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:4d:d9:40:83:cf:1e:0a:67:f2:9a:93:6d:46:e0:75:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0e3976d9ecb8309a8181fbd025ca52fef161999
        Validity
            Not Before: Dec 26 09:52:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4fc10b546898b9457d840f3b95af37ba851fcff1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:56:84:e4:e7:4e:bf:58:ea:6a:51:98:c8:86:
                    3e:56:a2:80:cf:4f:ea:6b:d8:f9:cd:90:f9:15:8c:
                    18:7c:20:d2:96:87:d7:1c:85:2e:42:96:30:a0:37:
                    9f:a7:09:10:73:ec:3d:41:42:3f:22:6d:fa:69:da:
                    1c:f4:f3:4b:cf:bd:dc:c5:e3:d2:98:29:26:e2:29:
                    6e:2a:f5:3f:7d:de:12:ef:73:84:93:c6:a0:6c:0a:
                    61:a1:a4:b7:0b:12:e1:87:39:5b:e6:f6:88:6d:a4:
                    65:bb:8e:a9:cb:40:09:60:b6:82:4b:ae:8b:4f:ce:
                    d0:db:77:6b:4f:c6:69:96:c3:e4:25:c2:61:be:bf:
                    a4:bf:4e:19:db:b6:b1:de:45:08:4e:ec:3d:c4:20:
                    18:ce:e6:e1:b5:bc:dd:9e:a8:8a:86:d0:c9:1d:9e:
                    b9:e0:25:37:46:e3:42:09:1b:a8:ff:2e:2d:75:61:
                    82:0a:72:6d:8d:82:4d:73:77:46:ef:01:7d:f3:a3:
                    98:f1:cb:ae:28:ae:e3:81:d8:86:ff:c9:5b:7d:cc:
                    44:73:ca:b9:9e:4c:14:3d:02:6f:df:a1:c8:bb:d9:
                    9d:28:96:24:86:db:93:f9:76:69:16:dc:d5:1b:e7:
                    85:82:02:c9:6a:1c:e2:66:20:11:6e:a5:f0:71:1a:
                    23:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:C1:0B:54:68:98:B9:45:7D:84:0F:3B:95:AF:37:BA:85:1F:CF:F1
            X509v3 Authority Key Identifier:
                keyid:E0:E3:97:6D:9E:CB:83:09:A8:18:1F:BD:02:5C:A5:2F:EF:16:19:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OOXbZ7LgwmoGB-9AlylL-8WGZk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/T8ELVGiYuUV9hA87la83uoUfz_E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/4OOXbZ7LgwmoGB-9AlylL-8WGZk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.179.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:f1:14:54:12:37:3a:d5:b1:50:ea:a7:e1:65:89:7d:86:86:
         e4:fc:87:3f:1e:f1:1a:77:ef:7d:7c:89:6a:e1:3b:63:24:5f:
         bf:03:fb:51:8d:b4:68:e9:90:ee:af:95:a2:29:ab:f7:8b:1f:
         bc:be:77:44:9f:4f:8b:a0:0c:6b:f6:65:2d:95:19:63:79:20:
         12:e4:9f:53:e1:4b:c0:dd:83:0f:2d:41:58:d3:a3:66:ef:98:
         5f:c3:72:b7:3e:8f:be:29:34:fc:6e:47:b6:7e:74:a2:d0:51:
         26:58:c1:b6:40:7a:89:9e:1c:d1:8b:de:70:a2:3d:f1:ba:26:
         ee:42:13:9f:e1:4f:e6:8b:fc:5d:fc:ab:b4:d2:05:b4:b5:d7:
         03:76:da:6a:a3:86:9f:9d:48:30:a8:0b:e7:78:5b:e5:76:87:
         5b:a0:c3:82:2e:67:4f:fd:06:41:88:48:37:0b:97:f3:ac:3e:
         b9:14:1d:4b:cf:23:b7:61:f3:ed:58:99:99:bd:89:f7:87:20:
         97:e8:46:24:8d:ca:87:fe:c9:74:9f:81:cc:ba:c3:bd:36:8e:
         9e:cd:c0:c6:b8:f5:1c:a9:1c:8a:1d:07:0d:24:28:4c:77:f1:
         5a:a7:4c:d5:96:94:91:e6:44:31:de:17:e6:b0:43:d2:b7:c7:
         20:d4:2c:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:18 2024 by rpki-client on console-ams.rpki-client.org