Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/0m_Oz14zOcS21RK9WiiZYdIjnnE.roa
File:                     0m_Oz14zOcS21RK9WiiZYdIjnnE.roa (raw, json)
Hash identifier:          qvIcnjCXK+UKeMr7HT2lGhAa1Pi/Qs5JVT0XQs8lpMs=
Subject key identifier:   D2:6F:CE:CF:5E:33:39:C4:B6:D5:12:BD:5A:28:99:61:D2:23:9E:71
Certificate issuer:       /CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Certificate serial:       03C3ABBB
Authority key identifier: FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/0m_Oz14zOcS21RK9WiiZYdIjnnE.roa
Signing time:             Tue 11 Jan 2022 15:59:53 +0000
ROA not before:           Tue 11 Jan 2022 15:59:53 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     7029
IP address blocks:        92.53.184.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63155131 (0x3c3abbb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe779e56238b6f2ea068ede4e20aef00c904132b
        Validity
            Not Before: Jan 11 15:59:53 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d26fcecf5e3339c4b6d512bd5a289961d2239e71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:24:10:89:c8:c1:15:1d:35:1c:16:be:b1:c1:
                    2e:0f:80:ab:32:31:33:2d:1d:69:18:3e:30:59:72:
                    d0:e7:3b:25:12:bb:59:76:5e:3a:ec:96:64:29:fc:
                    5c:19:07:82:8e:cb:bc:18:17:ae:64:8f:30:d5:bf:
                    e6:0b:57:59:b2:89:1f:03:47:c6:ff:b1:66:2a:67:
                    77:07:68:5a:60:ca:ee:cf:14:80:24:c1:27:58:58:
                    98:d1:7b:85:04:bf:c8:bd:68:66:e2:ad:39:4b:a5:
                    9e:c6:f7:f3:70:4c:3d:ca:af:e7:b0:32:1f:41:58:
                    dd:30:ab:f1:17:25:fa:cd:21:de:70:60:04:82:06:
                    1c:1e:68:17:d3:eb:62:3c:1d:0d:eb:8d:75:e6:d0:
                    b7:91:7b:8a:1b:e3:56:1c:a3:48:71:54:fe:8a:16:
                    02:7e:73:f0:29:5b:3f:84:8c:5e:0b:67:ac:3d:59:
                    89:05:a5:40:26:17:9e:d3:ec:03:22:57:19:94:1d:
                    d9:78:a0:56:88:cf:da:01:66:4d:67:d3:86:78:49:
                    30:37:7d:f2:8d:54:d7:84:74:c1:d0:54:97:a0:3a:
                    73:27:a7:d7:65:59:ad:e1:8c:48:43:55:a1:ea:a0:
                    f8:50:80:42:c7:a7:c4:1a:00:f4:4c:ec:c1:15:d7:
                    9f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:6F:CE:CF:5E:33:39:C4:B6:D5:12:BD:5A:28:99:61:D2:23:9E:71
            X509v3 Authority Key Identifier:
                keyid:FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/0m_Oz14zOcS21RK9WiiZYdIjnnE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.53.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0f:c5:a2:2a:c6:c5:c5:8c:c1:2e:f9:7a:11:b5:a4:03:15:27:
         03:7e:a7:3e:ad:f5:e3:b5:62:2a:c3:cc:93:2c:82:5f:ba:71:
         33:30:a9:e4:7f:54:1e:90:c7:0a:3e:e5:16:bc:05:ca:e2:89:
         b9:88:2f:90:ce:88:9f:ee:15:02:74:bd:d0:c6:7a:b5:88:d2:
         c2:0c:5d:0d:df:58:c4:47:71:a5:48:ba:99:98:3e:0b:0b:84:
         9d:5f:ad:9b:10:85:58:23:59:65:62:0d:fe:09:9f:b0:b6:f6:
         f1:54:17:b0:d9:f8:a9:ae:c4:20:ac:76:73:c1:d7:47:6b:e0:
         d8:7b:a8:39:66:7b:11:31:02:58:07:96:14:f3:8a:ba:c8:f3:
         75:4b:a5:f8:cb:0c:3a:37:a6:1f:f7:9d:7c:a2:37:94:f5:83:
         cf:3b:22:51:2a:27:19:95:d4:80:1c:6b:51:88:c2:1c:ee:a6:
         2b:64:c7:c3:9b:b1:b6:30:96:fe:3d:3f:83:75:9a:b9:a2:e9:
         ba:4b:9d:8d:1f:f6:2e:25:a9:33:75:88:ea:58:6d:95:e7:53:
         95:f2:a3:29:fa:f0:e2:d1:14:e9:6c:5e:93:31:89:ff:e4:1b:
         e9:9a:42:68:79:72:2c:b4:f4:21:ef:7f:3b:eb:52:bc:9e:a2:
         60:a4:2c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:13 2024 by rpki-client on console-fra.rpki-client.org