Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/2Ere5Po1Rwbn5bhWy_DNJWTgCDs.roa
File:                     2Ere5Po1Rwbn5bhWy_DNJWTgCDs.roa (raw, json)
Hash identifier:          l/pX0VcWlpA8xadqaPW0VfkYF3D/lRTHNIlU361hPsA=
Subject key identifier:   D8:4A:DE:E4:FA:35:47:06:E7:E5:B8:56:CB:F0:CD:25:64:E0:08:3B
Certificate issuer:       /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial:       0F1F94D7
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/2Ere5Po1Rwbn5bhWy_DNJWTgCDs.roa
Signing time:             Thu 24 Feb 2022 19:33:38 +0000
ROA not before:           Thu 24 Feb 2022 19:33:38 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     58269
IP address blocks:        87.246.183.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 253727959 (0xf1f94d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
        Validity
            Not Before: Feb 24 19:33:38 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d84adee4fa354706e7e5b856cbf0cd2564e0083b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:bf:83:28:06:7a:3a:bc:2c:6c:21:53:ba:58:
                    40:84:6c:21:0c:99:c1:9e:59:fa:93:61:c5:74:14:
                    e3:e3:86:ed:3f:a8:80:df:30:0d:35:1b:4d:f2:d7:
                    07:88:03:77:a6:c3:85:06:d9:08:b2:45:52:b1:4a:
                    dc:f7:b0:e4:81:22:0d:93:30:a3:d4:fd:3b:3d:45:
                    b9:67:88:d4:91:fd:a6:78:32:25:5e:d9:f5:0b:83:
                    30:f4:aa:ed:38:01:f4:f3:cf:64:02:54:e8:d3:0b:
                    65:66:9f:fa:47:fd:9a:71:29:f3:61:95:e6:ca:85:
                    3d:ff:7c:d8:28:6d:bd:ab:f1:e1:48:75:d3:2c:87:
                    b3:85:25:64:74:b7:c9:3e:28:1a:e0:87:10:f6:1e:
                    96:af:22:34:2e:5c:a7:72:d7:f2:a8:6a:7a:6b:37:
                    00:81:d1:4a:3d:db:a5:b2:f9:05:0f:be:cb:ea:7f:
                    b0:33:2d:52:df:86:b0:82:e6:69:9f:d3:48:21:93:
                    76:bb:28:a5:72:35:62:85:05:85:33:f0:42:47:a0:
                    14:29:67:23:9b:22:ec:38:c2:cc:a0:2b:6c:c3:6c:
                    1d:70:da:4e:d0:02:4e:ea:9e:f9:12:f8:47:3b:7e:
                    8b:12:b3:89:86:69:78:e3:bd:40:7b:94:2a:90:89:
                    f1:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:4A:DE:E4:FA:35:47:06:E7:E5:B8:56:CB:F0:CD:25:64:E0:08:3B
            X509v3 Authority Key Identifier:
                keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/2Ere5Po1Rwbn5bhWy_DNJWTgCDs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.246.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:4c:53:97:71:0f:14:6d:9e:59:84:25:c0:2a:82:a7:01:87:
         67:a5:04:62:aa:44:fd:90:16:7d:12:a3:11:be:59:12:d6:ad:
         3d:93:5d:44:a4:ec:32:2e:a8:27:39:03:32:16:64:4b:c9:67:
         4d:7b:e0:86:99:c4:6c:03:ef:13:ee:0c:ca:14:81:ed:df:59:
         ca:bb:34:73:38:ec:60:30:0e:b1:61:f7:00:a0:14:1c:67:5c:
         e2:76:31:3d:c4:71:43:93:51:03:67:62:9e:f1:51:0f:f8:6a:
         e9:0c:1e:77:e6:17:c8:38:d3:2e:df:45:b7:6a:9b:8d:c6:95:
         9b:04:74:88:f5:fa:8e:ed:b2:92:b9:a9:aa:45:8e:9a:3a:c0:
         f3:73:e7:a7:88:8e:cf:dd:9a:bb:3d:a2:dd:b7:2c:ba:6b:de:
         dc:31:8b:08:fc:8d:db:6c:11:1a:f5:10:75:e1:60:e9:1c:a8:
         fa:3d:84:87:f5:7e:d6:e4:da:45:be:08:42:84:6e:c8:f4:70:
         01:cc:ae:8b:db:94:0d:3c:a8:07:be:0e:7b:cf:98:dd:8f:14:
         9a:f7:fc:5c:5e:e2:9b:5e:bd:8b:a1:30:29:ec:2d:d2:c3:14:
         34:b9:92:98:e8:ad:c7:93:86:f1:66:eb:c0:1d:35:53:9a:99:
         03:e8:59:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:47 2024 by rpki-client on console-ams.rpki-client.org