Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/71897e-5f6f-449d-b82c-a25ef4420a2a/1/j7QuS9r7XQ47Igp8veUcLzDhLvM.roa
File:                     j7QuS9r7XQ47Igp8veUcLzDhLvM.roa (raw, json)
Hash identifier:          3EtAVoQScgWxlf+yudKsY8noquorDWOtkDD7/qFSaSw=
Subject key identifier:   8F:B4:2E:4B:DA:FB:5D:0E:3B:22:0A:7C:BD:E5:1C:2F:30:E1:2E:F3
Certificate issuer:       /CN=b7c558c42c43ad59406ea446c9eefed42a491eec
Certificate serial:       D94B
Authority key identifier: B7:C5:58:C4:2C:43:AD:59:40:6E:A4:46:C9:EE:FE:D4:2A:49:1E:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t8VYxCxDrVlAbqRGye7-1CpJHuw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/71897e-5f6f-449d-b82c-a25ef4420a2a/1/j7QuS9r7XQ47Igp8veUcLzDhLvM.roa
Signing time:             Mon 16 May 2022 12:08:26 +0000
ROA not before:           Mon 16 May 2022 12:08:26 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     43464
IP address blocks:        91.195.4.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55627 (0xd94b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7c558c42c43ad59406ea446c9eefed42a491eec
        Validity
            Not Before: May 16 12:08:26 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8fb42e4bdafb5d0e3b220a7cbde51c2f30e12ef3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:89:2f:37:76:ec:91:9f:12:e0:e8:a8:66:33:
                    80:52:9f:1e:a2:16:2e:41:b5:f5:c7:ba:74:6b:e5:
                    6d:57:3f:74:8c:94:92:9d:92:4c:52:73:c0:10:4c:
                    ad:cb:df:aa:9b:1d:c6:3b:33:6d:14:f1:47:a6:f9:
                    6c:34:1e:3f:cf:45:6c:73:e2:55:77:09:f7:26:70:
                    8a:00:5d:4f:96:4f:39:33:03:1c:0c:df:09:81:8c:
                    c6:6b:f7:f2:41:4c:16:ab:36:67:5b:ae:d6:ac:b8:
                    54:9d:52:15:dc:e2:c2:ac:f6:af:49:0f:04:d9:f5:
                    4f:9f:51:f8:8a:78:d6:ed:3e:f2:33:52:5c:bd:6f:
                    0d:4f:83:b9:3d:64:f6:4d:08:c0:10:42:33:71:59:
                    ea:2d:d0:21:31:72:61:6c:e8:d8:1b:98:4b:f0:1c:
                    26:5b:c0:97:ae:7b:80:13:ce:e6:95:35:9a:f4:9d:
                    6c:e6:6c:2a:2a:ef:9e:f4:b6:57:19:8a:58:18:b7:
                    50:15:f2:78:1c:bc:19:94:56:58:03:f3:d0:dc:00:
                    33:5e:98:68:95:dd:2f:ec:48:05:8f:65:18:2e:b2:
                    f0:0c:4e:fc:f2:b5:23:57:a8:4a:c2:01:fc:0a:b2:
                    ac:7b:02:52:35:38:39:25:33:61:54:e2:19:c2:5e:
                    83:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:B4:2E:4B:DA:FB:5D:0E:3B:22:0A:7C:BD:E5:1C:2F:30:E1:2E:F3
            X509v3 Authority Key Identifier:
                keyid:B7:C5:58:C4:2C:43:AD:59:40:6E:A4:46:C9:EE:FE:D4:2A:49:1E:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t8VYxCxDrVlAbqRGye7-1CpJHuw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/71897e-5f6f-449d-b82c-a25ef4420a2a/1/j7QuS9r7XQ47Igp8veUcLzDhLvM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/71897e-5f6f-449d-b82c-a25ef4420a2a/1/t8VYxCxDrVlAbqRGye7-1CpJHuw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.195.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:4e:a0:8a:81:3b:c9:3b:cb:2c:09:dd:5c:c9:1c:df:13:42:
         07:ba:67:1e:b3:bf:80:9b:4a:f4:2d:7c:5b:03:a9:38:83:5a:
         ac:3b:c8:39:a3:6c:cd:f0:9d:69:c6:8e:89:7e:59:b5:1d:74:
         2e:ff:26:17:f4:5e:cd:47:f1:65:ce:e0:7d:30:45:fe:e4:6b:
         7a:a0:90:28:06:0b:3d:59:99:c0:95:14:38:c0:f2:8e:6d:d5:
         0b:41:a8:34:87:eb:41:fe:9d:87:94:17:a7:25:dc:18:c3:81:
         de:41:29:4d:a6:55:a9:e0:a9:3f:ce:6a:8d:56:d1:ff:23:4b:
         81:fe:33:51:47:9a:07:a7:07:db:62:4f:52:b4:6d:58:8a:0c:
         2a:5a:2e:c6:ff:c5:47:01:ee:2d:40:20:73:99:b3:89:39:97:
         b4:ad:a2:b3:f4:0e:c2:4c:bd:3b:5d:31:73:93:17:e8:42:a8:
         63:dc:08:19:b7:3b:59:88:42:70:3e:2e:44:f1:64:72:81:4e:
         9f:16:fb:49:82:84:c3:f1:89:c6:82:f8:26:3e:f2:2e:fc:84:
         64:b6:18:9f:55:c1:ad:91:98:5b:25:ac:15:70:34:66:98:f3:
         80:7b:aa:71:cb:dc:55:6c:bd:b5:ae:5f:87:04:a7:7f:03:67:
         ce:74:73:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:36 2024 by rpki-client on console-fra.rpki-client.org