Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/7Mo4VeZgQQP6pM1YDyeVMGFJiFw.roa
File:                     7Mo4VeZgQQP6pM1YDyeVMGFJiFw.roa (raw, json)
Hash identifier:          4HimaK4jJMd0rdU2ASXgb8RV7f/A3tTLPTnFWvJSY1w=
Subject key identifier:   EC:CA:38:55:E6:60:41:03:FA:A4:CD:58:0F:27:95:30:61:49:88:5C
Certificate issuer:       /CN=505e2f2d5e7093ff8d4003a02b7d3e131ce70a12
Certificate serial:       03EBFE
Authority key identifier: 50:5E:2F:2D:5E:70:93:FF:8D:40:03:A0:2B:7D:3E:13:1C:E7:0A:12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UF4vLV5wk_-NQAOgK30-ExznChI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/7Mo4VeZgQQP6pM1YDyeVMGFJiFw.roa
Signing time:             Thu 26 May 2022 18:37:14 +0000
ROA not before:           Thu 26 May 2022 18:37:14 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     31034
IP address blocks:        178.255.241.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 257022 (0x3ebfe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=505e2f2d5e7093ff8d4003a02b7d3e131ce70a12
        Validity
            Not Before: May 26 18:37:14 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ecca3855e6604103faa4cd580f2795306149885c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:98:f2:e5:5b:03:f2:39:64:cb:71:6f:2d:61:
                    0f:9f:27:79:5d:da:ee:19:79:54:5a:f4:17:4b:64:
                    17:df:93:f5:49:13:30:f2:41:3f:68:03:d2:66:69:
                    4f:0f:fa:9b:86:f6:a3:98:05:f5:6e:6b:de:9d:13:
                    b7:fd:70:6a:15:81:51:26:26:de:64:17:1a:91:a8:
                    83:db:28:e2:69:00:aa:67:f9:75:4f:01:84:fd:29:
                    79:6a:f0:f4:62:d0:ec:13:83:f0:90:af:32:b6:cc:
                    a0:e1:f8:4f:f6:e5:b5:76:94:1b:89:32:9a:20:0e:
                    6c:9a:d0:f8:c5:51:2e:48:d5:0e:16:c3:88:72:bc:
                    e1:bd:51:bd:18:5d:03:d7:d8:79:1b:f2:f0:a1:2d:
                    1d:9e:0e:e2:6e:a6:59:e0:59:8d:02:79:d7:9a:3a:
                    78:cc:f3:0e:37:9d:ed:5f:1d:1e:c3:91:56:84:9a:
                    28:43:20:ef:d8:a3:12:03:03:55:cf:44:9a:96:06:
                    05:06:48:69:51:67:c1:9d:59:ab:e9:75:33:bf:46:
                    f7:32:45:44:6c:66:7f:0b:83:a0:04:ce:ca:33:5d:
                    42:74:b6:a9:60:33:4b:1a:cd:d2:44:6a:06:d1:3c:
                    4c:8b:d0:5b:c4:d7:ab:07:51:67:a1:b2:86:1b:9f:
                    39:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:CA:38:55:E6:60:41:03:FA:A4:CD:58:0F:27:95:30:61:49:88:5C
            X509v3 Authority Key Identifier:
                keyid:50:5E:2F:2D:5E:70:93:FF:8D:40:03:A0:2B:7D:3E:13:1C:E7:0A:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UF4vLV5wk_-NQAOgK30-ExznChI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/7Mo4VeZgQQP6pM1YDyeVMGFJiFw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.255.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:88:9a:28:61:34:4e:ed:3a:a9:92:de:ea:ff:1c:a2:3c:fc:
         61:ea:93:7d:49:66:6f:4f:62:53:3d:51:fb:28:a7:82:b5:84:
         bc:1d:a8:42:83:e7:c5:d6:25:61:ec:59:4f:55:15:25:77:43:
         1b:5c:bf:89:7b:04:29:9e:27:6e:b8:0d:66:c2:41:1b:88:46:
         a9:e5:87:ed:37:54:9a:2f:30:52:21:e6:53:fc:70:39:b7:90:
         33:6b:40:0d:c6:f3:33:50:f1:49:3a:a9:80:d6:63:c7:0e:c5:
         64:ba:46:67:28:8b:b4:b2:98:b1:92:22:2a:72:09:6d:5f:1d:
         29:f4:b5:01:33:0e:b6:c3:84:0e:07:ff:94:0f:be:1e:02:b2:
         fd:cf:50:a5:10:36:58:09:14:81:e3:50:6b:20:03:e8:22:ef:
         86:85:26:14:e4:30:0c:9f:d9:aa:45:52:80:20:3e:10:4b:f0:
         b4:6c:b0:b4:c9:03:a2:06:af:52:0f:0e:da:57:21:54:8c:74:
         22:a7:e1:a4:4b:a9:c8:52:a6:23:d0:8a:d2:df:3f:41:eb:94:
         50:0d:cb:08:12:4a:ff:56:c7:34:f5:48:d1:ec:ef:70:08:19:
         d6:09:ef:70:c1:95:c8:1c:f3:1b:c9:69:a0:41:82:74:62:08:
         5f:c2:9d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:53 2024 by rpki-client on console-fra.rpki-client.org