Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/8eJkq7oTUhy7EwKZJWmCrb8zLFs.roa
File:                     8eJkq7oTUhy7EwKZJWmCrb8zLFs.roa (raw, json)
Hash identifier:          9RYfJJpfyt3T1IlSkiOzA61OLyjBMP6bOB1lQVGqEe4=
Subject key identifier:   F1:E2:64:AB:BA:13:52:1C:BB:13:02:99:25:69:82:AD:BF:33:2C:5B
Certificate issuer:       /CN=4d70af1a99886c9101d135f54bd2bdef358b266e
Certificate serial:       0BE66F
Authority key identifier: 4D:70:AF:1A:99:88:6C:91:01:D1:35:F5:4B:D2:BD:EF:35:8B:26:6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TXCvGpmIbJEB0TX1S9K97zWLJm4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/8eJkq7oTUhy7EwKZJWmCrb8zLFs.roa
Signing time:             Mon 02 May 2022 17:49:20 +0000
ROA not before:           Mon 02 May 2022 17:49:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     62053
IP address blocks:        188.215.115.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 779887 (0xbe66f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d70af1a99886c9101d135f54bd2bdef358b266e
        Validity
            Not Before: May  2 17:49:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f1e264abba13521cbb130299256982adbf332c5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:91:b8:16:f4:7b:0c:a4:ae:80:88:0b:81:1a:
                    bc:00:2e:89:c0:d6:29:2d:35:dd:97:53:b0:bf:b9:
                    9b:f0:e6:8e:00:c4:0d:65:87:58:06:3c:40:75:46:
                    93:3e:61:e5:0a:7d:d1:ee:bb:12:a6:4a:64:de:81:
                    1c:f6:aa:e8:b0:c1:09:fc:20:a4:51:bd:29:7c:3a:
                    11:1c:f2:f8:e9:c3:ae:d3:d9:d0:e4:be:36:62:4d:
                    c5:9a:a8:b7:c9:56:c1:63:9a:ec:ae:f8:72:0f:cb:
                    92:6d:66:85:5a:2d:e0:6e:ce:ab:df:38:d2:04:26:
                    18:9a:a8:bf:1b:41:8f:75:93:b4:04:0e:75:5b:0b:
                    7b:37:bd:2d:db:28:a9:9e:c6:7a:bb:45:ba:58:c4:
                    75:fe:54:2c:3f:65:99:a0:22:8c:35:7f:36:87:e6:
                    e1:ba:32:a9:fe:ef:ff:00:fa:21:23:1f:73:42:90:
                    52:95:a6:80:0f:d5:79:22:69:c5:e9:1a:53:c0:4b:
                    9d:5f:58:19:9f:93:59:05:42:b2:9e:85:0e:7c:16:
                    de:d8:d0:8f:75:39:ae:3f:8f:01:8b:8a:a5:5e:2a:
                    22:66:57:14:79:97:25:d4:e6:a3:a0:93:98:b3:5e:
                    57:f6:00:62:16:79:dc:8f:1f:91:06:15:20:e8:a3:
                    2e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:E2:64:AB:BA:13:52:1C:BB:13:02:99:25:69:82:AD:BF:33:2C:5B
            X509v3 Authority Key Identifier:
                keyid:4D:70:AF:1A:99:88:6C:91:01:D1:35:F5:4B:D2:BD:EF:35:8B:26:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TXCvGpmIbJEB0TX1S9K97zWLJm4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/8eJkq7oTUhy7EwKZJWmCrb8zLFs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.215.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:6e:c8:dc:9d:1a:c6:5b:10:79:a2:36:ea:e2:4c:25:e9:a5:
         b9:4e:32:20:cc:05:9a:b1:ad:1f:8a:2d:d3:b2:c6:85:eb:25:
         c1:ec:5e:ed:49:6f:dd:cc:3e:c3:a5:0e:f6:60:70:d8:65:ad:
         b8:5c:ae:f2:a3:ad:07:aa:c1:66:a9:4c:28:49:51:ed:c2:37:
         be:0b:8f:f7:0e:bd:a1:69:89:12:ec:bb:14:03:86:43:0a:5c:
         50:c6:7d:78:e6:16:56:3c:e2:5a:f2:0f:15:63:dc:0a:85:dc:
         70:14:73:f8:8b:c2:44:6b:9c:dc:f1:ea:66:9c:40:86:74:f3:
         4b:48:82:2e:85:09:0f:62:3b:39:9b:8c:92:81:c5:8d:0b:6b:
         2c:b0:a5:15:6b:49:7b:72:17:a1:c1:db:ba:e9:6f:e8:87:bd:
         53:3c:99:e8:a5:1e:6e:a6:f5:f3:50:12:5c:af:c2:d9:0a:f6:
         19:02:0d:85:7b:2e:e9:cc:3d:41:f4:b7:54:11:7a:3a:36:29:
         52:c6:93:06:5a:c2:7b:f6:5f:b1:60:91:ff:a0:2a:27:cf:3d:
         dc:04:02:b8:fd:82:c9:86:50:f4:f6:23:59:7c:20:30:80:9c:
         89:04:6d:18:ad:d6:9f:ed:d2:67:34:18:60:96:b9:82:ad:21:
         65:7d:48:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:12 2024 by rpki-client on console-fra.rpki-client.org