Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/emzWHavYMtmOleC6PrDmQHCovK8.roa
File:                     emzWHavYMtmOleC6PrDmQHCovK8.roa (raw, json)
Hash identifier:          3tBlc6KovxqmvmUBH8HQQUOXVlyE6206mSGiNwK2Cnk=
Subject key identifier:   7A:6C:D6:1D:AB:D8:32:D9:8E:95:E0:BA:3E:B0:E6:40:70:A8:BC:AF
Certificate issuer:       /CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Certificate serial:       03C54CD9
Authority key identifier: FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/emzWHavYMtmOleC6PrDmQHCovK8.roa
Signing time:             Tue 11 Jan 2022 16:00:17 +0000
ROA not before:           Tue 11 Jan 2022 16:00:17 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     7018
IP address blocks:        92.53.188.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63261913 (0x3c54cd9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe779e56238b6f2ea068ede4e20aef00c904132b
        Validity
            Not Before: Jan 11 16:00:17 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7a6cd61dabd832d98e95e0ba3eb0e64070a8bcaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:71:a4:91:20:bd:be:9d:15:a3:71:f9:16:d8:
                    23:38:e8:1f:20:41:9b:17:ed:0f:be:74:43:ae:7c:
                    b0:01:68:0e:c6:c7:12:67:a3:00:0a:66:84:46:f7:
                    8c:99:21:12:11:aa:31:35:d3:15:38:27:c1:d1:1d:
                    3e:57:3e:4f:55:89:a9:cf:cb:23:6e:21:07:46:6f:
                    de:2d:f3:51:d6:72:ef:c6:fd:79:95:c7:8b:ac:3c:
                    da:44:f7:70:c7:f8:44:83:87:03:c8:54:51:bd:ad:
                    c2:30:57:62:11:15:f3:9d:64:24:0f:22:d5:2f:1a:
                    ff:10:b9:33:ae:4a:62:83:0a:fe:c1:69:8e:01:69:
                    15:b4:fb:d9:e2:68:7c:82:b2:a8:be:38:55:7b:c0:
                    7c:48:d2:ed:54:bd:bd:46:c2:5b:d0:f2:32:d4:2a:
                    d3:9a:ae:e8:9d:c3:7d:9f:22:5a:2d:92:d5:32:eb:
                    06:94:90:5d:ec:70:f9:18:07:a6:5b:58:3a:03:e3:
                    77:aa:2d:6f:1e:db:a9:72:d7:53:43:6e:65:c9:3f:
                    b8:7d:b8:31:6f:01:3e:e5:28:ee:08:ad:86:f7:98:
                    c8:91:3f:30:4e:2d:c0:97:ac:04:90:46:1e:cf:23:
                    b8:5d:4a:23:2c:15:fb:b7:01:55:9d:14:6f:b6:e3:
                    e7:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:6C:D6:1D:AB:D8:32:D9:8E:95:E0:BA:3E:B0:E6:40:70:A8:BC:AF
            X509v3 Authority Key Identifier:
                keyid:FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/emzWHavYMtmOleC6PrDmQHCovK8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.53.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:38:e3:ca:51:fa:fd:6f:3f:50:7b:6a:4a:3a:b5:e5:81:02:
         47:db:84:7e:7e:3d:8a:8d:f1:b6:f8:0c:13:51:8f:8f:43:6d:
         09:08:c0:07:6b:17:11:49:f5:70:61:03:c5:02:4a:e3:7b:0e:
         44:83:db:12:16:cb:53:71:6a:aa:10:56:4b:01:61:58:20:82:
         78:ef:9c:df:83:aa:1c:c3:d6:f8:c0:0c:56:f3:e4:c5:cc:ed:
         6d:3b:e8:70:0f:f8:a1:fd:90:4f:ba:f6:24:4f:52:35:be:9e:
         83:13:14:a9:df:bd:f7:84:f5:62:c7:0c:47:61:75:42:49:8b:
         45:9d:34:d4:3b:ab:8e:d8:5a:07:9c:c6:b0:c0:71:d6:c2:99:
         ce:5f:ee:e3:b3:d8:f8:12:ef:13:72:3b:bb:71:0a:13:23:6f:
         48:93:fa:08:41:df:ad:a0:1a:39:a8:dd:72:2a:92:d4:bd:4f:
         52:cd:a0:77:fb:81:39:6a:bb:e7:ba:81:38:29:6a:79:9c:a9:
         7e:6c:2a:bd:62:cb:09:9e:eb:a4:ac:33:36:8c:2b:c6:80:a5:
         d4:37:b9:9e:51:d6:7c:63:93:7f:af:97:44:fe:9f:81:ed:10:
         11:44:f8:08:8e:1c:2f:6e:d0:cb:31:78:34:16:c0:36:25:e5:
         9e:e8:b9:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:05 2024 by rpki-client on console-ams.rpki-client.org