Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/s1Yd0YW-Q5BRTu5z1z_sW24vjSA.roa
File:                     s1Yd0YW-Q5BRTu5z1z_sW24vjSA.roa (raw, json)
Hash identifier:          Rd9EJFLqfYB8J/UMIlXgK/hgXZc8pAnujMVTwASOguI=
Subject key identifier:   B3:56:1D:D1:85:BE:43:90:51:4E:EE:73:D7:3F:EC:5B:6E:2F:8D:20
Certificate issuer:       /CN=a634878281144a46a856003d622f6141ea4e006f
Certificate serial:       11633515
Authority key identifier: A6:34:87:82:81:14:4A:46:A8:56:00:3D:62:2F:61:41:EA:4E:00:6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pjSHgoEUSkaoVgA9Yi9hQepOAG8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/s1Yd0YW-Q5BRTu5z1z_sW24vjSA.roa
Signing time:             Sat 01 Jan 2022 01:59:52 +0000
ROA not before:           Sat 01 Jan 2022 01:59:52 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     50213
IP address blocks:        92.62.43.0/24 maxlen: 24
                          92.62.42.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 291714325 (0x11633515)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a634878281144a46a856003d622f6141ea4e006f
        Validity
            Not Before: Jan  1 01:59:52 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b3561dd185be4390514eee73d73fec5b6e2f8d20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0e:c1:51:eb:f1:09:45:dc:eb:bc:29:87:0d:
                    e9:ae:e5:0e:c1:f2:70:d1:82:83:77:a8:db:2f:17:
                    07:31:40:d1:31:10:26:1b:12:9f:03:d3:ba:ec:ae:
                    be:bb:3c:db:3c:a6:7e:7b:1c:e0:4e:ef:c0:44:1a:
                    d0:3b:5c:02:55:bc:ca:33:f5:5f:90:dd:50:6a:04:
                    d8:e2:52:29:2d:b0:0d:9c:61:d8:bd:28:f8:fb:41:
                    b7:f7:97:5c:1e:2a:df:4e:12:a7:f2:63:39:75:3a:
                    0e:a7:9f:ac:76:bb:0e:eb:d9:55:47:08:a2:58:9f:
                    58:bf:02:09:6f:6a:b3:6e:66:28:d9:30:84:c4:89:
                    73:38:29:3b:5c:96:38:fa:99:88:e8:42:66:6c:4b:
                    1f:1b:2f:1b:ae:1a:bb:5f:7b:19:aa:fb:14:11:ce:
                    a7:d6:e9:c3:1c:7e:b0:d0:91:aa:0e:d4:92:bc:24:
                    73:44:5c:3a:8f:dc:8f:6a:41:bc:03:69:81:a2:85:
                    04:2f:7a:3f:85:d0:cc:cd:f5:7c:84:7d:b2:4d:ca:
                    d8:88:90:7c:4d:73:8e:59:87:3a:e3:84:85:93:42:
                    b2:48:8d:45:fb:17:eb:81:0f:b4:5a:59:1b:5a:a9:
                    84:5a:43:aa:48:f0:d3:ab:68:03:94:b0:6e:05:a6:
                    a8:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:56:1D:D1:85:BE:43:90:51:4E:EE:73:D7:3F:EC:5B:6E:2F:8D:20
            X509v3 Authority Key Identifier:
                keyid:A6:34:87:82:81:14:4A:46:A8:56:00:3D:62:2F:61:41:EA:4E:00:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjSHgoEUSkaoVgA9Yi9hQepOAG8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/s1Yd0YW-Q5BRTu5z1z_sW24vjSA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.62.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         af:9f:74:83:84:69:f6:91:61:09:85:e1:ef:d7:0e:28:e0:24:
         7c:eb:49:c6:64:45:8d:82:78:69:d8:18:43:b3:b0:10:7a:c1:
         8d:83:b6:56:30:a9:61:58:af:fa:a5:9b:f3:6c:50:cc:10:07:
         6c:79:e5:59:be:59:f6:bf:bd:5a:ac:47:81:1f:ae:38:7f:99:
         d5:b4:af:60:ad:cb:97:1f:ee:6c:a1:83:c3:af:10:48:8a:9f:
         ed:03:5a:ea:95:1a:2c:a0:24:3e:57:78:bc:87:bf:00:66:b7:
         4b:a2:9f:77:25:4b:5c:4b:d7:f0:02:05:6e:d4:10:ab:99:64:
         95:69:02:92:a6:5c:2c:91:ec:2a:7e:c9:48:5e:b7:5d:33:5c:
         db:94:26:fb:da:86:99:75:54:9a:57:45:25:6d:9c:29:a0:44:
         b4:c5:7e:61:df:1e:c2:62:ec:b0:39:63:ef:03:55:c6:c5:b5:
         05:13:8b:55:54:e3:69:94:c5:3a:d9:ce:e3:d0:06:5b:6e:90:
         b2:8e:27:74:fb:07:c9:eb:50:b1:a2:34:da:f7:3f:e2:7e:bc:
         42:97:f0:f5:f6:0d:88:12:c5:12:62:72:c0:df:6d:ed:7e:ae:
         b8:7d:79:45:4b:09:6e:4c:27:12:23:a9:d6:d9:80:b0:3c:51:
         91:39:54:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:48 2024 by rpki-client on console-ams.rpki-client.org