Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/ENjEIGof-1zExMU8fwf78lIdR5s.roa
File:                     ENjEIGof-1zExMU8fwf78lIdR5s.roa (raw, json)
Hash identifier:          Tb/5uPkJObnx9OeRKW5VexXZRxzZ2qJbO1fV9COUyTs=
Subject key identifier:   10:D8:C4:20:6A:1F:FB:5C:C4:C4:C5:3C:7F:07:FB:F2:52:1D:47:9B
Certificate issuer:       /CN=9442ced12d7bb049cd1cdf8df7ba5a957655386c
Certificate serial:       093EE5F4
Authority key identifier: 94:42:CE:D1:2D:7B:B0:49:CD:1C:DF:8D:F7:BA:5A:95:76:55:38:6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lELO0S17sEnNHN-N97palXZVOGw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/ENjEIGof-1zExMU8fwf78lIdR5s.roa
Signing time:             Sat 01 Jan 2022 11:00:52 +0000
ROA not before:           Sat 01 Jan 2022 11:00:52 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     51263
IP address blocks:        185.164.180.0/22 maxlen: 22
                          2a0b:4c00::/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 155117044 (0x93ee5f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9442ced12d7bb049cd1cdf8df7ba5a957655386c
        Validity
            Not Before: Jan  1 11:00:52 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=10d8c4206a1ffb5cc4c4c53c7f07fbf2521d479b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d9:95:24:cd:aa:bd:c0:6d:2b:c3:fa:6e:82:
                    2e:5d:61:7f:ad:f0:bc:ff:5d:4f:02:6d:98:0c:e2:
                    be:42:36:49:58:4e:0c:43:3a:d1:1c:b3:3b:eb:b3:
                    49:46:08:b5:b1:24:cf:56:18:18:46:6b:48:52:18:
                    b0:11:81:bb:6d:2b:0b:79:46:35:4f:bf:e7:6e:9d:
                    39:5b:98:3b:d2:af:f6:0e:92:1d:26:a4:97:da:d1:
                    00:9c:43:77:10:2e:a1:11:05:25:59:99:56:55:4d:
                    93:9e:0d:e8:1e:2e:7e:17:3f:c3:97:6f:c5:9d:e8:
                    25:15:db:9d:c5:11:d4:9c:e7:e5:62:55:13:1f:5c:
                    63:8f:25:ef:f9:b0:1c:bf:40:0b:7d:37:93:e6:35:
                    92:c6:9c:11:52:1d:6b:5a:92:ae:a6:bc:f3:d8:4a:
                    42:91:db:3f:34:b3:9a:46:12:aa:0a:27:0e:5e:d7:
                    31:b1:26:f0:13:93:c4:5a:c5:61:05:d6:9e:fd:ca:
                    44:84:72:b4:dd:52:e0:f1:25:55:8f:e2:1e:c6:ce:
                    2f:1a:b2:90:fc:4c:7a:45:6b:34:92:0e:9f:e4:a5:
                    01:bf:15:3d:97:37:b4:85:85:ed:2a:5d:16:fc:dc:
                    82:d3:34:19:ed:04:dc:cf:fd:20:8e:50:2a:8b:0b:
                    bb:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:D8:C4:20:6A:1F:FB:5C:C4:C4:C5:3C:7F:07:FB:F2:52:1D:47:9B
            X509v3 Authority Key Identifier:
                keyid:94:42:CE:D1:2D:7B:B0:49:CD:1C:DF:8D:F7:BA:5A:95:76:55:38:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lELO0S17sEnNHN-N97palXZVOGw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/ENjEIGof-1zExMU8fwf78lIdR5s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.164.180.0/22
                IPv6:
                  2a0b:4c00::/29

    Signature Algorithm: sha256WithRSAEncryption
         48:0a:9f:a1:6e:b0:a8:81:4e:35:f0:bd:65:cb:4c:65:3d:8d:
         02:3f:4a:e6:94:ad:dc:d3:41:df:ad:2c:45:1c:db:52:33:c7:
         63:43:bc:7f:39:7c:82:05:ae:cb:96:84:6f:b5:1f:bc:1d:94:
         56:c5:be:79:1a:71:29:05:a1:a5:dd:70:34:fa:49:ec:57:70:
         cd:2b:59:63:38:bc:06:43:d5:67:5d:45:c8:f5:ab:d8:3c:ed:
         83:1f:b6:53:e9:03:bf:02:aa:28:f2:ce:41:e2:30:cf:d5:09:
         db:39:d8:b3:3b:b0:4b:28:a0:7a:22:d9:98:ab:46:f3:60:d5:
         2a:9b:c3:ec:48:57:1f:76:73:b3:8d:da:b7:f4:a5:e5:7c:f9:
         91:48:68:d1:48:96:ba:02:d0:da:73:a5:2a:38:2a:28:e0:ca:
         96:44:7e:2e:b8:3b:50:5a:bf:dc:be:15:5c:0a:e1:83:c6:a2:
         b3:13:0b:f3:5d:ed:7a:04:a7:ad:d1:f9:2a:24:d1:bc:d7:eb:
         28:da:ac:28:51:32:e3:02:b0:df:88:d8:1d:ab:0d:d7:e7:f5:
         4a:f8:e9:fe:7c:b1:b3:48:23:0e:94:d9:14:07:65:6f:34:fc:
         08:3d:56:02:24:d2:5f:fe:b6:bb:2a:39:8b:3c:02:7e:c6:19:
         ae:e0:61:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:15 2024 by rpki-client on console-fra.rpki-client.org