Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/4DlqZT9htEhmj9poUb4BpncpdEw.roa
File:                     4DlqZT9htEhmj9poUb4BpncpdEw.roa (raw, json)
Hash identifier:          IMAaNCPiQGTHzW2jDHUamZWe0xQea8iksXff3gSxSto=
Subject key identifier:   E0:39:6A:65:3F:61:B4:48:66:8F:DA:68:51:BE:01:A6:77:29:74:4C
Certificate issuer:       /CN=be49fb190f4bd0f5815a8e579f366ad58d5d41f9
Certificate serial:       04958CA8
Authority key identifier: BE:49:FB:19:0F:4B:D0:F5:81:5A:8E:57:9F:36:6A:D5:8D:5D:41:F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/4DlqZT9htEhmj9poUb4BpncpdEw.roa
Signing time:             Sat 01 Jan 2022 10:03:32 +0000
ROA not before:           Sat 01 Jan 2022 10:03:32 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     133398
IP address blocks:        91.224.92.0/24 maxlen: 24
                          185.36.81.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76909736 (0x4958ca8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be49fb190f4bd0f5815a8e579f366ad58d5d41f9
        Validity
            Not Before: Jan  1 10:03:32 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e0396a653f61b448668fda6851be01a67729744c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e6:76:68:6b:ed:55:4b:43:c6:cf:65:9d:48:
                    54:a3:ca:17:91:31:ed:a1:20:85:d0:b1:36:74:4e:
                    88:db:45:d8:01:1e:dd:20:b4:d6:84:d2:ef:74:8c:
                    ae:a4:a5:1c:fb:03:b4:df:27:62:41:b4:1f:bb:f6:
                    56:66:e6:04:98:40:5a:e1:e3:ce:1d:bb:f8:71:63:
                    91:c5:78:8b:3a:38:89:93:19:6b:b7:f0:19:fd:fb:
                    31:cc:39:04:eb:f3:35:56:af:de:e4:8b:14:ef:ff:
                    e7:bb:dd:ea:28:2a:f5:4e:13:b4:8c:95:13:2f:45:
                    c9:f2:72:c3:37:f4:9e:59:a2:d7:3e:df:c2:f8:52:
                    ac:9a:90:e1:01:13:56:5e:c5:6e:37:43:cd:8e:e7:
                    ac:04:2c:78:4d:a0:b3:07:1e:78:df:ad:ba:31:8f:
                    5d:95:27:fd:e6:1b:d1:ff:15:79:8f:55:cc:65:54:
                    ab:88:4a:9b:2f:1b:e8:bc:2e:36:44:7a:11:54:b4:
                    d2:a9:39:b0:e7:0b:04:ec:ab:4e:05:bf:11:e9:e3:
                    f3:e4:ae:31:e0:b1:32:9b:ac:33:08:33:07:32:c3:
                    9c:1d:9a:31:90:a2:0e:d7:9d:2e:a2:71:72:6c:2f:
                    7a:0f:95:dc:53:b6:fd:d7:66:36:19:5b:e2:a2:de:
                    19:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:39:6A:65:3F:61:B4:48:66:8F:DA:68:51:BE:01:A6:77:29:74:4C
            X509v3 Authority Key Identifier:
                keyid:BE:49:FB:19:0F:4B:D0:F5:81:5A:8E:57:9F:36:6A:D5:8D:5D:41:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/4DlqZT9htEhmj9poUb4BpncpdEw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.224.92.0/24
                  185.36.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:4f:c8:ce:dc:66:b2:e9:3a:56:b3:ce:9f:cb:c4:e7:26:d2:
         ab:01:91:51:78:30:d8:ec:db:ce:94:c3:af:d8:18:70:6a:58:
         bc:43:1e:23:2b:7a:a8:a9:f0:db:05:c0:22:ff:91:84:b0:78:
         f6:e6:8a:8a:17:4d:5a:a3:a4:a5:8b:90:4d:ae:91:e9:a6:97:
         5a:28:d7:af:4e:48:74:bc:a4:db:4e:4a:2c:9f:94:64:69:40:
         0a:35:c3:ac:65:c8:93:d9:a7:ff:c0:d4:80:58:eb:e2:10:8c:
         2b:6f:ef:b5:8c:41:2c:b7:da:cd:ce:51:b0:e3:48:38:53:68:
         b2:52:fb:42:99:22:d2:e2:db:e6:37:09:9a:0b:f5:d1:09:bc:
         f4:51:20:ab:8b:43:56:c9:4b:42:27:11:e8:65:ff:7a:1c:ee:
         d4:88:ec:bc:7f:eb:c9:11:ac:c9:43:12:6a:a5:14:5f:12:8a:
         26:0c:b4:e3:67:74:d2:d9:b0:c1:fe:71:94:95:d3:67:86:8d:
         95:a5:38:07:8c:92:b3:e8:58:a2:9c:09:86:30:c7:d7:c7:74:
         45:42:06:08:41:a4:70:30:f6:b5:01:d7:20:0e:63:d2:3b:e5:
         48:0b:3f:9d:e4:a7:6c:6b:8e:3f:62:3c:cc:10:8d:91:01:97:
         40:1b:1c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:44 2024 by rpki-client on console-fra.rpki-client.org