Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/KC6rLdLGsb9q6qjsEVmuKZ4veWY.roa
File:                     KC6rLdLGsb9q6qjsEVmuKZ4veWY.roa (raw, json)
Hash identifier:          RlGR+XxBcoJEgVayO8AsSjGQCyEkQg7EyuIa1p+NmgA=
Subject key identifier:   28:2E:AB:2D:D2:C6:B1:BF:6A:EA:A8:EC:11:59:AE:29:9E:2F:79:66
Certificate issuer:       /CN=830555f011be5e241eb0b425de5fd86cc6834a54
Certificate serial:       381DA1B3
Authority key identifier: 83:05:55:F0:11:BE:5E:24:1E:B0:B4:25:DE:5F:D8:6C:C6:83:4A:54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gwVV8BG-XiQesLQl3l_YbMaDSlQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/KC6rLdLGsb9q6qjsEVmuKZ4veWY.roa
Signing time:             Sat 01 Jan 2022 03:59:12 +0000
ROA not before:           Sat 01 Jan 2022 03:59:12 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     199803
IP address blocks:        188.92.44.0/24 maxlen: 24
                          188.92.40.0/24 maxlen: 24
                          188.92.41.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 941466035 (0x381da1b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=830555f011be5e241eb0b425de5fd86cc6834a54
        Validity
            Not Before: Jan  1 03:59:12 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=282eab2dd2c6b1bf6aeaa8ec1159ae299e2f7966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:96:37:a1:e7:1b:89:1a:83:2f:ab:f8:a6:bf:
                    2b:19:a9:c9:fd:61:ea:bd:02:79:13:47:31:c1:5c:
                    74:f0:e5:db:d0:f7:5c:74:b5:24:0c:97:a3:c7:37:
                    d7:a6:dd:58:ed:d6:78:20:cf:a0:02:5c:b0:28:99:
                    db:ee:82:09:0e:b1:ed:5b:44:cc:3e:14:6c:c5:47:
                    41:42:af:b8:6d:1b:e7:f4:6f:dc:94:57:78:86:60:
                    49:9f:ae:da:3a:dd:b9:7c:aa:2c:23:38:92:b3:89:
                    13:32:b2:f6:55:2e:06:60:73:ca:bf:77:d8:84:f0:
                    5c:6b:c4:d9:0a:05:23:a3:b6:38:05:f9:ba:dd:80:
                    95:cb:2f:68:87:b0:cf:2a:47:bf:cf:f7:62:5f:4c:
                    d9:00:6e:ac:23:a1:a0:5b:3e:66:4a:57:73:7d:fe:
                    ea:a7:4a:41:9d:2b:cf:44:22:36:2b:38:e2:3c:3a:
                    9c:1c:69:b5:2a:9f:47:81:f0:cc:04:d2:90:8e:44:
                    8c:56:fc:03:ca:07:28:bc:a3:a7:66:1b:6c:b1:26:
                    c0:19:0a:0f:5f:b3:5f:0b:a5:e9:87:07:a6:f2:4e:
                    8b:02:76:f9:64:14:30:e9:79:e8:e0:ec:4c:3d:24:
                    33:7e:7f:02:3e:07:f5:53:2e:e0:d5:c9:f8:16:3c:
                    17:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:2E:AB:2D:D2:C6:B1:BF:6A:EA:A8:EC:11:59:AE:29:9E:2F:79:66
            X509v3 Authority Key Identifier:
                keyid:83:05:55:F0:11:BE:5E:24:1E:B0:B4:25:DE:5F:D8:6C:C6:83:4A:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwVV8BG-XiQesLQl3l_YbMaDSlQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/KC6rLdLGsb9q6qjsEVmuKZ4veWY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/gwVV8BG-XiQesLQl3l_YbMaDSlQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.92.40.0/23
                  188.92.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:41:53:48:aa:b2:30:dc:52:4a:5c:8c:40:91:54:f7:dd:8a:
         5c:d5:03:81:c3:e5:9e:ce:76:ab:ca:46:d2:37:99:33:34:06:
         20:0e:41:47:cd:f1:ad:79:d5:a1:0a:a7:20:a4:42:fd:67:5b:
         53:fb:e2:47:9f:99:c0:96:bb:b8:b3:03:bb:7b:b7:4b:b5:14:
         21:48:4e:e3:3c:75:1a:70:b0:2a:f2:22:b7:ef:1c:e3:2b:46:
         88:be:9e:78:41:3a:c8:8a:a7:d7:2f:5c:a0:9c:05:bd:65:dd:
         7e:43:95:fa:32:5f:65:89:df:e2:5f:19:56:4c:96:74:12:dd:
         53:4e:ca:d5:94:c4:4d:a4:76:62:8c:22:06:cb:6b:07:80:61:
         73:91:86:26:00:1a:d1:5f:c0:59:d0:17:0c:cb:5f:a5:07:32:
         98:fa:cb:c3:e1:7b:40:96:2f:6c:b9:0d:ec:cc:51:5e:79:e1:
         d0:a0:67:8e:70:d6:c1:57:28:26:99:79:84:ec:9f:0b:86:c2:
         6b:84:9a:71:7e:d3:c3:fd:10:de:62:1d:71:e0:03:4f:9a:99:
         d8:4e:75:3d:88:29:d0:76:81:1e:25:4f:38:95:e6:9a:d6:b6:
         41:bb:de:f5:34:81:ec:d5:40:ec:df:19:35:e7:57:8a:f0:1b:
         c4:bc:e0:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:13 2024 by rpki-client on console-fra.rpki-client.org