Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/79au5FaEi3qDbmOzhYc1ilRm00k.roa
File:                     79au5FaEi3qDbmOzhYc1ilRm00k.roa (raw, json)
Hash identifier:          s8IE9P5ClF8OPzRDVppu0t5CJsw+682PhOONrHJ4ZVw=
Subject key identifier:   EF:D6:AE:E4:56:84:8B:7A:83:6E:63:B3:85:87:35:8A:54:66:D3:49
Certificate issuer:       /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial:       1A04DB37
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/79au5FaEi3qDbmOzhYc1ilRm00k.roa
Signing time:             Wed 04 May 2022 22:49:51 +0000
ROA not before:           Wed 04 May 2022 22:49:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     46261
IP address blocks:        193.187.153.0/24 maxlen: 32
                          45.138.210.0/23 maxlen: 24
                          213.232.104.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 436525879 (0x1a04db37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: May  4 22:49:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=efd6aee456848b7a836e63b38587358a5466d349
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0f:3b:02:5a:ad:63:e4:12:88:93:10:3b:83:
                    29:25:16:6a:02:ac:96:ab:6f:13:bb:f5:62:7c:e4:
                    8c:fb:64:d6:20:0a:14:f1:56:95:16:cc:63:16:e0:
                    b1:55:c4:3f:e2:68:fe:ed:c7:b1:9d:72:6e:a6:bb:
                    b9:8e:c1:d9:ad:ac:3e:42:43:3c:97:08:00:85:c7:
                    08:06:fc:39:b7:d4:a1:03:00:6c:0f:ca:61:c9:c6:
                    b5:2c:70:ef:13:1c:48:c6:46:1c:7e:ba:4f:96:44:
                    2f:c1:19:d5:40:7b:28:ba:0d:f4:6b:fb:40:26:41:
                    cb:6c:b5:6a:39:b4:c5:ca:ad:45:f2:39:63:fb:7e:
                    36:5d:b2:f6:24:7f:c8:08:3e:46:ba:de:5c:de:a5:
                    93:f6:d8:a7:92:83:f4:2e:ef:15:27:dc:44:60:86:
                    c2:93:1c:4d:4c:5e:be:13:db:24:2b:82:3d:ac:6a:
                    27:e2:28:83:89:f8:e5:d5:0b:f7:90:ed:fb:72:99:
                    c5:d2:d0:4a:51:9a:50:32:0d:ae:49:52:41:e7:03:
                    5c:9b:ff:f6:74:77:cc:39:14:eb:8b:64:fa:82:7a:
                    5c:2e:82:c5:c7:6c:36:c9:45:a5:c7:eb:ff:3f:85:
                    d0:91:df:58:bf:67:e8:eb:ef:5d:54:c2:a6:cb:bc:
                    53:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:D6:AE:E4:56:84:8B:7A:83:6E:63:B3:85:87:35:8A:54:66:D3:49
            X509v3 Authority Key Identifier:
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/79au5FaEi3qDbmOzhYc1ilRm00k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.138.210.0/23
                  193.187.153.0/24
                  213.232.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:87:cd:9b:dd:ec:cb:88:19:76:db:5a:aa:f2:de:00:27:a4:
         d2:22:ca:68:a1:05:69:6a:bc:0a:8a:be:78:aa:c6:6e:a6:f2:
         af:88:ba:5d:4e:c8:b7:78:35:0f:0d:ef:82:5a:dd:5e:ed:0b:
         30:80:7e:36:94:5c:c6:97:5f:35:7b:b2:9d:7f:80:1b:c4:8a:
         ac:5b:a4:17:91:25:6f:12:22:6a:3d:d7:08:58:2b:78:c8:d9:
         f8:4b:33:d4:43:aa:65:b1:36:38:46:57:03:72:be:be:a0:e4:
         38:f5:d5:cc:f6:29:af:a7:7e:df:ae:1e:90:2d:55:98:50:55:
         09:ec:cd:dd:b5:f7:cc:3e:43:83:cc:96:c5:6b:b5:46:40:94:
         2f:f9:95:9b:48:7a:1b:a7:b5:35:a8:b4:a8:5b:4a:0d:f7:60:
         b8:18:50:da:b3:42:48:0a:40:84:b7:86:20:a1:e9:6d:3f:83:
         53:2a:5d:3a:75:c0:d6:7c:46:cb:9e:7d:84:d6:1d:82:93:b8:
         d0:95:c0:95:fe:b6:f7:55:96:92:a7:79:3d:18:61:71:b6:f1:
         95:64:16:25:2d:92:b1:bf:41:d0:bb:8e:51:bc:0e:b1:0a:5c:
         fc:83:8f:48:68:8e:ca:12:48:f8:a0:df:56:f3:5d:91:63:17:
         63:4d:d3:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:45 2024 by rpki-client on console-fra.rpki-client.org