Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/e197fc-7bf1-4ec5-ab4e-5cabe6d54c93/1/A5Kg_N7DX-KrSFAXL5fDl-olWFM.roa
File:                     A5Kg_N7DX-KrSFAXL5fDl-olWFM.roa (raw, json)
Hash identifier:          OqvYH1jhoxxaM91Vm6+AF2UqDb1fB9n6bWxlxZSoHhM=
Subject key identifier:   03:92:A0:FC:DE:C3:5F:E2:AB:48:50:17:2F:97:C3:97:EA:25:58:53
Certificate issuer:       /CN=f25b336456b47dfc0f39dc91a6b882a4aabbeab3
Certificate serial:       03077398
Authority key identifier: F2:5B:33:64:56:B4:7D:FC:0F:39:DC:91:A6:B8:82:A4:AA:BB:EA:B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8lszZFa0ffwPOdyRpriCpKq76rM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/e197fc-7bf1-4ec5-ab4e-5cabe6d54c93/1/A5Kg_N7DX-KrSFAXL5fDl-olWFM.roa
Signing time:             Sun 01 May 2022 14:31:43 +0000
ROA not before:           Sun 01 May 2022 14:31:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     9009
IP address blocks:        194.76.218.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50819992 (0x3077398)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f25b336456b47dfc0f39dc91a6b882a4aabbeab3
        Validity
            Not Before: May  1 14:31:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0392a0fcdec35fe2ab4850172f97c397ea255853
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:85:2c:01:e3:63:ba:68:0d:ec:00:e1:dd:fa:
                    b0:7e:70:38:a5:7a:8f:12:e2:70:fa:13:02:51:79:
                    e1:19:b7:c9:02:95:bf:0b:08:35:a9:67:4b:1e:7e:
                    f9:d3:78:b1:22:18:9e:35:f5:7b:3b:49:cb:ea:64:
                    74:05:1c:14:97:98:31:c3:f4:40:ec:7a:dc:6c:70:
                    02:63:42:54:79:c7:84:73:f0:d5:e5:94:fd:65:47:
                    5e:cc:b8:27:1c:44:a2:bb:b5:ef:fe:eb:54:49:84:
                    9e:ce:92:37:24:b2:cf:2a:b6:9d:21:bd:52:1e:5f:
                    9f:ec:09:3a:08:d1:cc:5d:34:03:b5:2a:3c:3b:b3:
                    17:4e:d4:f9:6a:55:75:e3:1b:5c:a5:dc:f0:68:37:
                    e9:f1:8f:be:b9:6c:70:98:2c:b7:a4:e8:0e:90:29:
                    53:2a:66:f0:8c:37:44:a3:62:26:ff:f6:7f:9d:26:
                    1f:e7:ea:ca:12:1e:93:8a:bc:a4:af:94:6e:81:a3:
                    be:df:07:cd:29:d2:16:45:88:1b:b4:b4:0b:6f:f1:
                    5e:27:80:bf:03:96:df:0f:64:76:7b:b1:3d:c8:d0:
                    3a:a7:0f:77:0e:5a:ed:ff:4f:f4:5d:89:be:a4:9d:
                    3b:93:ce:eb:bd:c1:40:bd:33:8c:83:b3:81:53:d5:
                    d3:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:92:A0:FC:DE:C3:5F:E2:AB:48:50:17:2F:97:C3:97:EA:25:58:53
            X509v3 Authority Key Identifier:
                keyid:F2:5B:33:64:56:B4:7D:FC:0F:39:DC:91:A6:B8:82:A4:AA:BB:EA:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8lszZFa0ffwPOdyRpriCpKq76rM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/e197fc-7bf1-4ec5-ab4e-5cabe6d54c93/1/A5Kg_N7DX-KrSFAXL5fDl-olWFM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/e197fc-7bf1-4ec5-ab4e-5cabe6d54c93/1/8lszZFa0ffwPOdyRpriCpKq76rM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.76.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:42:12:42:7f:8f:7d:80:ce:e8:c6:84:51:30:3a:35:c4:41:
         dd:d6:21:4b:de:22:1e:d4:47:3f:a3:51:47:ae:f8:a1:32:c7:
         e1:a8:37:8e:b4:6c:eb:4c:81:3a:68:8c:3d:bc:65:71:e3:41:
         b9:f0:bd:d2:4f:a2:55:09:72:88:48:c3:65:5e:b8:f0:e4:f9:
         cd:ce:a9:d6:f5:2f:bd:cd:09:3a:84:28:eb:6a:2b:d0:1e:4e:
         7b:19:9a:4f:71:62:b6:28:4e:95:83:22:41:b1:98:11:4b:49:
         67:9c:c7:1c:a8:0f:be:4c:59:66:09:25:67:1c:51:97:6b:d9:
         bf:b7:14:f7:4e:bc:d0:b3:ba:45:b3:dc:3e:e6:8b:7f:01:a4:
         e1:ad:36:cb:11:35:d4:a5:ce:d2:8b:80:15:6f:12:af:5c:af:
         31:d7:2f:46:36:cf:f9:45:d1:3e:5f:2a:82:6e:1c:56:4b:c7:
         da:2c:bd:fa:7f:26:8c:9d:5a:51:d8:e9:f7:cf:89:b2:a7:83:
         21:cd:ea:19:c1:53:f4:b0:7f:0e:8d:43:40:49:90:f0:b5:91:
         6d:12:13:78:b9:02:4e:7a:0c:a3:72:2a:de:0b:a6:c4:ab:3d:
         3f:fd:78:00:db:ea:54:c5:b9:f0:cf:2c:eb:56:6f:1d:4b:e3:
         7f:f7:cb:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:21 2024 by rpki-client on console-ams.rpki-client.org