Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/lc8jxhyTZ1XhdxwmI1VK7VwDeMU.roa
File:                     lc8jxhyTZ1XhdxwmI1VK7VwDeMU.roa (raw, json)
Hash identifier:          ndyEtPz8NetheHdLyuW1h8vCQOZaRHHFO/INfGekA+w=
Subject key identifier:   95:CF:23:C6:1C:93:67:55:E1:77:1C:26:23:55:4A:ED:5C:03:78:C5
Certificate issuer:       /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial:       0F496A81
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/lc8jxhyTZ1XhdxwmI1VK7VwDeMU.roa
Signing time:             Sat 01 Jan 2022 12:58:26 +0000
ROA not before:           Sat 01 Jan 2022 12:58:26 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49176
IP address blocks:        185.117.81.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 256469633 (0xf496a81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
        Validity
            Not Before: Jan  1 12:58:26 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=95cf23c61c936755e1771c2623554aed5c0378c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:89:3b:08:08:cb:d8:38:d1:4b:d3:bf:a2:4b:
                    54:de:46:bc:3f:79:51:86:d0:a9:53:80:b4:b8:ac:
                    bb:a1:4b:11:40:a8:73:0b:3d:10:5b:26:8b:ab:9a:
                    00:e9:33:0a:a7:bd:5c:c3:e9:9a:00:83:3a:3d:22:
                    b0:96:fb:ae:55:7f:0e:27:9d:75:76:53:cf:9b:7e:
                    be:31:cd:ce:b7:f8:67:96:ee:55:fb:16:f8:f2:7e:
                    b4:c0:bc:6d:c0:50:51:37:f9:d8:19:6e:8e:5b:04:
                    c1:8f:41:23:65:b9:36:b9:ec:13:e7:83:e4:ea:3c:
                    7a:db:10:ca:81:43:5e:03:7c:3a:37:a4:56:4b:4d:
                    71:da:48:cb:32:05:99:99:74:8e:ee:f9:d0:94:37:
                    a5:e5:dc:80:5e:74:58:7d:aa:d4:0d:0b:cf:a1:c6:
                    41:35:ee:a0:77:a1:68:7b:b3:ac:f3:1a:eb:54:5f:
                    39:a8:78:4f:4c:1e:2f:7a:82:cf:b0:f6:15:a4:48:
                    f6:98:ce:1f:6d:97:01:3f:90:4b:00:64:05:1f:a6:
                    7e:0d:44:b2:e8:c6:6f:c5:8f:0e:04:9c:37:03:86:
                    b4:f0:fa:ed:43:24:cf:1b:f3:c6:9c:a4:ff:d5:a8:
                    38:0f:66:10:de:da:a4:0e:b8:9b:cd:0a:de:9f:4e:
                    9d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:CF:23:C6:1C:93:67:55:E1:77:1C:26:23:55:4A:ED:5C:03:78:C5
            X509v3 Authority Key Identifier:
                keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/lc8jxhyTZ1XhdxwmI1VK7VwDeMU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.117.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:f9:18:bf:ff:ac:48:a2:65:c7:65:f4:e6:9c:67:4d:aa:86:
         c4:54:0a:b6:52:26:26:f5:50:64:8a:04:99:18:b4:33:cb:31:
         53:82:bd:aa:f0:11:1e:77:fa:7a:c7:3f:22:17:43:84:cf:32:
         87:e3:7c:45:0b:b2:af:0f:9c:28:30:cc:0d:3b:27:4d:e2:9c:
         eb:c9:d0:54:a9:8c:91:35:3f:d6:a8:a3:6b:1b:33:2f:28:4f:
         c2:d0:05:be:52:f6:43:f5:88:cf:ea:b1:35:92:69:41:e0:0b:
         55:1f:3e:20:18:9f:31:ca:a2:e9:d3:7e:64:c9:7c:29:f8:a5:
         3b:50:81:07:45:7d:b3:1a:3f:1a:61:54:92:4b:9d:27:6a:35:
         00:a9:aa:6d:41:9c:85:80:b7:40:14:e3:a2:ea:de:71:14:cc:
         9d:86:fa:93:c6:dd:a2:04:c2:81:bf:9f:66:4b:82:b5:a8:f3:
         71:d1:a4:51:83:f7:c7:4d:54:bb:18:24:e1:4b:8b:11:48:bf:
         9e:37:bc:c5:44:f1:33:c2:d6:fe:a2:5a:b1:6e:d1:6b:04:2b:
         74:d0:dc:b7:b5:09:0f:0f:6c:6b:5a:b2:58:3e:e8:49:98:9d:
         80:97:9e:24:82:8c:79:a8:c8:8c:fd:c3:2b:5e:40:7a:13:15:
         ba:70:1c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:37 2024 by rpki-client on console-fra.rpki-client.org