Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/l76Lnu8Puv_07mkiyrKAdVMl52U.roa
File:                     l76Lnu8Puv_07mkiyrKAdVMl52U.roa (raw, json)
Hash identifier:          NFgP5tmnIAY+SzokGV3mSjgwr9DkgOZAc7UHoQdhka0=
Subject key identifier:   97:BE:8B:9E:EF:0F:BA:FF:F4:EE:69:22:CA:B2:80:75:53:25:E7:65
Certificate issuer:       /CN=c755702467770ed69b367b77bbe640bc6db4153e
Certificate serial:       CD3B82
Authority key identifier: C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/l76Lnu8Puv_07mkiyrKAdVMl52U.roa
Signing time:             Sat 01 Jan 2022 00:54:19 +0000
ROA not before:           Sat 01 Jan 2022 00:54:19 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     265515
IP address blocks:        95.210.95.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13450114 (0xcd3b82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c755702467770ed69b367b77bbe640bc6db4153e
        Validity
            Not Before: Jan  1 00:54:19 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=97be8b9eef0fbafff4ee6922cab280755325e765
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9a:d8:35:84:29:39:dc:42:54:4d:ef:8e:f5:
                    f0:0c:2b:17:37:ff:5b:8c:3e:2f:08:4e:37:52:30:
                    cb:82:d3:74:3c:fd:3d:22:4d:93:28:f8:78:68:e1:
                    20:ac:5e:f3:68:62:ee:ec:24:bc:60:99:4f:a1:a1:
                    e5:11:55:40:a8:ec:da:fa:fe:a7:a5:d0:27:71:e9:
                    cb:8d:b8:c9:71:54:fc:af:3e:28:77:f5:24:aa:23:
                    11:cc:1f:85:1c:28:45:28:43:34:5b:35:9a:2c:12:
                    96:6a:07:84:a5:03:c6:31:5d:ac:e9:bc:95:75:c3:
                    b3:39:55:3a:9b:b6:10:0f:75:26:77:fe:a3:b0:06:
                    36:0c:c6:a0:96:87:27:ff:89:35:58:4b:cd:a7:af:
                    9b:29:02:38:67:45:33:46:6a:5e:24:29:ea:45:3d:
                    e7:a3:f5:95:e2:0b:f8:79:d4:0d:72:c0:2c:82:b9:
                    53:11:94:a8:95:16:c4:59:87:9b:57:78:8e:28:00:
                    a5:53:5f:f2:b9:3b:2e:ea:75:b1:63:d0:1b:d8:a1:
                    a6:f0:4d:d8:20:0f:b7:4b:16:11:45:88:9a:f1:b6:
                    c0:e0:c6:38:99:a3:d2:45:13:96:c5:81:0c:a2:24:
                    c8:0a:b6:b4:9a:dd:7e:c9:72:cd:83:5d:29:2e:67:
                    75:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:BE:8B:9E:EF:0F:BA:FF:F4:EE:69:22:CA:B2:80:75:53:25:E7:65
            X509v3 Authority Key Identifier:
                keyid:C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/l76Lnu8Puv_07mkiyrKAdVMl52U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.210.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:83:06:2d:13:62:00:14:11:5d:38:8d:f8:a3:39:f5:2f:30:
         93:44:34:af:fd:a8:e1:4c:7f:dd:31:c4:29:a6:2a:98:45:35:
         c1:59:12:d8:d1:aa:3f:c8:ba:38:c2:e5:0b:43:d7:4d:9a:0c:
         85:cf:ca:d2:cc:fa:5a:63:7c:7f:af:cf:6f:84:31:91:c2:2e:
         5c:0c:74:05:a8:c5:e6:fd:0f:2b:0e:0e:4b:c6:56:80:c3:66:
         60:e6:c9:9b:6c:cb:6e:4a:a0:2c:90:dd:a8:30:a6:09:54:8f:
         2d:77:c6:cf:4c:47:bb:74:c9:ff:d8:d4:2e:2d:e3:53:a1:fc:
         c8:b7:cd:21:5c:fa:ea:ad:32:49:1b:12:ea:94:10:89:78:e2:
         78:a0:d9:aa:a4:82:30:17:5a:6f:40:87:73:c7:e6:18:1b:44:
         c4:db:d9:ac:82:f5:74:c5:1a:2e:4a:75:93:ad:1f:e7:04:08:
         90:9c:1b:1a:6b:8c:ec:58:63:dc:11:3a:94:eb:97:65:86:61:
         aa:d9:24:f6:83:da:73:e1:92:95:ca:4f:4b:d6:88:a7:0b:da:
         01:62:06:3d:e6:d9:f5:a5:d2:8b:f0:7c:92:ba:58:b9:b8:3f:
         f0:1d:14:f2:19:b9:97:b6:db:09:62:57:fa:99:4f:4a:eb:0c:
         f2:69:6a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:26 2024 by rpki-client on console-ams.rpki-client.org