Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/0dHByaGxqppbGicYIrlxkR5kJm0.roa
File:                     0dHByaGxqppbGicYIrlxkR5kJm0.roa (raw, json)
Hash identifier:          R68PWaDxTJ7fwvGnMcbfLzeSrSgbIwAZFKsT4IuQTk0=
Subject key identifier:   D1:D1:C1:C9:A1:B1:AA:9A:5B:1A:27:18:22:B9:71:91:1E:64:26:6D
Certificate issuer:       /CN=7cfc92b0a75b89ad2e3c57f7cba0e478684219ce
Certificate serial:       305BE1C2
Authority key identifier: 7C:FC:92:B0:A7:5B:89:AD:2E:3C:57:F7:CB:A0:E4:78:68:42:19:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fPySsKdbia0uPFf3y6DkeGhCGc4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/0dHByaGxqppbGicYIrlxkR5kJm0.roa
Signing time:             Sat 01 Jan 2022 04:59:07 +0000
ROA not before:           Sat 01 Jan 2022 04:59:07 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     62178
IP address blocks:        94.229.81.0/24 maxlen: 24
                          94.229.82.0/24 maxlen: 24
                          94.229.83.0/24 maxlen: 24
                          94.229.84.0/24 maxlen: 24
                          94.229.85.0/24 maxlen: 24
                          94.229.80.0/24 maxlen: 24
                          94.229.88.0/24 maxlen: 24
                          94.229.89.0/24 maxlen: 24
                          94.229.90.0/24 maxlen: 24
                          94.229.91.0/24 maxlen: 24
                          94.229.86.0/24 maxlen: 24
                          94.229.87.0/24 maxlen: 24
                          94.229.95.0/24 maxlen: 24
                          94.229.92.0/24 maxlen: 24
                          94.229.93.0/24 maxlen: 24
                          94.229.94.0/24 maxlen: 24
                          2a05:2c0::/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 811327938 (0x305be1c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7cfc92b0a75b89ad2e3c57f7cba0e478684219ce
        Validity
            Not Before: Jan  1 04:59:07 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d1d1c1c9a1b1aa9a5b1a271822b971911e64266d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:f7:47:c8:58:b8:4f:f2:10:f9:0e:5a:7e:df:
                    10:6e:f0:8a:20:50:b6:60:d7:c2:e2:37:b0:7e:a3:
                    b6:21:be:6a:22:f9:d9:43:fa:e2:ea:0b:ef:f5:91:
                    14:49:aa:2f:1b:98:0a:c7:8e:1f:62:9e:76:3c:4a:
                    5d:a8:59:91:21:99:a0:32:34:8a:7a:0b:4d:54:ce:
                    4a:1a:d1:84:ce:2e:b1:68:4d:c5:56:e3:1f:9a:33:
                    bd:6a:68:e2:ad:00:f6:24:b4:c6:b1:ac:74:6a:aa:
                    c7:fe:2f:96:0b:9f:65:3b:05:75:d3:cc:34:3b:33:
                    d7:9d:60:50:49:b3:26:22:5a:d5:16:e4:15:81:e7:
                    82:06:e3:34:a0:e1:27:c3:60:8b:60:66:aa:da:3e:
                    fa:52:09:d7:9e:c3:6a:5d:84:54:63:f7:13:0c:58:
                    03:35:07:eb:c7:33:38:14:1c:22:8e:f7:a3:01:c3:
                    67:d2:89:22:d2:98:5c:7f:39:98:a5:fd:c5:e6:4d:
                    bb:95:6e:2e:ff:8a:d0:a9:df:96:9e:48:45:65:4c:
                    60:44:04:43:c8:7c:92:b0:1a:00:a4:be:32:5a:a3:
                    c9:f7:ad:fd:44:03:f7:0e:2c:d0:7d:64:af:77:41:
                    fd:ad:39:85:c2:9b:a0:a6:fa:f2:b2:be:73:89:97:
                    63:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:D1:C1:C9:A1:B1:AA:9A:5B:1A:27:18:22:B9:71:91:1E:64:26:6D
            X509v3 Authority Key Identifier:
                keyid:7C:FC:92:B0:A7:5B:89:AD:2E:3C:57:F7:CB:A0:E4:78:68:42:19:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fPySsKdbia0uPFf3y6DkeGhCGc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/0dHByaGxqppbGicYIrlxkR5kJm0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/fPySsKdbia0uPFf3y6DkeGhCGc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.229.80.0/20
                IPv6:
                  2a05:2c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         0c:ed:be:1d:2c:0a:85:24:fa:a0:de:7e:ce:9f:a2:6a:b9:a5:
         7f:4a:62:08:1f:c2:a2:11:1b:80:e5:02:96:6a:a9:ef:bb:be:
         1b:d4:55:2d:b2:4e:55:c8:3c:f1:b0:7a:e6:34:3a:9c:96:e8:
         7b:1d:de:bc:fb:d5:a2:eb:e4:13:b9:03:44:e6:3b:cf:1e:16:
         ce:3c:08:3e:61:91:fc:d9:0b:36:c3:8a:da:f9:d6:2d:81:e6:
         79:bf:2d:78:a0:fd:8b:81:6b:67:40:91:f2:c0:c4:4f:6f:66:
         f2:69:c0:e0:0f:4a:c3:d0:a4:7b:90:a3:b6:0a:60:33:48:59:
         cf:68:f3:08:e4:4f:15:27:79:d8:ea:66:6a:ea:f1:55:0f:84:
         1d:07:87:d9:ba:c0:5d:8f:75:a8:78:6b:4a:6f:75:ca:e1:32:
         8c:dd:2c:68:c3:de:04:6e:08:fb:89:f3:23:1d:d4:f3:8b:94:
         28:43:21:f2:6b:03:39:bc:33:1c:4e:d9:40:24:02:4b:c6:26:
         b7:7d:5f:78:1f:7a:02:2a:60:a7:6e:b0:04:98:fe:f6:17:df:
         b8:f4:76:0a:b6:bb:e1:72:3d:86:92:ae:13:2f:7b:73:bb:63:
         2f:95:cb:c1:70:91:81:5d:fb:18:d5:e2:3b:55:0e:2c:2b:39:
         cc:7a:73:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:04 2024 by rpki-client on console-ams.rpki-client.org