Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/fivNHwIGG9LuKlB7U1kI3bpXP8c.roa
File:                     fivNHwIGG9LuKlB7U1kI3bpXP8c.roa (raw, json)
Hash identifier:          R8rx7Uyll4PPWk1Ul/i9+40uBoijCm3055eqwh/v2NU=
Subject key identifier:   7E:2B:CD:1F:02:06:1B:D2:EE:2A:50:7B:53:59:08:DD:BA:57:3F:C7
Certificate issuer:       /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial:       09046770
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/fivNHwIGG9LuKlB7U1kI3bpXP8c.roa
Signing time:             Thu 14 Apr 2022 11:34:24 +0000
ROA not before:           Thu 14 Apr 2022 11:34:24 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     7018
IP address blocks:        94.241.136.0/21 maxlen: 24
                          91.186.216.0/22 maxlen: 24
                          94.241.164.0/23 maxlen: 24
                          94.241.166.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 151283568 (0x9046770)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
        Validity
            Not Before: Apr 14 11:34:24 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7e2bcd1f02061bd2ee2a507b535908ddba573fc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:36:5a:7c:03:b1:c7:54:7d:25:cf:38:e5:4f:
                    6f:cf:49:a4:93:c1:33:93:85:3b:cc:81:b7:34:37:
                    d6:25:5d:2c:cc:3a:eb:29:ab:bd:0c:25:37:bb:72:
                    f0:85:2b:aa:3e:3c:bd:61:5f:0a:cc:03:ee:b9:5b:
                    fb:3c:10:08:01:1b:44:57:0a:21:48:8e:b4:b0:6e:
                    dc:97:45:75:d9:cb:f8:ba:06:f0:11:59:8d:3e:6d:
                    87:25:30:42:89:f0:6a:5f:66:a3:36:b6:0a:d9:b0:
                    1d:94:a0:8e:df:75:00:dc:64:31:e0:0b:e2:4a:64:
                    9d:50:06:87:59:69:f2:65:77:9a:19:3a:92:f3:29:
                    13:3c:c1:5c:77:ee:9d:33:21:b2:a7:df:a6:4f:c6:
                    76:1a:44:70:16:7c:59:7d:37:10:69:c7:a7:51:96:
                    09:75:83:b1:f3:88:73:ef:e4:ee:33:36:a1:4f:e8:
                    b4:6c:94:40:01:84:b6:9d:f5:2f:fe:b7:9b:41:40:
                    ae:cf:40:c6:bb:2c:ec:f7:a8:b9:ba:11:ed:bb:28:
                    e9:61:ff:68:a2:cc:6d:c6:64:ce:ac:48:89:31:58:
                    c1:c5:1c:90:1d:95:a5:63:f8:20:36:a3:de:a7:ce:
                    49:e0:b4:b7:fd:61:c1:ab:d4:43:d6:fb:03:3a:16:
                    b9:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:2B:CD:1F:02:06:1B:D2:EE:2A:50:7B:53:59:08:DD:BA:57:3F:C7
            X509v3 Authority Key Identifier:
                keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/fivNHwIGG9LuKlB7U1kI3bpXP8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.186.216.0/22
                  94.241.136.0/21
                  94.241.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:6c:00:9a:bc:cb:89:03:d2:55:c6:26:0b:d9:b6:a4:da:4b:
         e6:86:37:dc:0b:7b:17:23:45:6c:b3:8e:9a:16:ea:fa:a8:a6:
         08:c2:64:a3:46:4c:13:97:9d:ca:b9:58:2a:33:06:c6:7f:9d:
         58:92:5a:42:ca:cc:7e:09:8a:54:92:80:8d:34:ec:c5:4d:60:
         53:b9:11:6e:06:5a:b3:ec:24:4d:e2:4f:43:e0:44:ba:81:15:
         a5:a6:98:6c:46:10:88:e3:0c:3d:4b:19:3e:b0:e9:01:1b:75:
         fc:10:8c:c6:22:e7:58:dd:fa:41:87:09:f3:93:40:d0:d4:99:
         11:51:a8:5c:ea:01:61:c8:8e:8d:ee:f3:d9:b2:44:c7:06:6e:
         e2:5b:18:e8:e1:df:c6:8b:51:0c:d4:74:bc:0d:e8:76:a9:e3:
         b0:55:17:f4:7f:c2:3e:f5:82:d0:24:c8:93:77:71:4b:d0:1c:
         69:61:93:65:76:f7:5a:43:63:70:f2:9d:c6:8f:8b:1c:16:b2:
         e2:23:a9:50:20:07:8a:f2:96:e8:7d:a7:c6:29:a4:96:5a:9e:
         18:2f:7b:c3:87:a9:50:aa:72:3a:10:d5:a0:7e:ec:df:77:0d:
         45:7e:8a:ff:57:e6:de:67:97:95:b0:9c:31:ee:37:f9:97:be:
         75:d6:65:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:10 2024 by rpki-client on console-fra.rpki-client.org