Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/Jud6_iILijr9fYutamqUou9bzfs.roa
File:                     Jud6_iILijr9fYutamqUou9bzfs.roa (raw, json)
Hash identifier:          1w4LxlVDvqxSQ3XT+a7os8MBNl3bPkz68aGmvGtcojA=
Subject key identifier:   26:E7:7A:FE:22:0B:8A:3A:FD:7D:8B:AD:6A:6A:94:A2:EF:5B:CD:FB
Certificate issuer:       /CN=f26920bbd7fb70ef5dbcf2d0fea202bd95765eba
Certificate serial:       0722385E
Authority key identifier: F2:69:20:BB:D7:FB:70:EF:5D:BC:F2:D0:FE:A2:02:BD:95:76:5E:BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8mkgu9f7cO9dvPLQ_qICvZV2Xro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/Jud6_iILijr9fYutamqUou9bzfs.roa
Signing time:             Fri 15 Apr 2022 07:08:55 +0000
ROA not before:           Fri 15 Apr 2022 07:08:55 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60844
IP address blocks:        95.178.121.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119683166 (0x722385e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f26920bbd7fb70ef5dbcf2d0fea202bd95765eba
        Validity
            Not Before: Apr 15 07:08:55 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=26e77afe220b8a3afd7d8bad6a6a94a2ef5bcdfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ad:3c:c0:b8:48:5e:73:de:35:1e:36:ce:b2:
                    20:24:13:58:f9:85:3f:86:1d:f9:f7:fc:db:af:86:
                    59:60:a2:fa:5a:4d:f2:00:d4:eb:07:c3:f3:33:56:
                    59:24:5f:ed:c2:04:af:5e:a9:d9:91:d4:fe:fb:61:
                    8f:10:f2:5e:f9:d5:13:c3:1b:e5:b2:63:ad:20:d3:
                    25:96:ce:b8:6c:64:68:5e:22:f8:e2:7c:57:6e:16:
                    80:e8:77:91:6f:96:fb:e2:8d:b1:75:17:07:d4:83:
                    d7:5b:e1:2d:55:ac:1d:13:6e:fd:e1:e2:21:67:62:
                    9a:5d:03:e2:5a:27:b3:e7:10:cc:f7:11:86:4a:b4:
                    60:f7:10:e4:21:08:e1:11:60:cd:61:51:2d:bd:01:
                    d7:60:8b:7d:ba:e3:ec:72:5c:a3:f1:d8:31:9c:7b:
                    09:d1:d6:27:cb:d9:ea:cf:c2:e0:fc:05:71:45:b9:
                    a3:dd:69:b9:30:f5:22:1f:2d:1e:42:79:2a:35:91:
                    b9:96:cc:37:ce:22:fc:fc:ef:0b:1a:84:5a:a7:0a:
                    40:51:db:26:58:f1:4a:d2:de:18:5d:56:c0:6b:c1:
                    c3:e5:0a:53:c3:d1:8c:26:21:ec:dc:87:3a:4d:aa:
                    81:58:15:c7:f0:0a:bc:5f:52:03:32:25:18:7f:3b:
                    ae:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:E7:7A:FE:22:0B:8A:3A:FD:7D:8B:AD:6A:6A:94:A2:EF:5B:CD:FB
            X509v3 Authority Key Identifier:
                keyid:F2:69:20:BB:D7:FB:70:EF:5D:BC:F2:D0:FE:A2:02:BD:95:76:5E:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mkgu9f7cO9dvPLQ_qICvZV2Xro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/Jud6_iILijr9fYutamqUou9bzfs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/8mkgu9f7cO9dvPLQ_qICvZV2Xro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.178.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:78:2c:d8:e6:e1:af:8a:48:02:c7:83:30:17:51:56:d9:87:
         ef:37:43:85:3b:ea:3e:db:3a:5b:be:6d:b5:de:6f:1d:0c:de:
         55:3c:3a:55:47:85:66:78:12:0d:5a:98:d0:38:f1:f0:0e:0a:
         de:bf:37:71:71:66:34:54:4b:bc:8a:86:6b:c4:fb:2e:0d:69:
         44:fd:e1:d3:3e:25:02:81:61:f9:83:ff:f9:3a:1d:55:40:fd:
         98:18:62:f5:d9:35:ba:d6:c5:e4:3a:29:18:8c:28:27:73:30:
         8f:5e:be:5a:30:3c:91:7e:6d:a2:3d:b8:38:ff:7a:8b:a8:73:
         d0:98:16:ea:ff:5e:af:61:70:53:5f:83:5d:9c:38:ac:de:01:
         91:99:98:fa:bf:16:66:31:7b:fd:f6:77:4d:c8:83:5b:92:36:
         b2:f5:c1:7d:38:6d:63:f3:ed:77:d8:4b:5e:66:29:4c:05:1f:
         79:32:d1:c9:d1:13:6f:98:b7:7f:d6:d1:1b:68:d3:c9:97:78:
         4f:53:e4:3d:8e:cb:9e:ff:6b:f3:ac:70:49:3b:b9:f5:f8:e1:
         86:3a:5c:2d:f5:e3:55:a5:7d:cb:2b:8f:08:b7:c5:19:a6:44:
         04:e6:88:6e:a1:44:15:6a:a2:93:63:07:7a:f5:67:40:34:0a:
         51:48:68:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:40 2023 by rpki-client on console-fra.rpki-client.org