Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/OAeGmO-1YyARoSUfxC1wS-x1ju4.roa
File:                     OAeGmO-1YyARoSUfxC1wS-x1ju4.roa (raw, json)
Hash identifier:          ImYyl4LNTNXBfEDdy/Q2YQsCuxeDg7XeGOLho05OiXQ=
Subject key identifier:   38:07:86:98:EF:B5:63:20:11:A1:25:1F:C4:2D:70:4B:EC:75:8E:EE
Certificate issuer:       /CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Certificate serial:       0A22B260
Authority key identifier: 41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/OAeGmO-1YyARoSUfxC1wS-x1ju4.roa
Signing time:             Thu 28 Apr 2022 07:53:08 +0000
ROA not before:           Thu 28 Apr 2022 07:53:08 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     197741
IP address blocks:        82.119.81.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 170046048 (0xa22b260)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4104a40821c4176cc42e255ef6c1727473c3f00a
        Validity
            Not Before: Apr 28 07:53:08 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=38078698efb5632011a1251fc42d704bec758eee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e6:15:c6:5b:6e:24:69:b7:fe:a4:bd:58:1d:
                    21:39:80:53:96:da:fb:bd:e8:14:09:bd:fd:8e:4e:
                    55:17:5f:e7:c3:00:53:4a:64:a9:d9:a3:26:52:08:
                    83:1d:ba:56:f4:d7:d6:65:ca:71:29:95:94:83:5a:
                    77:da:55:1f:e3:50:23:bf:03:70:60:1e:7b:e3:0e:
                    2d:6b:b5:d0:24:67:45:02:9a:a9:9e:27:2c:cc:5a:
                    21:7f:cc:92:9f:0e:b7:36:4f:9c:48:1f:c7:12:60:
                    43:e1:81:bd:de:ed:51:98:90:1d:fc:0f:18:91:58:
                    ee:06:b8:6b:9c:bb:1e:c4:2b:17:5c:2c:ca:75:a2:
                    a7:9e:68:84:35:b3:b9:d0:a4:7c:e7:c3:1c:2a:8b:
                    b6:b4:ee:c5:dc:46:06:33:b4:58:12:83:2f:95:7a:
                    da:ac:e1:0e:9b:c5:f5:ab:ad:de:3c:1e:46:11:1a:
                    8e:15:a1:06:ab:f7:0c:24:5b:73:ea:b8:85:ba:a5:
                    ec:6b:14:80:ed:f8:69:36:fa:d9:05:2c:4d:83:fb:
                    c8:8c:0b:14:c2:a3:c3:d3:84:61:0c:54:eb:43:a1:
                    39:f1:4f:33:fc:f4:6b:63:cc:49:59:44:d3:74:6d:
                    0b:11:9c:b8:0c:1e:19:08:71:ec:c1:73:1f:58:18:
                    46:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:07:86:98:EF:B5:63:20:11:A1:25:1F:C4:2D:70:4B:EC:75:8E:EE
            X509v3 Authority Key Identifier:
                keyid:41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/OAeGmO-1YyARoSUfxC1wS-x1ju4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.119.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:c5:25:4a:de:d5:4d:f6:b7:1e:f5:6b:c3:98:54:2b:64:e8:
         3c:f2:81:48:89:36:53:69:ce:cc:2d:c5:f0:e0:1d:6e:71:85:
         84:1d:3e:6f:f7:0c:aa:74:e4:e7:b6:0d:e2:66:48:5e:19:18:
         6e:c1:0a:e6:81:50:40:ef:fb:85:9a:26:5d:3e:08:4a:8a:f9:
         99:c2:87:7f:6a:20:e9:da:4f:00:59:ea:1e:01:a3:c5:9d:dc:
         41:c4:20:6b:21:32:d3:3a:01:36:fb:b8:f7:70:56:db:cc:2d:
         2e:02:98:07:85:75:cc:a0:95:41:ed:51:50:b5:97:df:d2:7f:
         4c:36:b7:ba:ef:e0:68:71:10:79:8a:d6:53:4c:ba:eb:1f:23:
         c6:26:b2:ce:3b:da:76:2c:ef:72:65:a6:9b:dc:fd:fa:c8:7e:
         c9:ba:07:95:fc:8e:47:e3:c8:75:16:24:bc:5b:15:b0:d9:50:
         2b:31:c0:40:5d:37:84:a9:fd:54:96:47:23:14:5b:3d:4d:a4:
         0a:3b:05:3d:81:7d:89:28:4f:9f:43:d7:60:a3:89:58:7e:94:
         3a:e0:49:f5:bf:ff:f6:21:81:b9:42:d4:28:0e:38:40:a5:30:
         25:ed:9d:5a:d2:e2:5b:c4:20:b0:60:d1:de:7c:93:38:4b:31:
         0f:32:66:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:56 2024 by rpki-client on console-fra.rpki-client.org