Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/VhNeGK6tyXiTdJDj-xSsat0ngpU.roa
File:                     VhNeGK6tyXiTdJDj-xSsat0ngpU.roa (raw, json)
Hash identifier:          a9pgvDGP1anqmTBXHK8Ke7Oho+tJMJidhLlQIytmAUg=
Subject key identifier:   56:13:5E:18:AE:AD:C9:78:93:74:90:E3:FB:14:AC:6A:DD:27:82:95
Certificate issuer:       /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial:       177EF958
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/VhNeGK6tyXiTdJDj-xSsat0ngpU.roa
Signing time:             Sat 05 Mar 2022 21:46:47 +0000
ROA not before:           Sat 05 Mar 2022 21:46:47 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60643
IP address blocks:        80.250.167.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 394197336 (0x177ef958)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
        Validity
            Not Before: Mar  5 21:46:47 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=56135e18aeadc978937490e3fb14ac6add278295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:20:c5:f9:b8:cb:6e:68:0e:01:f8:2d:47:f0:
                    31:b1:64:16:a4:4c:c9:02:0f:42:ed:77:0a:46:f3:
                    1c:68:2e:37:06:72:61:79:1d:e2:9a:3b:37:6a:dc:
                    99:91:95:8b:1c:0a:b2:c9:77:2d:44:28:18:37:b6:
                    28:71:d3:1d:36:11:58:64:ee:2c:51:c3:75:72:ed:
                    c3:39:42:59:ef:df:9c:80:01:22:26:f2:62:84:61:
                    4b:06:c0:fb:06:4d:4c:1f:bd:09:c1:8f:b9:ee:d7:
                    2a:16:dc:31:6e:5e:6d:33:80:f1:39:74:55:f8:ab:
                    18:6c:01:a5:0c:60:0b:b7:c5:41:bd:7b:b5:6e:a6:
                    fb:bd:c2:53:6a:ce:7b:0f:4a:08:de:97:0f:c9:00:
                    d9:73:ca:23:27:96:cf:f3:28:79:42:c1:0b:50:08:
                    e7:ec:05:29:78:39:a5:ea:36:9e:1d:b9:94:6a:af:
                    15:ed:28:56:07:98:8f:d9:ad:5e:87:7f:15:76:21:
                    05:ca:40:b4:b5:ca:4c:d1:5e:29:72:97:29:27:05:
                    c4:ab:e7:10:66:a0:cf:2a:ed:6b:f3:b8:01:14:ea:
                    76:b2:74:ad:a3:4d:7b:4b:c4:a2:34:30:30:98:2c:
                    76:28:b9:6f:e6:fd:e0:6c:90:67:8a:e3:b2:b8:ae:
                    dc:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:13:5E:18:AE:AD:C9:78:93:74:90:E3:FB:14:AC:6A:DD:27:82:95
            X509v3 Authority Key Identifier:
                keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/VhNeGK6tyXiTdJDj-xSsat0ngpU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.250.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:c9:5b:e4:54:9f:cc:1f:4e:48:9c:0a:6d:74:f0:e4:1b:22:
         cd:9d:5e:68:24:5d:14:f4:f1:44:64:e1:f6:6a:08:51:ad:37:
         97:dc:64:81:0e:e2:3f:90:32:d9:6f:d7:dc:92:bd:60:27:8c:
         22:a2:42:42:2d:7c:60:ae:96:7b:28:25:54:dc:58:d5:bf:95:
         16:b0:da:40:82:6b:d7:49:d5:0b:1e:92:35:c4:30:d9:41:26:
         df:d2:5d:05:75:52:b5:03:b6:d9:2f:a3:5f:30:99:e7:12:ef:
         8f:e3:98:98:f3:81:08:84:75:b2:dc:39:c8:4e:35:d6:ae:76:
         4e:e1:ef:ac:fe:80:3f:07:2e:40:3d:7a:19:60:aa:ec:1b:ce:
         cd:3b:c8:33:a6:25:ba:e9:a9:d8:05:c4:5f:92:4d:40:93:00:
         20:2e:cb:8b:da:ea:da:4e:ae:3b:8d:90:8d:cc:a0:7d:7a:ee:
         e7:6c:0c:16:d3:58:c7:82:93:53:80:8e:7c:06:43:ec:8c:c4:
         b1:b0:15:41:ca:a6:e5:2a:5a:f2:54:25:0d:f9:55:67:e6:c6:
         a9:3a:4d:bd:3e:58:fb:4c:a0:9c:c3:87:d7:34:a9:32:1d:a3:
         58:0f:5a:a4:76:ec:94:b8:63:34:ec:5e:02:47:02:f2:03:89:
         d4:cf:69:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:46 2024 by rpki-client on console-fra.rpki-client.org