Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/53uODfQvoqvbDK-3rJmetUYJSm8.roa
File:                     53uODfQvoqvbDK-3rJmetUYJSm8.roa (raw, json)
Hash identifier:          UXwfVdjWqb8KmEf+tUVxhaDe0A+YBrLGr9h7aQo4UuM=
Subject key identifier:   E7:7B:8E:0D:F4:2F:A2:AB:DB:0C:AF:B7:AC:99:9E:B5:46:09:4A:6F
Certificate issuer:       /CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Certificate serial:       018558D5C1A0ECBC6D04EB511442347F5146
Authority key identifier: 4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/53uODfQvoqvbDK-3rJmetUYJSm8.roa
Signing time:             Wed 28 Dec 2022 13:04:41 +0000
ROA not before:           Wed 28 Dec 2022 13:04:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     57391
IP address blocks:        94.139.176.0/20 maxlen: 20
                          94.139.191.0/24 maxlen: 24
                          109.162.254.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:58:d5:c1:a0:ec:bc:6d:04:eb:51:14:42:34:7f:51:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
        Validity
            Not Before: Dec 28 13:04:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e77b8e0df42fa2abdb0cafb7ac999eb546094a6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4f:b0:9b:fe:48:5e:c7:dd:a6:f8:e7:47:9e:
                    27:a1:14:e2:60:c2:6c:35:60:05:f8:26:79:c1:4f:
                    8d:3c:29:1a:40:f9:d1:bd:43:f0:65:6f:59:8e:8e:
                    07:38:66:d3:ac:26:cf:b8:59:ce:8e:58:1b:a5:56:
                    5b:d3:d2:62:dd:14:cc:34:41:a3:52:a0:87:58:7f:
                    e1:d4:7d:83:87:7e:57:cd:20:c4:4f:3a:3d:5e:c9:
                    79:a1:da:c1:3d:26:72:a0:a8:74:f8:11:0f:7e:87:
                    7d:d9:04:48:0c:8a:cf:4b:b0:61:e6:10:bb:4a:ad:
                    f6:8f:5c:66:20:3b:85:38:fb:7c:af:b9:0c:a9:27:
                    9c:ec:be:4c:c2:ee:73:55:77:dd:a1:b0:6e:fd:90:
                    fe:d5:25:68:16:86:1f:42:86:90:52:44:33:17:c7:
                    37:54:58:8e:c9:64:c6:fb:bc:42:64:bb:6a:be:a5:
                    49:63:12:ca:4e:db:8b:0f:88:3f:f7:1d:32:fd:ef:
                    db:59:f0:2e:f4:80:f1:ee:e9:1c:ca:e4:46:94:d5:
                    6e:d0:ed:12:b1:8b:f5:5e:50:8b:9e:6d:aa:ad:5c:
                    ae:91:e8:19:f9:30:6c:dc:42:7b:97:08:8f:89:fe:
                    67:73:ef:e4:a0:41:3e:ec:19:6d:34:00:69:75:4e:
                    f9:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:7B:8E:0D:F4:2F:A2:AB:DB:0C:AF:B7:AC:99:9E:B5:46:09:4A:6F
            X509v3 Authority Key Identifier:
                keyid:4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/53uODfQvoqvbDK-3rJmetUYJSm8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.139.176.0/20
                  109.162.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b5:d3:54:ed:83:1c:f1:21:1c:af:54:28:4a:13:47:3a:76:2e:
         88:bb:07:47:c1:61:b0:13:70:00:53:6f:e7:d6:61:a8:11:0d:
         64:da:0d:d6:94:fa:30:fa:2f:8f:51:6e:31:67:11:a6:bc:b8:
         01:bb:83:57:9b:b5:86:2c:e0:12:0b:ad:f8:a9:41:06:5c:42:
         0c:8b:53:bd:98:dc:fb:42:9f:0d:9f:f8:8c:8e:af:3c:ef:70:
         57:c4:62:f1:96:5b:fe:75:0f:5e:ea:60:dc:7b:2e:f2:2d:79:
         10:e3:c0:d0:88:7a:eb:6b:f8:03:44:4f:73:0a:fc:d9:ae:0a:
         44:40:03:95:3d:26:0d:17:79:f9:8f:ee:78:8c:6e:e4:45:4d:
         99:f3:f7:56:f6:4e:53:fe:4a:db:75:a8:5a:b4:b9:15:8b:7c:
         04:cd:62:a9:0f:37:4e:9c:65:e8:c5:99:2d:43:60:23:d5:30:
         c5:18:fa:da:06:6c:2e:a1:0b:9f:11:5a:c6:86:86:77:c7:9d:
         88:4e:6c:56:c2:46:f4:8f:f9:39:ff:75:68:67:8a:3a:c6:53:
         6b:a2:84:63:71:80:b3:ea:c3:7b:bf:79:d7:f2:94:4b:56:cc:
         41:ba:d1:00:d8:14:ae:04:0c:40:41:6a:fe:f1:a0:8d:5f:00:
         6e:1a:79:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:52 2024 by rpki-client on console-ams.rpki-client.org