Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/1b81e1-7188-4d9f-b4ef-83706378c576/1/gAIuNTpTMfyRYiiKq-H4seySoNI.roa
File:                     gAIuNTpTMfyRYiiKq-H4seySoNI.roa (raw, json)
Hash identifier:          2b+gppdUxTGwxyydWXcIuAJwBlhLC4N/qy076vjO1l4=
Subject key identifier:   80:02:2E:35:3A:53:31:FC:91:62:28:8A:AB:E1:F8:B1:EC:92:A0:D2
Certificate issuer:       /CN=7e909fea81e398fed93049dd7a007efd69735563
Certificate serial:       0182120C92192675434B8E77C8E7749376EF
Authority key identifier: 7E:90:9F:EA:81:E3:98:FE:D9:30:49:DD:7A:00:7E:FD:69:73:55:63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fpCf6oHjmP7ZMEndegB-_WlzVWM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/1b81e1-7188-4d9f-b4ef-83706378c576/1/gAIuNTpTMfyRYiiKq-H4seySoNI.roa
Signing time:             Mon 18 Jul 2022 16:03:09 +0000
ROA not before:           Mon 18 Jul 2022 16:03:09 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210719
IP address blocks:        94.103.181.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:12:0c:92:19:26:75:43:4b:8e:77:c8:e7:74:93:76:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e909fea81e398fed93049dd7a007efd69735563
        Validity
            Not Before: Jul 18 16:03:09 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=80022e353a5331fc9162288aabe1f8b1ec92a0d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:54:fc:a4:1b:fb:05:55:9b:f6:04:22:97:f6:
                    1f:71:93:28:db:93:9b:03:7a:b2:37:13:c0:8a:d4:
                    d9:7e:49:d8:01:e9:18:d9:b5:72:db:df:b1:d7:7b:
                    c0:e7:3e:a6:ca:9e:fd:10:f4:3d:13:74:50:87:d6:
                    2c:86:65:1a:43:41:59:9f:0b:44:6e:c1:2b:57:4d:
                    61:ca:34:dd:5a:cf:8e:6c:e7:3e:21:cd:db:8a:ac:
                    5b:07:5e:f4:94:5b:d2:31:6c:04:09:4e:0e:72:e9:
                    12:ef:f4:27:4d:bd:ad:6d:8b:88:dc:bd:db:3d:39:
                    26:ab:50:b2:e4:fc:d0:bf:bd:39:88:f1:a3:14:5e:
                    00:e1:83:41:77:28:bb:6e:b6:3f:44:f0:8b:b4:1f:
                    1e:f0:19:6a:e0:f7:4f:ea:7f:34:7a:15:16:7e:3b:
                    13:2f:f6:00:37:fd:9a:47:3e:de:a9:0b:cf:bb:0b:
                    31:ae:df:b9:e4:f0:ca:27:09:4e:58:97:7e:13:0b:
                    a1:54:e9:cb:ed:e4:03:3c:24:08:c8:b8:0d:d6:b5:
                    0e:69:89:6e:72:14:f9:cd:59:ef:69:54:ce:0e:98:
                    92:2e:51:fc:bb:6a:3f:1b:a4:27:58:98:f1:74:f1:
                    3a:b4:19:59:42:4c:73:ce:f5:73:0d:90:74:5d:ca:
                    c9:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:02:2E:35:3A:53:31:FC:91:62:28:8A:AB:E1:F8:B1:EC:92:A0:D2
            X509v3 Authority Key Identifier:
                keyid:7E:90:9F:EA:81:E3:98:FE:D9:30:49:DD:7A:00:7E:FD:69:73:55:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fpCf6oHjmP7ZMEndegB-_WlzVWM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/1b81e1-7188-4d9f-b4ef-83706378c576/1/gAIuNTpTMfyRYiiKq-H4seySoNI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/1b81e1-7188-4d9f-b4ef-83706378c576/1/fpCf6oHjmP7ZMEndegB-_WlzVWM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.103.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:2a:64:6b:34:4a:9c:6f:69:ca:ed:dd:f8:b1:2c:2f:cb:62:
         da:4c:2a:11:77:3b:4f:94:9d:32:bf:7c:2a:41:e4:9f:54:23:
         0d:49:f7:be:4d:3f:98:b0:24:91:75:55:43:6c:ef:60:d6:83:
         38:22:de:9f:51:08:34:04:37:b9:ba:71:0e:56:8f:d8:bb:e8:
         b5:9f:2e:08:92:e3:96:2e:eb:c3:a8:75:da:8c:8c:0c:4f:e6:
         54:50:54:e7:2f:21:42:d2:73:5b:db:b7:97:ac:18:04:77:f6:
         1a:ec:59:de:5a:91:1c:63:ea:e4:21:a6:a6:38:ea:33:a8:b9:
         ba:ae:0f:4b:e1:b0:82:89:ad:f4:06:d3:c9:c5:3b:b4:51:ac:
         1c:37:90:ec:f4:a2:f9:01:c2:36:cc:5d:bc:91:54:11:04:2e:
         d9:20:71:55:e4:b9:b5:8e:e3:43:ee:a2:7f:ec:0c:40:33:ea:
         1e:95:44:b8:56:3c:f2:72:52:20:8d:53:06:3b:6b:a7:5d:0e:
         4e:d3:cb:e3:83:1c:f2:dc:22:f1:29:a1:03:1b:07:67:88:b8:
         56:e5:97:61:76:24:1e:29:19:9f:32:b5:d6:da:73:4f:54:0a:
         4a:41:ef:56:95:05:ed:91:c6:ca:a2:b8:34:3c:b1:92:f1:ec:
         76:1c:5b:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:37 2024 by rpki-client on console-ams.rpki-client.org