Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9VOLnDN9cqwpyDNPs5SMACcRX7Y.roa
File:                     9VOLnDN9cqwpyDNPs5SMACcRX7Y.roa (raw, json)
Hash identifier:          pEVSyvexDdSILHRRGdeztufFVIW0WYNX7P6gr31ayqo=
Subject key identifier:   F5:53:8B:9C:33:7D:72:AC:29:C8:33:4F:B3:94:8C:00:27:11:5F:B6
Certificate issuer:       /CN=f71b99831d44b0bf7c00c50977f60b1844349cf2
Certificate serial:       01B1
Authority key identifier: F7:1B:99:83:1D:44:B0:BF:7C:00:C5:09:77:F6:0B:18:44:34:9C:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9xuZgx1EsL98AMUJd_YLGEQ0nPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9VOLnDN9cqwpyDNPs5SMACcRX7Y.roa
Signing time:             Thu 28 Apr 2022 09:21:05 +0000
ROA not before:           Thu 28 Apr 2022 09:21:05 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     42426
IP address blocks:        194.1.178.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 433 (0x1b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f71b99831d44b0bf7c00c50977f60b1844349cf2
        Validity
            Not Before: Apr 28 09:21:05 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f5538b9c337d72ac29c8334fb3948c0027115fb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:80:f2:59:d0:26:92:72:17:19:0a:8e:60:83:
                    5e:0f:a7:32:19:05:91:bf:b9:bb:6f:a6:c2:b5:57:
                    42:b9:60:50:60:b3:45:bc:18:48:97:d2:1e:fd:6e:
                    ae:2b:aa:d5:6b:87:82:87:f0:67:21:2a:6b:6e:b7:
                    28:22:6a:ba:c2:8b:32:16:ae:ce:b3:eb:e8:ba:5d:
                    15:67:31:a7:52:f3:bf:c7:71:44:35:19:80:40:bc:
                    6a:93:e5:b0:d7:55:0e:6b:0e:fd:64:0a:9b:d1:ca:
                    97:c8:81:8c:69:8b:eb:27:8a:b6:28:0b:08:56:73:
                    79:e6:d9:c1:71:8e:db:28:48:8a:db:f1:71:80:e0:
                    b3:d5:c5:cb:48:f3:a3:5d:86:00:67:59:71:bb:41:
                    6d:d5:99:4c:33:da:24:a3:2d:bd:cf:14:ac:a4:3f:
                    ac:0a:9d:4d:34:3a:e7:53:0f:be:96:95:33:1a:2d:
                    9c:15:d1:57:69:c7:1b:4d:db:0d:70:84:fb:f5:11:
                    c3:58:3a:57:82:ee:55:f9:59:0a:96:46:59:1c:9d:
                    f5:e6:a8:ce:6e:e6:30:a9:c1:96:c9:b0:a6:e1:95:
                    d6:d0:99:65:09:83:c6:63:bd:26:ef:37:0c:94:a7:
                    ae:12:49:f0:c2:78:55:b9:b5:67:4b:0a:a6:eb:15:
                    73:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:53:8B:9C:33:7D:72:AC:29:C8:33:4F:B3:94:8C:00:27:11:5F:B6
            X509v3 Authority Key Identifier:
                keyid:F7:1B:99:83:1D:44:B0:BF:7C:00:C5:09:77:F6:0B:18:44:34:9C:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9xuZgx1EsL98AMUJd_YLGEQ0nPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9VOLnDN9cqwpyDNPs5SMACcRX7Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.1.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:55:e5:37:51:75:ae:4e:e2:53:12:fe:41:fa:66:5f:53:45:
         e8:02:eb:de:e7:08:7d:b3:0b:00:d7:aa:9b:1c:18:ec:fd:ea:
         2c:30:4f:9d:3e:cc:88:fb:ac:36:e5:fc:c7:63:24:f6:db:78:
         dc:4b:2d:e2:92:95:49:26:52:9c:1b:27:c4:b9:9d:77:f9:e9:
         22:52:bb:7e:cc:f8:ee:dd:c8:68:28:29:fd:af:36:e7:0a:32:
         2d:38:97:9b:10:ca:29:5d:af:c6:07:33:c2:36:c5:4b:85:ac:
         95:36:8b:96:0c:ed:17:fb:9f:6c:7b:ff:64:82:f2:41:af:dd:
         ee:6f:c5:f4:15:59:fe:87:cc:3d:a2:9d:c1:ea:b1:eb:17:dd:
         85:97:04:36:d4:3b:6e:77:3b:ef:cd:19:1f:df:ba:93:97:4c:
         bb:e3:0a:00:2f:d1:87:a8:28:58:ad:07:91:6e:b7:b6:76:89:
         cb:ec:c0:3e:c3:07:d9:68:e2:7d:1e:57:49:39:db:48:fc:97:
         38:70:e1:61:6f:7a:4f:18:18:4c:25:22:a1:57:d3:67:e6:0e:
         65:4b:e8:b4:27:1e:fe:38:4f:3f:93:01:c3:b4:1c:bc:6d:58:
         d4:8e:f9:11:93:f0:4c:97:8e:dc:75:2b:cf:33:ad:fd:e0:94:
         78:7a:cb:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:59 2024 by rpki-client on console-fra.rpki-client.org