Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/VuSrZ3YgGQ8MyKF7EYH8SkT_IEI.roa
File:                     VuSrZ3YgGQ8MyKF7EYH8SkT_IEI.roa (raw, json)
Hash identifier:          vs8dO8VxEYe1S//5Vr8sTVBw69VsCtjbMmcTQnpTTzU=
Subject key identifier:   56:E4:AB:67:76:20:19:0F:0C:C8:A1:7B:11:81:FC:4A:44:FF:20:42
Certificate issuer:       /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial:       37A16B43
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/VuSrZ3YgGQ8MyKF7EYH8SkT_IEI.roa
Signing time:             Sat 01 Jan 2022 08:55:46 +0000
ROA not before:           Sat 01 Jan 2022 08:55:46 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     44841
IP address blocks:        87.107.101.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 933325635 (0x37a16b43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
        Validity
            Not Before: Jan  1 08:55:46 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=56e4ab677620190f0cc8a17b1181fc4a44ff2042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:4f:04:4c:3b:a9:60:e8:e1:ec:94:a0:ca:18:
                    77:38:fd:ca:8b:ed:16:3b:8a:5f:9c:f2:b1:97:e2:
                    b1:f2:15:76:4b:50:ff:c9:55:85:3f:1b:23:60:fc:
                    0e:1c:b2:67:3d:6f:bb:70:ea:1d:8b:58:84:7a:05:
                    1b:97:94:0e:13:0c:e9:0b:8b:e7:2b:3e:71:5c:23:
                    a1:fe:9e:05:f6:fa:b3:6d:ae:4c:22:e2:ab:01:43:
                    f3:a9:8c:84:bb:07:86:84:ac:6f:0a:98:44:9b:77:
                    b9:28:70:8e:4a:ea:03:bb:0b:7d:41:11:56:7f:c7:
                    5f:7a:8c:b1:26:40:eb:fb:c6:a9:bc:b3:9b:84:00:
                    45:55:71:15:9d:3d:11:09:88:49:66:50:eb:17:fe:
                    2c:bb:ca:83:b8:88:b5:b1:f8:8a:d4:20:cd:37:05:
                    61:50:7e:6b:0c:ea:a7:c7:28:64:6b:0e:b7:da:81:
                    cf:cd:34:37:28:d3:da:7f:b9:44:6f:f4:7e:ca:5e:
                    94:2a:60:4e:fd:10:9b:06:d1:7d:b1:40:d4:53:ef:
                    06:ff:c4:42:69:4c:0b:60:ba:e0:3b:a4:3a:1c:40:
                    36:b8:d8:05:0b:c7:26:f9:8a:a1:3e:aa:72:f2:b8:
                    77:e7:81:b0:e7:af:a3:6f:81:6a:8f:5a:47:8a:cf:
                    ae:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:E4:AB:67:76:20:19:0F:0C:C8:A1:7B:11:81:FC:4A:44:FF:20:42
            X509v3 Authority Key Identifier:
                keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/VuSrZ3YgGQ8MyKF7EYH8SkT_IEI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.107.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:ba:bc:a7:17:34:20:58:b1:cc:51:2f:55:55:14:ab:a5:03:
         84:04:09:5b:cb:c8:09:1a:40:d5:4d:db:9c:ba:29:d4:a6:fc:
         8c:1f:b9:3c:09:bb:d6:d5:22:1c:ef:50:a3:6b:7a:67:58:98:
         c8:2f:c6:1f:a6:68:49:47:b5:0a:ed:83:d7:d0:8f:49:05:8e:
         dd:a9:b8:55:54:5c:a1:4b:d0:a7:c8:a1:a6:47:dd:ae:b6:ed:
         ab:5c:80:99:27:ba:2e:4d:bc:93:91:d6:c5:a3:e0:4b:3e:63:
         70:8e:a4:70:d5:a5:d6:b4:68:0c:e0:b0:25:38:65:ef:d5:a7:
         5c:7d:74:d9:75:cc:6f:a8:a3:db:cd:5e:87:37:79:28:c6:e8:
         59:d0:9f:76:94:94:93:79:d4:e1:8a:dd:1c:ba:3c:0a:ad:d7:
         52:6d:51:c6:a6:36:93:7f:45:ec:61:09:e7:59:53:d0:78:72:
         f8:48:6a:e9:af:9c:22:08:59:f6:7d:41:0b:31:9f:5c:f9:69:
         8c:ff:55:64:96:76:73:cf:a5:40:5f:05:89:6f:50:7f:bf:14:
         04:8f:01:b1:03:f4:94:04:7e:96:3b:b2:e2:6a:a4:5b:bc:df:
         ee:4d:de:d4:de:a6:7c:d7:93:aa:e2:ce:bb:03:f1:f5:84:23:
         05:41:11:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:59 2024 by rpki-client on console-ams.rpki-client.org