Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/vSBveNUrFcilc3exEqr_bUvrn-8.roa
File:                     vSBveNUrFcilc3exEqr_bUvrn-8.roa (raw, json)
Hash identifier:          K2WHuZIKByd/aSOZg/AQE32d/lOrORaCPW+iCJ3h1CM=
Subject key identifier:   BD:20:6F:78:D5:2B:15:C8:A5:73:77:B1:12:AA:FF:6D:4B:EB:9F:EF
Certificate issuer:       /CN=e5b1de7443eaf18ceb06888d7ef93a5635a4ae1e
Certificate serial:       0170F2
Authority key identifier: E5:B1:DE:74:43:EA:F1:8C:EB:06:88:8D:7E:F9:3A:56:35:A4:AE:1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5bHedEPq8YzrBoiNfvk6VjWkrh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/vSBveNUrFcilc3exEqr_bUvrn-8.roa
Signing time:             Tue 10 May 2022 07:49:53 +0000
ROA not before:           Tue 10 May 2022 07:49:53 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     43473
IP address blocks:        91.195.14.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 94450 (0x170f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5b1de7443eaf18ceb06888d7ef93a5635a4ae1e
        Validity
            Not Before: May 10 07:49:53 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=bd206f78d52b15c8a57377b112aaff6d4beb9fef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3f:8d:0e:86:80:1f:f7:a3:24:1c:63:86:91:
                    c7:43:e1:d9:a0:25:87:e6:99:be:54:98:ed:0d:5d:
                    f1:82:02:34:d5:32:f3:1b:75:ca:be:8d:6a:dd:46:
                    ce:ae:25:bd:58:59:b6:1f:5e:b5:f5:63:a1:f3:6f:
                    b7:47:1d:50:ad:0b:ec:31:aa:5e:ea:74:9e:2c:e4:
                    3f:fb:22:5c:f9:f0:da:2b:34:06:3d:29:51:7d:ed:
                    f1:fb:a3:8e:fc:eb:66:a0:2f:cd:e6:cc:2c:04:1b:
                    8d:26:81:15:b4:6b:cb:c0:09:d4:43:0f:d2:1a:6e:
                    1a:c5:22:1c:0c:d5:8a:aa:04:e9:86:40:72:09:a0:
                    3b:3a:7d:a6:b6:0e:79:0d:a0:38:1b:35:06:49:23:
                    74:51:79:56:f1:f5:11:97:7b:b5:d3:16:21:ed:65:
                    6b:b9:1f:e4:01:9c:0c:7e:f1:ca:76:ac:ab:79:f0:
                    9b:f9:2d:c5:f5:2c:79:e5:69:7e:89:e8:b4:52:9c:
                    1d:02:b0:5c:f0:9d:b7:9a:92:42:eb:6f:06:fd:b1:
                    7d:d1:38:27:d4:a8:41:bb:c4:01:cc:87:20:d5:cb:
                    ad:93:c2:e5:a9:56:4e:19:9f:01:36:c2:de:ce:78:
                    29:1b:60:34:1d:c2:56:36:59:8e:56:7c:2f:91:0a:
                    13:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:20:6F:78:D5:2B:15:C8:A5:73:77:B1:12:AA:FF:6D:4B:EB:9F:EF
            X509v3 Authority Key Identifier:
                keyid:E5:B1:DE:74:43:EA:F1:8C:EB:06:88:8D:7E:F9:3A:56:35:A4:AE:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5bHedEPq8YzrBoiNfvk6VjWkrh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/vSBveNUrFcilc3exEqr_bUvrn-8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.195.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         82:9b:9b:c3:e7:9e:2a:e4:26:de:b4:bb:49:7d:5e:d1:3f:03:
         e0:9e:58:20:ec:fe:a0:2f:88:06:79:c3:56:32:2e:66:15:65:
         02:f2:42:04:4e:aa:20:f1:e7:8a:5d:06:18:21:22:2e:9f:43:
         a5:d6:1e:1c:4e:b8:6c:01:bb:e5:3d:61:1e:2c:a5:8f:1d:0b:
         27:27:83:cb:79:70:c0:0e:5c:64:48:6b:4d:05:3d:ff:87:c5:
         8e:da:95:e4:eb:a2:23:7b:42:ba:9c:15:15:9b:cc:7e:71:ef:
         b5:e5:f4:9c:f2:53:e6:64:f5:9d:d2:0a:2a:88:74:6b:ae:3a:
         68:4e:e6:db:3c:f3:fe:e7:75:72:86:cf:52:31:4a:e2:d6:a4:
         99:fe:b8:ff:8f:d3:24:dd:36:05:73:23:ed:f5:d2:b7:16:1f:
         7a:dd:0c:94:e5:f0:15:84:a6:d6:8a:ef:2f:e1:ec:c8:f9:a7:
         99:16:b1:0d:f2:1b:8e:12:81:46:97:67:0b:47:50:6a:0e:cc:
         1f:94:c8:8e:58:e8:96:22:64:87:ee:e3:be:e3:6d:ff:36:92:
         53:f0:3c:59:08:a3:7d:94:60:3b:c1:b9:86:0d:cd:85:1a:f8:
         2b:e2:8a:b5:ad:08:cf:4f:90:3e:fb:71:44:af:0e:64:5e:96:
         bc:85:bf:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:54 2024 by rpki-client on console-fra.rpki-client.org