Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/44y2ago0oSeC7CCs-rTTb_BfRH4.roa
File:                     44y2ago0oSeC7CCs-rTTb_BfRH4.roa (raw, json)
Hash identifier:          FzNvb7kM/6OYX1vwHF36FroUVyNA/Kkr+6omuPl9p6Q=
Subject key identifier:   E3:8C:B6:6A:0A:34:A1:27:82:EC:20:AC:FA:B4:D3:6F:F0:5F:44:7E
Certificate issuer:       /CN=98901c7cffd19a4fea78f79b1004999266dcc224
Certificate serial:       0B046081
Authority key identifier: 98:90:1C:7C:FF:D1:9A:4F:EA:78:F7:9B:10:04:99:92:66:DC:C2:24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/44y2ago0oSeC7CCs-rTTb_BfRH4.roa
Signing time:             Sat 01 Jan 2022 03:53:41 +0000
ROA not before:           Sat 01 Jan 2022 03:53:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     39122
IP address blocks:        193.36.43.0/24 maxlen: 24
                          91.210.232.0/22 maxlen: 22
                          185.43.232.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 184836225 (0xb046081)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98901c7cffd19a4fea78f79b1004999266dcc224
        Validity
            Not Before: Jan  1 03:53:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e38cb66a0a34a12782ec20acfab4d36ff05f447e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:09:63:1c:a0:64:61:b3:0a:a2:b7:bd:e0:60:
                    98:bb:0b:58:ad:25:25:e0:a3:7b:cb:5e:64:99:ae:
                    99:fc:74:c8:10:50:8e:70:46:b6:99:fb:e8:c9:16:
                    98:f7:ab:d9:bd:90:81:18:1c:8a:0f:e1:2e:6c:64:
                    21:a5:29:34:d0:4d:f7:9a:7e:43:c7:10:24:c3:ba:
                    9a:fc:a4:33:bf:c3:61:ad:9b:e2:66:fb:18:0e:c5:
                    7f:72:f4:e4:b8:59:9f:be:ac:d9:a4:91:8a:67:e9:
                    f5:8a:ad:04:71:d0:36:2e:34:fa:c8:47:68:30:cc:
                    a5:06:a3:2b:ff:97:b9:53:23:34:6e:72:5a:30:c4:
                    fe:60:e8:4c:db:52:2c:0d:54:44:43:fc:3b:a0:5e:
                    7a:d3:73:96:49:4f:33:a4:16:6c:19:4a:79:cc:08:
                    de:15:ab:a0:6a:07:28:f6:aa:5b:58:01:02:af:91:
                    e4:b6:2d:47:a0:c5:b5:d8:24:5c:aa:d5:cd:6e:a2:
                    ff:64:55:fd:d9:60:83:b3:d4:12:bf:07:2f:08:93:
                    cd:9c:c3:91:4c:bc:c7:5b:a4:a2:71:ac:a9:b6:72:
                    54:7b:49:c9:f2:8b:3e:40:71:f5:33:db:96:f5:af:
                    21:6a:49:4a:84:4b:1a:19:4d:cf:8f:39:ae:17:aa:
                    0b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:8C:B6:6A:0A:34:A1:27:82:EC:20:AC:FA:B4:D3:6F:F0:5F:44:7E
            X509v3 Authority Key Identifier:
                keyid:98:90:1C:7C:FF:D1:9A:4F:EA:78:F7:9B:10:04:99:92:66:DC:C2:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/44y2ago0oSeC7CCs-rTTb_BfRH4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.210.232.0/22
                  185.43.232.0/22
                  193.36.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:3a:5e:8f:5b:69:de:1d:79:ec:4e:0e:42:ba:27:f1:2e:0e:
         ef:20:7c:1e:b9:29:69:bb:ad:24:ca:4c:bb:73:a9:75:9c:13:
         35:66:e7:af:50:fb:46:60:8e:ee:06:d3:eb:23:8d:be:e9:7e:
         fc:24:d0:e2:fe:10:98:11:b9:c1:0d:23:09:85:49:f3:06:9e:
         19:9a:f8:12:ea:0e:04:39:a1:4f:00:e3:fc:c7:95:aa:28:ef:
         9d:eb:a1:da:97:76:9b:dd:ce:7a:d6:9d:66:cf:2c:27:1c:a3:
         eb:dc:42:f4:5d:d9:92:80:a7:04:b7:79:71:8b:08:58:a7:18:
         d5:ee:ad:3d:3c:29:58:99:cb:e9:ca:0c:fc:72:1a:cc:ee:d4:
         4d:01:1e:d0:d6:81:7a:e5:0a:bb:b1:63:68:54:01:f2:e5:0c:
         05:88:4c:eb:11:ba:7b:6e:30:d8:2d:6d:57:96:f4:62:8b:0f:
         02:d0:b1:44:12:25:18:be:71:31:59:6c:c2:04:c9:3b:54:42:
         b7:23:93:ee:ef:81:ba:8b:c7:d6:30:1a:f9:ab:28:b7:1c:62:
         91:e7:67:12:7e:61:7b:1a:11:40:1e:86:d9:3e:4a:d7:db:1a:
         da:4d:6a:ae:3d:c5:48:0a:2d:f4:da:6a:2f:ba:54:e1:e5:fd:
         5f:ec:c4:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:29 2024 by rpki-client on console-ams.rpki-client.org