Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/gGofXeuBFUOQl5V1jOAUAXKdcqg.roa
File:                     gGofXeuBFUOQl5V1jOAUAXKdcqg.roa (raw, json)
Hash identifier:          3f72uRGazSsvCmwuRf0eXEmgCRBMPIgrT76jdDlnqKo=
Subject key identifier:   80:6A:1F:5D:EB:81:15:43:90:97:95:75:8C:E0:14:01:72:9D:72:A8
Certificate issuer:       /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial:       04F89221
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/gGofXeuBFUOQl5V1jOAUAXKdcqg.roa
Signing time:             Thu 09 Jun 2022 22:25:02 +0000
ROA not before:           Thu 09 Jun 2022 22:25:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     30823
IP address blocks:        46.37.110.0/24 maxlen: 24
                          185.92.45.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83399201 (0x4f89221)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
        Validity
            Not Before: Jun  9 22:25:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=806a1f5deb811543909795758ce01401729d72a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e3:46:02:9d:fd:58:e1:43:ad:06:9e:8e:3f:
                    5a:80:be:64:da:60:c8:66:07:ad:cf:fd:b6:b3:a1:
                    33:01:94:3e:27:ec:f5:25:db:c1:eb:4b:42:00:fe:
                    6e:d2:e5:f0:7d:22:73:45:cc:fc:20:b6:e2:e5:6c:
                    9e:97:0e:c3:a1:d8:21:5b:91:1c:51:ec:f7:79:78:
                    97:14:ae:47:98:ed:fc:81:de:e3:84:68:cf:2a:68:
                    bb:96:d6:86:46:7b:5a:3e:2e:fd:7b:bb:04:52:f7:
                    aa:58:69:e4:12:91:a7:ec:53:dd:00:03:78:3d:ee:
                    e4:53:0b:f3:8e:3b:a7:bb:0b:55:ee:53:d9:b2:ce:
                    4d:43:a5:c1:09:09:62:18:09:44:9a:fd:8d:b8:99:
                    67:0f:3d:7e:d6:12:3e:bf:b1:da:95:d5:b6:e7:a3:
                    aa:ff:98:d0:6b:71:4b:92:d1:b4:12:aa:b3:b6:a2:
                    c9:30:75:6a:e9:c9:2d:d4:34:88:7b:4b:e4:29:66:
                    b0:3c:1e:eb:d3:52:59:34:6e:a3:4f:bb:30:34:04:
                    26:d5:5d:0b:d0:65:ac:d3:32:ad:b1:12:0c:56:ee:
                    1a:09:e5:ba:c7:e0:92:17:be:b2:70:44:53:76:aa:
                    73:0a:11:1d:6d:50:06:9f:a9:bf:b3:77:87:9c:d5:
                    f0:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:6A:1F:5D:EB:81:15:43:90:97:95:75:8C:E0:14:01:72:9D:72:A8
            X509v3 Authority Key Identifier:
                keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/gGofXeuBFUOQl5V1jOAUAXKdcqg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.37.110.0/24
                  185.92.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:c3:8c:e0:ee:ad:4f:ef:83:a5:61:eb:4a:6e:65:4b:67:f5:
         b0:1e:aa:46:aa:1c:9e:16:90:4a:cf:98:31:4e:32:2c:70:7d:
         65:c1:ee:16:75:5f:00:17:6c:95:09:ef:c4:d7:3a:80:2e:42:
         eb:91:23:d0:63:fc:1c:30:04:e0:77:b3:cf:7a:f7:41:70:5e:
         1c:90:24:56:7e:f5:ec:1a:58:8c:20:c4:79:e7:1d:da:11:63:
         61:b5:69:3a:89:3e:c6:eb:7a:f5:4c:54:38:c7:55:2c:5e:9d:
         1a:45:4c:3a:5d:f6:44:aa:cc:1b:77:81:98:03:53:2e:b2:f7:
         f9:7d:27:06:a4:53:57:ae:e9:54:d0:a5:76:26:3d:21:9c:0a:
         70:58:7a:8a:ea:cc:88:14:d0:b1:86:ed:2a:90:ee:02:2b:03:
         7b:50:f6:85:8f:fb:b4:41:95:74:53:59:bf:91:60:67:46:4c:
         36:f2:d9:7c:79:ed:9a:92:88:1b:c4:b8:90:0c:8f:d5:8b:13:
         36:9c:d8:5b:42:84:6f:47:cf:ef:53:c0:55:a2:e8:dc:03:c5:
         7d:ea:f4:80:b9:8a:62:50:7c:2e:ee:3c:86:2c:2b:f8:b3:de:
         45:9f:37:c1:e8:2e:46:c7:e9:89:6e:c5:68:c5:ed:01:50:be:
         e9:b8:5e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:54 2024 by rpki-client on console-fra.rpki-client.org