Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/Eu3RJfkXXVY2HKAPyzyHoIkS5OY.roa
File:                     Eu3RJfkXXVY2HKAPyzyHoIkS5OY.roa (raw, json)
Hash identifier:          E6UWMivG/GmHPaa6VyvmFBPzLD5bV7Th6ITVZ8MszTE=
Subject key identifier:   12:ED:D1:25:F9:17:5D:56:36:1C:A0:0F:CB:3C:87:A0:89:12:E4:E6
Certificate issuer:       /CN=26425863c309f2655b884c1600394c4338e7fb41
Certificate serial:       C57477
Authority key identifier: 26:42:58:63:C3:09:F2:65:5B:88:4C:16:00:39:4C:43:38:E7:FB:41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JkJYY8MJ8mVbiEwWADlMQzjn-0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/Eu3RJfkXXVY2HKAPyzyHoIkS5OY.roa
Signing time:             Thu 21 Apr 2022 17:05:41 +0000
ROA not before:           Thu 21 Apr 2022 17:05:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     5089
IP address blocks:        109.107.154.0/24 maxlen: 24
                          195.60.172.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12940407 (0xc57477)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26425863c309f2655b884c1600394c4338e7fb41
        Validity
            Not Before: Apr 21 17:05:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=12edd125f9175d56361ca00fcb3c87a08912e4e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c4:a0:d5:d2:5c:8f:7d:ed:29:7a:92:cd:30:
                    6b:00:72:1b:e9:4d:de:91:72:69:35:ef:06:b3:11:
                    3b:e1:c2:c7:be:e0:4c:0b:63:bd:92:14:36:48:e6:
                    14:73:cd:b2:b5:86:84:5f:65:d3:4c:76:5d:6e:93:
                    78:3d:f3:a7:89:33:31:a3:da:1b:e7:ac:e4:58:57:
                    ec:85:89:e9:f3:c8:dd:a4:47:0f:7d:85:3e:6c:3b:
                    ff:d9:19:b3:99:a7:15:39:4a:4b:69:d5:6d:67:c2:
                    a0:29:7f:22:c9:f6:93:93:35:30:5a:26:43:13:2b:
                    7f:f3:5b:22:e3:13:26:8e:38:07:8d:ac:48:7f:35:
                    28:83:89:54:58:1b:ec:7a:8a:6f:bb:cf:f7:bd:08:
                    18:86:07:41:f4:d6:2f:11:8e:c0:18:4c:f9:f3:07:
                    19:4e:6a:33:de:b9:f4:1b:3e:6b:9b:e7:73:ea:c3:
                    3d:d6:f8:d2:3f:23:50:58:5d:0b:f1:3c:56:9e:86:
                    13:0c:b8:c1:41:43:ec:28:41:20:38:2e:5d:2d:93:
                    46:a0:d9:43:27:62:13:f0:17:c0:d6:4d:44:79:4a:
                    ce:86:12:b1:18:4f:f5:0f:6f:83:0a:42:f3:86:31:
                    ee:6d:c9:51:23:28:52:9d:fa:90:9b:de:01:fc:93:
                    0e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:ED:D1:25:F9:17:5D:56:36:1C:A0:0F:CB:3C:87:A0:89:12:E4:E6
            X509v3 Authority Key Identifier:
                keyid:26:42:58:63:C3:09:F2:65:5B:88:4C:16:00:39:4C:43:38:E7:FB:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JkJYY8MJ8mVbiEwWADlMQzjn-0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/Eu3RJfkXXVY2HKAPyzyHoIkS5OY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/JkJYY8MJ8mVbiEwWADlMQzjn-0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.107.154.0/24
                  195.60.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:c9:74:c6:21:a6:0c:72:72:fb:06:da:67:cf:e3:33:50:b0:
         11:0e:92:9f:4d:81:41:74:75:d1:6c:ab:36:8d:fc:ec:56:ef:
         b7:a0:3a:44:54:ee:a4:2a:e0:db:3b:55:3e:b0:ab:f4:63:17:
         07:ed:cb:88:c1:ff:f5:14:2d:b5:1d:51:dc:07:93:13:e6:17:
         5c:00:14:52:a0:c8:ec:23:7f:43:51:ae:7a:e4:a0:89:f5:58:
         cd:9b:c8:e4:7e:79:b1:50:23:af:dc:48:66:18:4e:0b:73:28:
         2f:53:3d:5a:02:59:a5:9c:ed:be:4a:9d:5f:bb:1c:03:e1:c1:
         fe:ad:d6:d8:cb:9d:1b:67:ca:00:9d:c3:3c:7c:c9:1f:f6:b9:
         e9:b1:ed:ca:af:e9:12:c4:73:4e:78:0c:5b:84:8a:4a:f3:3e:
         45:8b:06:b3:96:06:4d:19:b7:c0:89:24:66:0c:ec:d5:3a:dc:
         fa:4e:1b:33:d0:1a:1e:6a:22:b7:03:40:d3:14:22:55:f1:af:
         19:39:0e:21:d8:2c:74:96:d1:18:42:aa:b2:9c:f8:b5:1c:de:
         e9:41:5a:1f:24:f9:3f:b4:a3:a6:14:ad:0a:1d:cd:02:15:38:
         ce:0b:6a:2d:a4:90:f7:22:f5:94:81:af:12:5a:ad:8d:be:4d:
         4e:c1:d0:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:48 2023 by rpki-client on console.sobornost.net