Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/7fbcc6-64fd-4874-ab49-825b47c15430/1/EtzYREPgoR6yPtg-tp8AvurYLi8.roa
File:                     EtzYREPgoR6yPtg-tp8AvurYLi8.roa (raw, json)
Hash identifier:          9eXr70nxyFP9pRPIMqCJsp2jpfnoiuYL91Cn3G6bblc=
Subject key identifier:   12:DC:D8:44:43:E0:A1:1E:B2:3E:D8:3E:B6:9F:00:BE:EA:D8:2E:2F
Certificate issuer:       /CN=9c7fa9eaf3856ca4e75041414e51d860180c926f
Certificate serial:       01D777
Authority key identifier: 9C:7F:A9:EA:F3:85:6C:A4:E7:50:41:41:4E:51:D8:60:18:0C:92:6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nH-p6vOFbKTnUEFBTlHYYBgMkm8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/7fbcc6-64fd-4874-ab49-825b47c15430/1/EtzYREPgoR6yPtg-tp8AvurYLi8.roa
Signing time:             Fri 11 Feb 2022 10:49:22 +0000
ROA not before:           Fri 11 Feb 2022 10:49:22 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208095
IP address blocks:        94.124.73.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120695 (0x1d777)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c7fa9eaf3856ca4e75041414e51d860180c926f
        Validity
            Not Before: Feb 11 10:49:22 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=12dcd84443e0a11eb23ed83eb69f00beead82e2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ba:50:5f:5f:bd:75:b0:02:e1:5c:42:f6:64:
                    78:08:07:77:0d:26:ae:78:28:30:63:d1:73:4e:d6:
                    ac:9c:8a:2b:8f:65:20:c6:65:45:04:5c:54:94:e2:
                    2c:7f:71:df:18:51:5b:e7:72:21:e3:cc:aa:70:5c:
                    8d:c6:f6:3b:7a:a0:95:b3:8b:c9:bf:1e:ec:ee:b2:
                    48:b1:0b:ca:c4:62:09:bc:e2:f0:f8:7f:5d:bc:3a:
                    f1:58:8f:56:00:fe:5e:2a:de:1d:1c:a0:fc:17:b2:
                    0d:4a:30:7d:42:c2:57:8e:7b:a8:b9:3a:50:62:c8:
                    c5:79:8b:0c:94:19:da:92:95:90:5d:8c:e5:3c:9b:
                    8d:25:16:82:50:fc:b0:8d:d7:34:6c:b9:c7:b7:79:
                    9d:6a:0d:53:dc:e1:9a:a2:1b:da:2f:aa:24:79:9a:
                    70:65:00:a5:c5:e6:7b:0d:da:35:44:70:1d:13:1d:
                    72:ec:03:06:74:62:86:da:8e:cb:90:c7:51:45:7d:
                    71:5c:a1:62:11:38:65:51:31:81:7a:32:6e:90:68:
                    3e:38:49:0b:f9:05:3c:85:d2:e2:45:a8:13:45:8b:
                    f4:fb:de:98:74:7f:73:6f:37:a3:4d:ec:fc:7e:43:
                    49:c8:cc:d2:bb:d6:ba:26:21:9c:a7:f1:81:e9:c9:
                    97:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:DC:D8:44:43:E0:A1:1E:B2:3E:D8:3E:B6:9F:00:BE:EA:D8:2E:2F
            X509v3 Authority Key Identifier:
                keyid:9C:7F:A9:EA:F3:85:6C:A4:E7:50:41:41:4E:51:D8:60:18:0C:92:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nH-p6vOFbKTnUEFBTlHYYBgMkm8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7fbcc6-64fd-4874-ab49-825b47c15430/1/EtzYREPgoR6yPtg-tp8AvurYLi8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7fbcc6-64fd-4874-ab49-825b47c15430/1/nH-p6vOFbKTnUEFBTlHYYBgMkm8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.124.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:e4:6d:d5:74:5f:db:e1:d0:b4:be:80:92:65:32:4a:16:16:
         65:24:93:fb:67:2d:0c:2f:40:93:e6:82:d1:a9:ac:af:30:e9:
         e7:cd:c3:fe:7b:a7:30:7e:55:b0:e0:e3:9e:81:f0:69:aa:ea:
         b9:7d:e1:60:ed:8e:06:2b:ea:00:c9:7a:92:72:38:c0:18:ab:
         f1:3b:dc:a0:29:f2:e3:ad:8b:26:04:c3:98:c3:cd:63:67:3c:
         7b:49:54:e0:2e:f7:aa:38:1c:52:c3:fb:8a:4b:39:de:90:61:
         b1:d3:47:ed:c1:c2:41:2f:d1:89:38:0f:9e:6f:5b:1b:e1:21:
         84:f5:e6:f1:53:cb:d0:bc:45:3f:f1:39:e7:99:b2:63:04:36:
         83:14:86:dc:b4:8e:b1:f5:11:30:d3:a0:d0:f4:f3:fd:07:3b:
         48:c8:56:f6:96:6d:38:88:ea:3d:70:a9:12:a7:b1:fa:bc:9b:
         91:42:b8:70:65:a0:7a:3c:86:39:8b:51:8b:12:54:30:3f:24:
         00:59:31:6b:18:7f:91:2e:d1:c3:a5:82:0f:c2:28:29:8e:82:
         fb:ce:23:de:2d:b6:dc:fc:f2:c6:62:62:43:40:2b:ef:43:85:
         33:8d:58:cc:39:e9:90:ae:6d:a0:0b:20:63:98:b5:46:da:d3:
         d8:4c:27:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:45 2024 by rpki-client on console-ams.rpki-client.org