Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/int1Gi1MKBANsqrr7VpXDlWKJ3Y.roa
File:                     int1Gi1MKBANsqrr7VpXDlWKJ3Y.roa (raw, json)
Hash identifier:          uvOdyvqiexNqJlrltpdJSKHL44tQNmZmFe6plvyLY3E=
Subject key identifier:   8A:7B:75:1A:2D:4C:28:10:0D:B2:AA:EB:ED:5A:57:0E:55:8A:27:76
Certificate issuer:       /CN=2e43dac8ea55693439dd1b8b4812ba71834f1031
Certificate serial:       034071CA
Authority key identifier: 2E:43:DA:C8:EA:55:69:34:39:DD:1B:8B:48:12:BA:71:83:4F:10:31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LkPayOpVaTQ53RuLSBK6cYNPEDE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/int1Gi1MKBANsqrr7VpXDlWKJ3Y.roa
Signing time:             Sat 01 Jan 2022 08:01:18 +0000
ROA not before:           Sat 01 Jan 2022 08:01:18 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     34984
IP address blocks:        88.214.41.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54555082 (0x34071ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e43dac8ea55693439dd1b8b4812ba71834f1031
        Validity
            Not Before: Jan  1 08:01:18 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8a7b751a2d4c28100db2aaebed5a570e558a2776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b8:1b:86:23:54:0a:dc:e1:8a:f8:07:55:22:
                    99:96:77:48:57:95:17:ed:5b:62:31:8f:d1:bc:fb:
                    b9:50:f3:bb:7a:42:d6:2d:24:ad:d3:0f:f4:25:ac:
                    13:50:a7:bc:3a:89:ba:1e:54:2c:06:3a:b5:d6:07:
                    c1:59:ab:89:8c:28:52:bf:75:e5:49:13:8f:f3:09:
                    13:32:f2:e7:63:0c:89:b7:cc:bd:f1:3b:63:27:1f:
                    3e:3e:6f:08:9c:bb:3a:26:d3:d1:85:70:03:7e:23:
                    73:10:02:bc:4a:5a:ba:c7:93:12:ed:87:af:5d:8a:
                    a1:dc:af:aa:bb:ee:20:8f:c5:ce:79:e0:d4:6a:f4:
                    fc:fa:de:74:d1:cd:d5:1b:8d:c7:80:13:0b:9c:3d:
                    ad:5f:83:be:b2:71:16:e2:9d:8f:e9:c9:72:d3:32:
                    9b:d1:63:3d:52:16:e6:a0:bf:83:6c:51:36:81:27:
                    7b:67:c0:31:d4:13:1b:f8:15:ae:b2:47:79:18:5b:
                    3c:39:4d:49:48:42:15:dc:37:4a:9e:92:e0:28:b7:
                    aa:91:4b:65:81:99:47:6f:8b:af:43:47:d0:ea:16:
                    1d:52:e5:46:dc:b5:15:88:86:7a:03:ad:36:84:6e:
                    57:fe:b9:8d:7e:a5:7a:b9:e4:d4:ea:e7:23:28:a2:
                    f5:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:7B:75:1A:2D:4C:28:10:0D:B2:AA:EB:ED:5A:57:0E:55:8A:27:76
            X509v3 Authority Key Identifier:
                keyid:2E:43:DA:C8:EA:55:69:34:39:DD:1B:8B:48:12:BA:71:83:4F:10:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkPayOpVaTQ53RuLSBK6cYNPEDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/int1Gi1MKBANsqrr7VpXDlWKJ3Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/LkPayOpVaTQ53RuLSBK6cYNPEDE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  88.214.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:61:cc:3d:7f:76:bf:84:cf:87:29:3e:ae:87:90:8f:79:88:
         64:97:c3:be:87:dc:1a:24:db:ba:42:ea:4d:5f:ef:89:10:21:
         e8:0f:8d:ea:d2:8e:bc:77:27:11:1c:3e:af:72:2b:4f:a7:08:
         45:28:14:84:78:35:b0:30:eb:e8:0e:71:09:d0:48:cf:d4:23:
         d5:1b:87:69:7d:49:80:52:e0:d5:62:51:12:c8:40:97:fd:61:
         ee:86:67:4f:ee:59:1e:e6:a8:59:ea:d1:40:0b:ff:bf:a8:fd:
         9f:42:c8:0a:f0:0e:c3:56:d5:d7:fa:2a:8d:62:40:85:4e:e7:
         6f:4e:db:85:a0:f7:df:3f:77:db:e8:9e:48:12:02:a9:e1:5f:
         ba:3e:fa:f8:8d:58:19:51:36:ef:3e:1a:68:3d:d3:29:65:80:
         b9:d0:7e:d9:63:30:46:96:dc:08:7d:9c:41:04:ae:13:f5:a0:
         eb:c8:68:82:14:96:f8:6e:41:da:10:dc:db:af:2b:c0:45:05:
         07:f3:a2:2c:45:92:d4:69:c4:23:95:8c:df:ad:c7:80:e2:f7:
         24:7f:29:c9:5b:d0:28:3b:de:d6:b2:ac:f8:2a:e3:f7:df:e1:
         88:d8:9b:9e:77:80:84:39:a6:66:c4:8c:61:14:97:e2:ae:17:
         16:a9:d1:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:45 2024 by rpki-client on console-fra.rpki-client.org