Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/cEmWuEvmIYfRDSyI2VLbc_rYNlo.roa
File:                     cEmWuEvmIYfRDSyI2VLbc_rYNlo.roa (raw, json)
Hash identifier:          fuHfRPlQzX8iN7CGcfZF/xWmPnOEgsVUQn+8Mfmg6Vo=
Subject key identifier:   70:49:96:B8:4B:E6:21:87:D1:0D:2C:88:D9:52:DB:73:FA:D8:36:5A
Certificate issuer:       /CN=2410e4d1182515c47df36a1001b7f681e2dcf414
Certificate serial:       01DFF8D4
Authority key identifier: 24:10:E4:D1:18:25:15:C4:7D:F3:6A:10:01:B7:F6:81:E2:DC:F4:14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JBDk0RglFcR982oQAbf2geLc9BQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/cEmWuEvmIYfRDSyI2VLbc_rYNlo.roa
Signing time:             Sat 01 Jan 2022 11:03:54 +0000
ROA not before:           Sat 01 Jan 2022 11:03:54 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49591
IP address blocks:        91.213.55.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31455444 (0x1dff8d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2410e4d1182515c47df36a1001b7f681e2dcf414
        Validity
            Not Before: Jan  1 11:03:54 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=704996b84be62187d10d2c88d952db73fad8365a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:58:cd:64:97:53:91:dc:4d:a3:16:e6:ef:1d:
                    b2:29:32:26:dc:90:c6:1c:48:bf:50:f3:03:2a:ae:
                    e2:0e:0d:72:4e:bb:14:2f:de:e1:af:03:43:ff:4a:
                    17:0c:02:bd:99:76:f3:3e:09:70:02:f3:68:8a:57:
                    d8:07:ab:51:15:79:f7:12:a0:c3:2a:31:e5:50:ab:
                    ad:3e:35:13:30:04:69:59:21:21:ce:3c:b4:09:ec:
                    c1:eb:b3:0d:c8:33:26:c3:77:0a:26:6a:ba:9d:24:
                    1f:59:39:32:28:c2:cc:73:75:0c:ee:c7:e9:55:fe:
                    ee:72:85:65:14:72:17:9f:dd:b7:71:44:44:07:c9:
                    c0:48:60:9c:71:61:2f:6b:10:90:8d:64:02:e3:a6:
                    f7:ee:9d:f7:b4:17:4a:4f:87:3a:cc:ae:e7:eb:82:
                    34:6d:7b:0a:ad:e5:5b:fa:40:0b:c2:c5:76:ae:a9:
                    0f:91:a0:3f:e7:35:bd:93:4f:55:02:ae:64:5d:e7:
                    ac:01:0a:6f:c3:8f:aa:c6:37:f1:f3:96:32:32:bb:
                    21:46:21:4d:da:e9:33:9e:a9:74:71:87:84:f6:d9:
                    86:03:6a:3c:73:8c:32:1b:cc:57:fd:6c:f5:36:d0:
                    90:59:85:79:b9:2d:0e:00:a8:0c:c4:3b:49:b6:55:
                    33:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:49:96:B8:4B:E6:21:87:D1:0D:2C:88:D9:52:DB:73:FA:D8:36:5A
            X509v3 Authority Key Identifier:
                keyid:24:10:E4:D1:18:25:15:C4:7D:F3:6A:10:01:B7:F6:81:E2:DC:F4:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBDk0RglFcR982oQAbf2geLc9BQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/cEmWuEvmIYfRDSyI2VLbc_rYNlo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.213.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:6a:81:7b:1e:12:42:66:87:4b:29:cf:b8:2a:14:0d:e1:55:
         44:4b:a7:1e:d1:54:74:29:2e:e3:f4:a9:0e:60:ea:b4:0c:1c:
         eb:13:0a:f0:d4:ea:4c:5a:ac:b2:73:a9:39:2c:60:39:e8:6d:
         32:18:4f:f1:ce:0e:5a:1c:4e:10:31:ab:4d:ea:65:8e:a9:1e:
         05:58:17:e9:9d:62:e9:d1:02:c8:80:e0:95:12:27:aa:7a:d5:
         c4:7c:42:46:b5:2d:ad:14:8f:d5:b7:57:df:94:a8:3c:86:6c:
         3c:ee:13:a9:44:fa:bf:62:65:5d:be:22:17:ea:6e:e8:64:b2:
         60:46:d0:c1:db:b6:02:5d:2e:62:e8:2d:a5:6b:8c:29:27:7c:
         42:15:99:dd:0a:45:86:fd:3c:cd:35:cf:88:59:d0:aa:d4:9f:
         a9:b4:78:e9:af:18:00:a2:28:29:86:95:7e:7d:30:8e:5d:3e:
         96:da:a3:88:4a:69:90:e6:4d:4e:85:92:46:62:e9:e0:85:37:
         a2:8f:54:b8:e5:bd:14:da:98:2d:bb:c2:1a:3b:64:5d:50:a8:
         37:f5:c5:76:6a:cc:8a:03:7b:4d:48:e9:7c:62:47:15:7b:37:
         81:b1:c5:aa:7c:1d:8a:6c:9e:ee:2e:4a:d1:cb:db:58:be:29:
         69:06:b4:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:05 2024 by rpki-client on console-ams.rpki-client.org