Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/guxpSulYJMaVaz0IXeAdbEh-Fys.roa
File:                     guxpSulYJMaVaz0IXeAdbEh-Fys.roa (raw, json)
Hash identifier:          JXlU7iHhQeaA70J8wndV39GtLKTVfq6/s6K3REro72Q=
Subject key identifier:   82:EC:69:4A:E9:58:24:C6:95:6B:3D:08:5D:E0:1D:6C:48:7E:17:2B
Certificate issuer:       /CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485
Certificate serial:       77DE00
Authority key identifier: 5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/guxpSulYJMaVaz0IXeAdbEh-Fys.roa
Signing time:             Sat 01 Jan 2022 01:57:14 +0000
ROA not before:           Sat 01 Jan 2022 01:57:14 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     35773
IP address blocks:        84.54.148.0/24 maxlen: 24
                          84.54.150.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7855616 (0x77de00)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485
        Validity
            Not Before: Jan  1 01:57:14 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=82ec694ae95824c6956b3d085de01d6c487e172b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6e:89:1f:02:9a:0e:7c:1b:8a:97:ec:1c:7e:
                    66:2d:fd:1a:7a:af:54:98:90:7d:35:62:27:97:74:
                    c7:cd:63:b7:17:e2:fa:91:ee:3e:7f:8b:5b:ae:07:
                    d2:dc:f6:45:e6:12:94:94:b8:bf:13:e4:6d:0c:a5:
                    28:0b:5e:fd:2b:02:e5:b9:fe:a6:eb:df:44:f2:0b:
                    78:c4:64:48:76:5f:e4:f1:3a:25:ad:af:36:56:85:
                    44:c7:10:8a:cc:b5:ae:32:41:6c:6a:77:82:3e:91:
                    97:dc:94:0b:30:59:bf:80:8c:b7:81:9d:03:7a:09:
                    7e:54:42:4d:76:f6:ba:e0:b1:54:36:b9:67:a6:2d:
                    71:7d:62:34:ca:22:6e:d9:7d:41:7a:0f:e8:e6:d7:
                    e1:12:7c:2f:62:f4:e2:e8:c8:4d:ea:00:a8:cf:0a:
                    5d:fc:da:8a:43:bc:87:1e:eb:92:d3:08:3c:89:d8:
                    39:8c:1b:83:10:7d:7b:65:69:f5:62:79:40:03:7a:
                    f5:de:be:54:7d:09:2b:b1:b5:66:ae:db:fe:3d:12:
                    61:d7:bd:ab:39:e8:0c:8a:b0:5d:d0:94:52:7a:6a:
                    80:6c:6a:1e:0a:d8:2f:83:1f:0e:c9:fa:48:c4:33:
                    de:0a:67:04:64:18:90:1f:df:57:da:af:b1:29:46:
                    7d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:EC:69:4A:E9:58:24:C6:95:6B:3D:08:5D:E0:1D:6C:48:7E:17:2B
            X509v3 Authority Key Identifier:
                keyid:5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/guxpSulYJMaVaz0IXeAdbEh-Fys.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  84.54.148.0/24
                  84.54.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:93:8d:c2:6b:f1:93:63:8d:c2:c4:45:18:28:d6:af:53:f4:
         cb:77:aa:32:a8:60:e6:67:4b:f2:85:68:87:91:49:c4:63:83:
         ab:d5:31:23:54:fc:10:f4:c6:07:8e:d1:8f:a1:9f:1c:76:51:
         86:df:b6:e2:59:e9:ec:54:df:1f:ea:32:f2:59:1a:c8:18:cb:
         ee:c4:aa:e2:8c:07:5f:45:34:f0:9d:66:22:bf:28:5f:b0:e2:
         d0:81:6a:a6:20:a5:74:1e:d2:fc:23:bb:5d:80:3c:97:f8:07:
         9a:d6:52:2b:9b:8a:dc:b4:eb:c7:2e:99:f9:95:97:49:20:f7:
         f0:f0:f6:10:db:b2:40:02:54:a0:8b:a0:92:ea:49:f5:6c:fa:
         28:5f:72:76:ea:ff:fe:c3:4b:82:1e:d8:d4:a2:1c:5d:02:de:
         2b:a5:ec:19:22:ac:1e:87:81:2e:21:e8:46:1f:dd:ed:5b:2e:
         e2:1f:c7:48:f1:5a:a4:70:1c:87:a6:56:45:08:63:83:c0:b0:
         b2:a3:a5:68:9c:be:d9:d7:f4:4b:e4:76:6d:d2:da:a9:2d:ef:
         9d:04:f0:5a:96:01:94:6f:01:03:42:75:2e:0a:01:53:d4:5f:
         32:c6:2f:73:40:b5:c9:4e:98:da:84:3e:c2:fe:44:6b:3d:d7:
         e4:ac:fd:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:18 2024 by rpki-client on console-fra.rpki-client.org