Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/Sm6dSrirU9s9wypWyk5WXQiq54Y.roa
File:                     Sm6dSrirU9s9wypWyk5WXQiq54Y.roa (raw, json)
Hash identifier:          9mZIhmeSCCYfoPBzEqzB8JZR6Gh0uuLXQRQ7RYj4VZY=
Subject key identifier:   4A:6E:9D:4A:B8:AB:53:DB:3D:C3:2A:56:CA:4E:56:5D:08:AA:E7:86
Certificate issuer:       /CN=2983841bc09f1fd4fe3de991016c0b7126fba52e
Certificate serial:       015BF2E3
Authority key identifier: 29:83:84:1B:C0:9F:1F:D4:FE:3D:E9:91:01:6C:0B:71:26:FB:A5:2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/Sm6dSrirU9s9wypWyk5WXQiq54Y.roa
Signing time:             Mon 13 Jun 2022 23:17:39 +0000
ROA not before:           Mon 13 Jun 2022 23:17:39 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60721
IP address blocks:        79.110.166.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22803171 (0x15bf2e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983841bc09f1fd4fe3de991016c0b7126fba52e
        Validity
            Not Before: Jun 13 23:17:39 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4a6e9d4ab8ab53db3dc32a56ca4e565d08aae786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ae:44:46:e3:01:66:10:38:9a:3f:65:f1:e9:
                    22:bf:cb:50:b8:6e:52:47:2f:a0:e7:e6:a6:c6:58:
                    11:c4:27:06:f0:d2:29:d6:20:a9:5f:5a:85:43:34:
                    f5:41:77:23:01:65:69:8e:3e:ff:8b:2d:18:d6:62:
                    05:02:fb:ac:d4:2e:37:a7:91:12:17:d6:08:ed:57:
                    4e:92:ef:39:54:e6:f4:31:9e:2a:b2:59:0a:b0:ff:
                    88:7e:11:d0:64:84:0f:db:c7:20:4c:aa:43:28:0d:
                    b2:8c:5e:ab:88:87:c6:dc:10:54:53:6a:ba:ea:6f:
                    52:18:dd:66:6d:c8:f5:5f:33:24:ce:c3:15:a7:c2:
                    03:e2:bc:90:fe:01:0f:a1:90:4a:b2:db:14:48:94:
                    67:f2:ed:f0:d4:f2:57:e2:8f:92:da:03:46:df:de:
                    bb:99:8a:8c:54:bc:61:95:16:54:dc:a5:88:41:5a:
                    6e:f1:a9:0b:d9:05:79:72:16:ab:eb:7f:a4:cc:e4:
                    47:92:c0:3a:9e:3e:2b:78:07:ac:1c:37:24:1a:f0:
                    dd:45:87:39:0a:3e:42:67:44:89:8c:0e:88:94:d0:
                    7a:5b:7d:11:ce:e5:8d:ae:59:be:49:6f:66:36:b5:
                    80:a2:b1:7a:aa:bd:72:7a:5c:4d:f1:a3:6c:61:e0:
                    ad:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:6E:9D:4A:B8:AB:53:DB:3D:C3:2A:56:CA:4E:56:5D:08:AA:E7:86
            X509v3 Authority Key Identifier:
                keyid:29:83:84:1B:C0:9F:1F:D4:FE:3D:E9:91:01:6C:0B:71:26:FB:A5:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/Sm6dSrirU9s9wypWyk5WXQiq54Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.110.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:8c:5c:28:4c:19:5c:16:4a:dd:29:70:a6:55:f4:89:0f:fc:
         9c:ff:04:01:0c:ca:88:28:5c:c6:f6:57:c3:62:bc:8a:3c:c5:
         52:58:d6:26:49:5e:f3:2d:4f:67:09:cb:e8:ec:ff:8b:55:fa:
         91:eb:d1:71:5e:bf:be:8a:ea:b8:ea:6e:22:b1:b8:b2:e4:0b:
         cf:39:62:13:0f:07:a8:88:7b:70:95:cb:a9:85:51:16:9f:91:
         5b:bd:0a:c8:49:4f:eb:47:50:78:81:f7:6b:a2:4a:ec:15:f1:
         c5:a1:ae:bb:df:4e:83:a3:f5:30:0b:37:ae:7b:0f:14:4c:ce:
         27:2f:62:e2:2b:d8:77:04:1b:c1:ce:0b:01:52:e0:34:9e:77:
         24:9d:c1:9b:09:b1:12:72:62:6c:64:97:f2:08:85:6d:12:81:
         fc:c5:6e:7c:e4:a7:36:5a:a3:9f:37:2a:a2:af:f1:b8:48:6b:
         84:8f:df:55:64:4f:92:a4:01:f5:b2:fa:b5:27:b7:f9:32:a5:
         b7:e6:b9:ef:66:99:85:ee:5d:61:4b:6f:e0:70:f4:8b:78:f1:
         40:dc:66:e5:82:bd:7a:3b:b5:54:52:ff:10:d0:3e:a6:12:35:
         42:06:7b:b1:09:08:b8:6e:f3:ac:e8:65:af:a9:d9:60:86:9f:
         e6:b2:00:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:00 2024 by rpki-client on console-fra.rpki-client.org