Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/UrLOjEhMHnVQi4fW5KXbleufJv8.roa
File:                     UrLOjEhMHnVQi4fW5KXbleufJv8.roa (raw, json)
Hash identifier:          gosh1o3jmo0JOdwVEv4UZg4KQ8Hh2GzyfMDR0tmtF48=
Subject key identifier:   52:B2:CE:8C:48:4C:1E:75:50:8B:87:D6:E4:A5:DB:95:EB:9F:26:FF
Certificate issuer:       /CN=2983841bc09f1fd4fe3de991016c0b7126fba52e
Certificate serial:       CB8B
Authority key identifier: 29:83:84:1B:C0:9F:1F:D4:FE:3D:E9:91:01:6C:0B:71:26:FB:A5:2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/UrLOjEhMHnVQi4fW5KXbleufJv8.roa
Signing time:             Thu 13 Jan 2022 02:32:53 +0000
ROA not before:           Thu 13 Jan 2022 02:32:53 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     834
IP address blocks:        79.110.166.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52107 (0xcb8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983841bc09f1fd4fe3de991016c0b7126fba52e
        Validity
            Not Before: Jan 13 02:32:53 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=52b2ce8c484c1e75508b87d6e4a5db95eb9f26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:88:21:b1:0a:4b:9a:9a:9c:ea:84:8f:8b:d8:
                    f3:2e:47:a2:b1:36:75:bd:ba:97:b7:8f:f4:51:1c:
                    d0:15:02:fd:5a:7c:0a:ee:b3:3d:19:d5:e7:fa:bf:
                    19:7a:82:16:5b:87:bc:83:0e:54:8a:6b:2a:90:89:
                    76:40:bb:31:7e:b3:66:6d:6b:d2:db:ba:1f:55:c2:
                    1a:fd:e9:8d:40:f4:3c:c2:b5:30:18:6f:c0:93:fc:
                    17:00:78:21:94:8b:00:fa:e9:57:9b:1e:ac:20:66:
                    61:f8:a7:27:8e:f4:f5:ed:6b:44:6b:d0:10:24:5b:
                    98:9c:aa:32:77:86:ab:ef:fd:8c:f2:5d:94:89:6d:
                    96:04:cb:d2:e2:30:f4:c0:84:25:ac:79:ea:98:f6:
                    2f:85:33:5a:eb:35:61:1d:ae:fd:a1:21:cd:49:23:
                    a9:89:a9:68:79:2e:2e:8b:de:66:0c:10:be:a1:9c:
                    4a:f6:7e:06:86:3b:c6:1b:ee:25:21:94:e2:ef:f5:
                    ea:4f:49:6e:57:66:a9:14:e6:72:fc:f8:9f:f6:5f:
                    d6:26:03:9e:00:a3:2b:c4:04:f3:6f:51:25:6a:24:
                    24:a7:66:87:9b:77:15:83:f6:c7:92:63:f0:2a:2d:
                    d6:ad:81:34:38:9f:8b:68:0b:72:7e:ea:55:9b:a7:
                    07:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:B2:CE:8C:48:4C:1E:75:50:8B:87:D6:E4:A5:DB:95:EB:9F:26:FF
            X509v3 Authority Key Identifier:
                keyid:29:83:84:1B:C0:9F:1F:D4:FE:3D:E9:91:01:6C:0B:71:26:FB:A5:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/UrLOjEhMHnVQi4fW5KXbleufJv8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.110.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:4d:8c:86:6e:c2:c9:71:18:c5:5f:02:6c:07:03:20:36:18:
         96:ab:aa:0e:88:0d:7e:f5:e6:22:f5:15:c0:53:da:33:bc:67:
         a4:30:b0:06:7d:ab:c9:c3:b1:a4:82:3c:2a:a2:73:14:6f:a2:
         5d:a3:80:37:31:fc:a6:a4:5f:e5:68:dc:6b:ca:d2:c9:fb:25:
         c8:f3:7e:64:37:e0:6a:5c:92:fd:a8:e7:5d:d5:a5:43:b7:25:
         5a:10:ad:ff:ae:51:c5:5f:3e:5b:41:a8:b9:c3:97:4f:21:90:
         c3:52:a5:44:b9:6f:32:f7:f6:64:20:e3:89:b3:59:04:a0:c0:
         83:a6:34:f0:2e:03:9b:47:86:2c:c2:14:a7:a0:ca:d5:eb:dc:
         39:3a:43:08:67:8c:26:88:4b:7c:37:cf:16:bd:97:9b:91:10:
         64:30:41:9b:1f:49:f3:49:be:a4:ec:67:a1:13:75:35:2f:b9:
         a4:0e:7a:fc:e0:72:3d:87:1b:0e:ce:7c:36:4c:7d:93:56:73:
         3f:0e:cb:33:83:8f:03:72:78:04:2b:b6:3e:48:c6:09:ca:f6:
         18:88:78:e8:ad:5b:20:73:e1:e1:3f:bc:c3:77:26:e5:8b:87:
         7d:b7:6a:de:86:21:9e:2e:29:9d:30:e3:d5:5b:e9:35:dc:f5:
         62:eb:40:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:44 2024 by rpki-client on console-ams.rpki-client.org