Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/PlHhdwbNJYOby7MKZYqIX7H8U34.roa
File:                     PlHhdwbNJYOby7MKZYqIX7H8U34.roa (raw, json)
Hash identifier:          hnl99iX/Qwxblrbikp6QgeSYh6+b1unPkb2Seaqmh4Q=
Subject key identifier:   3E:51:E1:77:06:CD:25:83:9B:CB:B3:0A:65:8A:88:5F:B1:FC:53:7E
Certificate issuer:       /CN=82534505845fa0a93f8285a6da8bce6d1d7200dd
Certificate serial:       1D2D6C
Authority key identifier: 82:53:45:05:84:5F:A0:A9:3F:82:85:A6:DA:8B:CE:6D:1D:72:00:DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/glNFBYRfoKk_goWm2ovObR1yAN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/PlHhdwbNJYOby7MKZYqIX7H8U34.roa
Signing time:             Tue 10 May 2022 19:26:03 +0000
ROA not before:           Tue 10 May 2022 19:26:03 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     8220
IP address blocks:        195.234.180.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1912172 (0x1d2d6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82534505845fa0a93f8285a6da8bce6d1d7200dd
        Validity
            Not Before: May 10 19:26:03 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3e51e17706cd25839bcbb30a658a885fb1fc537e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:68:fa:ef:ac:b9:1d:ed:82:b6:b4:e7:8d:d4:
                    53:89:c0:8b:fc:84:5f:d2:c4:e8:ea:45:fd:7a:e9:
                    cb:7c:6c:4b:40:99:c8:9b:c6:cb:b1:74:d0:d1:62:
                    05:30:27:48:99:a0:0f:c0:ae:4d:ea:20:42:b4:2f:
                    33:6e:ec:37:4b:af:ff:00:17:d9:41:70:d8:f5:e3:
                    4d:db:72:f8:23:ad:cb:44:54:16:27:22:1f:36:1e:
                    b8:6e:fb:6d:a9:f4:fb:35:5f:fe:88:4f:cb:61:90:
                    ce:d4:d2:b8:30:0c:31:7c:11:c1:e5:32:6b:34:13:
                    9a:8b:04:de:72:87:b2:95:0f:9d:9a:28:ce:95:08:
                    53:0a:2e:2a:99:e6:53:4c:ec:59:dd:c9:2b:ac:6c:
                    28:49:d9:aa:89:32:ff:71:4e:ac:85:b1:84:70:ae:
                    44:f3:86:89:7f:e4:ab:80:a7:c1:6e:ca:22:a9:a8:
                    e3:ef:d8:9e:c4:98:6f:9b:e1:1f:c2:32:75:b9:af:
                    47:d3:7b:de:93:30:96:0a:d5:43:f6:94:9d:2e:a3:
                    61:72:a7:a2:b4:ec:e4:0d:36:b2:2d:71:ff:b2:a4:
                    a0:6f:7b:99:d5:97:70:36:50:cc:04:b4:df:66:e9:
                    b7:7b:45:81:c5:e6:df:08:82:1d:a2:af:72:50:a8:
                    40:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:51:E1:77:06:CD:25:83:9B:CB:B3:0A:65:8A:88:5F:B1:FC:53:7E
            X509v3 Authority Key Identifier:
                keyid:82:53:45:05:84:5F:A0:A9:3F:82:85:A6:DA:8B:CE:6D:1D:72:00:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/glNFBYRfoKk_goWm2ovObR1yAN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/PlHhdwbNJYOby7MKZYqIX7H8U34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.234.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:f7:75:28:e1:d2:bc:78:2b:30:3b:7c:cf:6a:e9:7f:d6:e0:
         60:eb:8d:42:1b:bb:d2:99:22:9e:ca:e2:e6:64:9d:15:ac:8a:
         22:68:b5:3e:bd:b4:d3:13:b9:19:f6:6d:95:cf:f9:5f:47:24:
         70:8a:18:91:12:37:cd:2e:ce:bf:05:83:83:5b:82:ea:00:c8:
         cf:2b:23:3e:b6:d4:59:07:74:95:aa:76:10:f6:d5:f2:79:a4:
         cd:05:19:62:7e:45:49:c1:41:aa:65:e9:c2:45:20:2b:cd:e6:
         d9:67:aa:83:81:28:4c:ea:3e:00:c7:9b:4b:32:db:df:0f:a0:
         76:c6:9d:45:17:68:2d:4d:b9:b8:0e:74:9e:a1:5b:e0:8e:83:
         37:33:13:17:a5:37:fb:22:0f:03:20:8b:09:c2:69:69:79:34:
         26:65:11:54:c7:6c:29:ca:49:e7:ef:d9:a7:7f:dc:48:14:82:
         ff:b4:9b:16:a7:36:57:9c:4b:4f:66:7a:d8:5c:6a:14:3f:dd:
         8a:50:49:7b:43:ed:b9:ce:fc:63:55:02:b5:15:0e:dc:fa:03:
         5a:10:c7:11:49:fc:15:99:9a:1c:07:85:d9:c8:15:3a:41:f3:
         e4:ad:35:a7:d1:0a:87:b4:f9:b0:91:0b:13:2b:73:dd:29:ad:
         a9:13:c3:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:26 2024 by rpki-client on console-ams.rpki-client.org