Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/dr8Dm_7YPw4mAhmXsFhvejoUYAc.roa
File:                     dr8Dm_7YPw4mAhmXsFhvejoUYAc.roa (raw, json)
Hash identifier:          Pilk6Xc5iu/iUKnfmBT/mzNswcz6u0LG9qjBc1X47+s=
Subject key identifier:   76:BF:03:9B:FE:D8:3F:0E:26:02:19:97:B0:58:6F:7A:3A:14:60:07
Certificate issuer:       /CN=a934b8dec1281bc54317c7fed0e9acbc7b97cac7
Certificate serial:       1BE7B567
Authority key identifier: A9:34:B8:DE:C1:28:1B:C5:43:17:C7:FE:D0:E9:AC:BC:7B:97:CA:C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qTS43sEoG8VDF8f-0OmsvHuXysc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/dr8Dm_7YPw4mAhmXsFhvejoUYAc.roa
Signing time:             Sat 01 Jan 2022 06:01:46 +0000
ROA not before:           Sat 01 Jan 2022 06:01:46 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     57761
IP address blocks:        185.27.219.0/24 maxlen: 24
                          185.27.216.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 468170087 (0x1be7b567)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a934b8dec1281bc54317c7fed0e9acbc7b97cac7
        Validity
            Not Before: Jan  1 06:01:46 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=76bf039bfed83f0e26021997b0586f7a3a146007
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:59:4e:49:f1:7c:eb:ba:74:b1:71:40:0a:17:
                    7c:3d:af:d7:25:c0:d1:7f:72:74:5a:fc:d0:e5:64:
                    47:90:b6:32:62:65:13:5b:c2:9d:51:53:df:a2:54:
                    97:85:f2:04:ad:43:25:cb:41:dc:25:eb:66:85:45:
                    4f:ec:fd:54:e1:e6:93:ee:e3:b4:ae:f5:2a:b7:7f:
                    cc:b6:f0:02:50:63:88:68:50:a1:2c:11:ae:b6:16:
                    49:26:dc:f4:24:94:28:59:b5:f2:1c:85:a6:b1:f0:
                    6c:40:e0:9f:0e:dd:f3:9e:89:f7:94:dc:17:17:ea:
                    4a:14:74:32:af:fa:d1:64:57:0d:6c:3b:3d:58:8d:
                    3f:89:1d:97:16:9e:09:38:6f:fe:9a:20:d2:9b:00:
                    b4:f9:89:52:57:85:2b:c3:a4:b6:04:d4:f9:92:d2:
                    0e:4e:48:39:8a:cf:a7:3d:5b:7a:9a:dd:c6:15:c6:
                    dc:e1:ec:69:b2:36:08:4a:77:c2:8a:fd:7e:9e:96:
                    e2:24:8e:3f:97:de:70:fb:a9:1a:f9:82:3e:6c:fd:
                    8d:68:91:0a:48:0a:0d:2d:86:d0:bd:10:27:6c:66:
                    4d:79:be:7a:07:d6:da:cb:6d:54:98:c3:35:2a:28:
                    1a:f3:ec:29:ef:10:ee:ac:8c:b3:0a:58:3d:23:cb:
                    ce:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:BF:03:9B:FE:D8:3F:0E:26:02:19:97:B0:58:6F:7A:3A:14:60:07
            X509v3 Authority Key Identifier:
                keyid:A9:34:B8:DE:C1:28:1B:C5:43:17:C7:FE:D0:E9:AC:BC:7B:97:CA:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTS43sEoG8VDF8f-0OmsvHuXysc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/dr8Dm_7YPw4mAhmXsFhvejoUYAc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.27.216.0/24
                  185.27.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:9e:e7:1b:2d:42:04:bd:04:97:84:4f:cb:b2:f4:8f:eb:91:
         4c:f9:4d:d9:3a:50:bd:cc:0a:7d:17:c0:c7:2e:e5:10:da:1b:
         7d:f2:69:e9:84:cc:5f:1c:79:5a:ca:f0:d1:e8:59:7e:62:05:
         9d:ec:15:7e:5f:fd:79:3c:7e:75:7f:b3:09:5c:bf:a8:58:92:
         53:6e:c9:c5:fc:a9:8d:9e:91:ba:e6:f4:06:da:67:73:94:b8:
         c7:7b:d3:0f:5f:22:cc:13:f6:78:1b:ca:af:3c:7d:ad:74:bd:
         2f:e3:55:d5:07:70:c5:92:5b:84:f5:73:ce:7f:44:8f:af:a9:
         fe:b8:b2:cf:9a:7e:56:c4:8b:d1:1d:c5:a0:9c:e3:aa:4b:18:
         6f:88:a2:f7:9f:7c:7f:1b:54:66:93:15:55:29:01:dd:53:fa:
         1e:18:14:b5:90:15:02:d1:27:34:b1:de:fa:33:da:91:04:1c:
         cb:72:9e:97:41:19:7f:a7:6e:59:57:4a:23:5e:3c:f0:f2:2f:
         c0:4f:a0:38:57:cf:61:2d:a5:39:59:85:eb:1c:6c:12:d9:12:
         a2:d6:13:d8:94:e3:4c:80:1b:b0:7a:e4:37:19:eb:26:ae:5f:
         77:d1:4f:8e:3c:47:d1:61:7d:b6:8b:32:a7:ff:20:64:ff:69:
         c9:c1:c2:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:29 2024 by rpki-client on console-fra.rpki-client.org