Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/VadVteSM__KSmfbM2zTzelzeR-Y.roa
File:                     VadVteSM__KSmfbM2zTzelzeR-Y.roa (raw, json)
Hash identifier:          0MmLPoDkOdP5rkxF5P8WS4njKKpxjo2NpoqTa8h7Ibs=
Subject key identifier:   55:A7:55:B5:E4:8C:FF:F2:92:99:F6:CC:DB:34:F3:7A:5C:DE:47:E6
Certificate issuer:       /CN=c04ede1e7bf67199e7ab6f5ed0049e9608317362
Certificate serial:       05AA50CD
Authority key identifier: C0:4E:DE:1E:7B:F6:71:99:E7:AB:6F:5E:D0:04:9E:96:08:31:73:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wE7eHnv2cZnnq29e0ASelggxc2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/VadVteSM__KSmfbM2zTzelzeR-Y.roa
Signing time:             Tue 04 Jan 2022 10:22:51 +0000
ROA not before:           Tue 04 Jan 2022 10:22:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3274
IP address blocks:        81.20.224.0/20 maxlen: 24
                          193.28.203.0/24 maxlen: 24
                          2001:67c:110::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 95047885 (0x5aa50cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c04ede1e7bf67199e7ab6f5ed0049e9608317362
        Validity
            Not Before: Jan  4 10:22:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=55a755b5e48cfff29299f6ccdb34f37a5cde47e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b1:6c:7d:2e:82:64:4c:07:4a:ba:7f:47:90:
                    aa:80:0f:a6:6e:c9:97:1d:2b:7c:cf:8c:23:ee:52:
                    c2:59:b0:37:64:05:f5:c2:13:c9:52:f7:fa:9e:6e:
                    cb:65:5d:34:23:e1:45:29:ed:29:cd:fb:69:be:61:
                    55:20:09:7e:b0:19:ef:ab:25:41:32:2b:7e:e9:db:
                    14:ae:dc:ab:8c:5f:36:76:44:0c:63:a2:d9:f3:76:
                    51:ae:48:3b:fa:22:8d:d3:09:d7:a4:cd:16:5f:3e:
                    88:80:9d:8c:61:c0:bb:65:95:49:60:af:1b:39:ef:
                    81:6c:7d:b5:c4:42:69:6b:df:0e:77:f6:a6:4d:cc:
                    fb:ff:a8:e0:d8:b7:bf:74:07:c8:b8:db:fb:38:39:
                    0e:52:b7:56:66:ab:55:4d:13:67:6b:b0:56:69:c6:
                    82:a1:00:42:8a:49:86:2f:27:b0:c0:50:65:d3:01:
                    f1:81:bc:7a:a3:a7:49:a1:ea:92:06:5f:04:44:29:
                    9e:d9:94:5e:19:b0:99:ae:85:52:82:a8:9b:15:5c:
                    04:08:31:5f:2f:29:ad:31:16:8c:3b:bd:8a:46:72:
                    d6:f0:03:03:2f:91:4f:e3:46:9e:2e:27:63:aa:f5:
                    50:73:0f:4b:c8:47:67:27:e3:d3:7f:be:60:84:78:
                    da:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:A7:55:B5:E4:8C:FF:F2:92:99:F6:CC:DB:34:F3:7A:5C:DE:47:E6
            X509v3 Authority Key Identifier:
                keyid:C0:4E:DE:1E:7B:F6:71:99:E7:AB:6F:5E:D0:04:9E:96:08:31:73:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wE7eHnv2cZnnq29e0ASelggxc2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/VadVteSM__KSmfbM2zTzelzeR-Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.20.224.0/20
                  193.28.203.0/24
                IPv6:
                  2001:67c:110::/48

    Signature Algorithm: sha256WithRSAEncryption
         b6:9e:7a:2e:b0:01:a8:b0:37:8f:c9:1a:56:1c:73:2f:ba:12:
         de:3c:94:97:3c:3a:7c:b0:c4:df:72:c3:a3:4f:fd:9c:85:f0:
         a7:e8:ba:72:14:e5:3d:07:db:0b:29:97:59:93:4c:c4:ec:25:
         5e:d6:c0:48:e5:d0:f4:f8:53:fc:6d:b3:97:46:80:53:50:e3:
         d0:3f:f5:ee:65:db:b9:19:02:66:7b:7e:62:85:f3:83:db:d0:
         87:7b:0f:b2:0f:fb:f0:3c:e0:e7:00:54:41:a8:f6:f6:a3:90:
         30:5f:f5:3b:23:f2:96:af:13:22:fd:55:68:dc:b1:fa:4e:cb:
         28:3a:e2:15:1e:a4:2e:b4:2a:fc:d1:82:ad:18:11:47:81:f3:
         f1:a9:e5:0b:5b:68:56:d1:42:63:d3:d5:65:c7:b3:77:20:8e:
         1c:01:e5:7a:4f:a5:7e:12:9a:df:c3:01:93:f5:98:19:58:ba:
         bd:5d:ad:03:e4:91:0a:4d:15:ad:ae:fd:c8:42:e5:f3:dc:ae:
         88:23:6f:22:5a:64:1b:6b:2c:5a:37:43:16:5e:6b:87:e5:68:
         24:62:6c:4b:15:42:ad:79:e4:79:d0:88:be:93:f7:db:ea:86:
         ea:74:e3:02:dc:dc:49:22:37:a9:05:f5:c0:fb:20:7d:b8:47:
         bc:c2:3a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:09 2024 by rpki-client on console-fra.rpki-client.org