Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/7CyhmdhUIJ28b-Z6VSCOvurgI-U.roa
File:                     7CyhmdhUIJ28b-Z6VSCOvurgI-U.roa (raw, json)
Hash identifier:          n0K3ZhHOZ8H/obthp1idfDTXeqRHaQcPH9AjdwUquE8=
Subject key identifier:   EC:2C:A1:99:D8:54:20:9D:BC:6F:E6:7A:55:20:8E:BE:EA:E0:23:E5
Certificate issuer:       /CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Certificate serial:       04953201
Authority key identifier: FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/7CyhmdhUIJ28b-Z6VSCOvurgI-U.roa
Signing time:             Wed 06 Apr 2022 21:03:07 +0000
ROA not before:           Wed 06 Apr 2022 21:03:07 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49392
IP address blocks:        92.53.160.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76886529 (0x4953201)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe779e56238b6f2ea068ede4e20aef00c904132b
        Validity
            Not Before: Apr  6 21:03:07 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ec2ca199d854209dbc6fe67a55208ebeeae023e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:54:f6:71:0f:c4:3b:f6:01:11:bf:a6:ba:9b:
                    a7:d6:22:b4:cc:f3:9e:76:46:eb:a3:51:df:77:9b:
                    f2:47:6e:79:ef:9e:cf:b6:f2:bb:b8:53:47:df:29:
                    0f:3d:58:99:9d:c2:b3:68:ec:d2:76:d2:68:d0:8a:
                    a1:9d:93:00:57:ce:93:f9:23:9b:19:ef:8c:36:85:
                    21:93:7b:4d:83:97:9b:a3:fb:e9:e2:89:64:8f:18:
                    fb:cf:8c:27:f5:3c:d1:03:d7:2b:8d:80:8b:d0:37:
                    e7:e9:9c:ad:f8:25:8e:7d:d9:e6:e5:fe:ae:99:cd:
                    71:a7:b2:63:5e:7c:74:c7:58:9f:9e:93:05:29:c1:
                    28:42:43:15:59:32:66:14:a6:67:be:6f:90:b2:83:
                    39:75:ce:01:86:cc:fd:cd:d1:22:67:10:41:4f:23:
                    94:93:b1:81:42:ab:1f:e5:84:f8:4d:c6:5d:1e:93:
                    ca:ec:4f:fe:ac:27:16:c1:77:e7:e3:c7:d9:df:44:
                    f8:03:df:aa:af:ed:5c:61:91:ee:ed:be:a9:02:3c:
                    c0:6b:c0:95:df:c6:ab:89:c8:8d:e4:c0:6d:14:1f:
                    7c:23:e7:e2:71:b2:33:ee:48:d3:bc:1b:90:55:d7:
                    af:c1:7b:72:54:e2:1e:dd:5d:62:1a:e6:9c:9b:22:
                    5b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:2C:A1:99:D8:54:20:9D:BC:6F:E6:7A:55:20:8E:BE:EA:E0:23:E5
            X509v3 Authority Key Identifier:
                keyid:FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/7CyhmdhUIJ28b-Z6VSCOvurgI-U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.53.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:b0:d4:14:14:d0:a6:40:25:f4:c4:a3:d6:a1:44:19:7f:6c:
         c7:4d:d0:46:2a:9e:97:af:80:6e:c3:6e:6b:3a:40:4d:9a:de:
         de:05:f9:cd:c1:93:92:41:5c:56:ff:07:47:02:12:74:0e:f5:
         8f:a5:14:33:b5:2b:b0:51:22:34:7c:5f:eb:75:6e:db:af:cf:
         2b:57:53:7d:7b:1b:13:e8:f1:ad:f5:47:4e:d3:11:97:6a:91:
         6c:4e:2c:60:b1:ba:21:c7:9f:cd:38:c7:80:99:d5:05:21:3d:
         be:61:91:a6:88:19:55:b1:0b:1e:50:93:99:50:5a:b2:6e:70:
         39:f4:17:02:4a:1d:27:ef:ad:16:89:22:fa:df:f6:5e:7d:71:
         7d:66:d5:20:c4:be:69:1d:11:8b:a7:ae:a5:18:51:0c:7d:3f:
         a6:2b:20:d3:83:63:cf:14:ee:33:2e:17:f3:ba:44:d3:01:99:
         c9:1b:6c:6a:5d:0a:b4:05:de:45:8c:7c:37:38:de:8a:81:cd:
         76:49:b0:a7:42:2e:f9:b8:1d:33:3b:e5:2e:33:7c:41:5c:dc:
         64:78:2b:19:01:59:18:3f:2c:47:f7:e6:fa:b8:35:76:a3:95:
         4f:32:cd:3e:4f:6c:eb:66:9c:ec:53:5a:2b:ee:5f:e0:b2:00:
         5b:ed:71:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:04 2024 by rpki-client on console-ams.rpki-client.org