Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/VcxRIf_8C48cJvK-wuCoCe0v2hs.roa
File:                     VcxRIf_8C48cJvK-wuCoCe0v2hs.roa (raw, json)
Hash identifier:          nqvchnLoCiV9srzwevSAaMbSyV8kXAZVUkW//2XrdmI=
Subject key identifier:   55:CC:51:21:FF:FC:0B:8F:1C:26:F2:BE:C2:E0:A8:09:ED:2F:DA:1B
Certificate issuer:       /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial:       08D92051
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/VcxRIf_8C48cJvK-wuCoCe0v2hs.roa
Signing time:             Thu 03 Mar 2022 14:41:15 +0000
ROA not before:           Thu 03 Mar 2022 14:41:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207927
IP address blocks:        185.126.181.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 148447313 (0x8d92051)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
        Validity
            Not Before: Mar  3 14:41:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=55cc5121fffc0b8f1c26f2bec2e0a809ed2fda1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:45:d1:a3:4d:f0:2e:12:34:d0:d2:3f:a4:ed:
                    1a:e1:12:43:3c:25:70:66:9b:36:21:50:95:6c:d8:
                    0a:09:44:dd:66:12:38:18:9c:be:54:e4:17:05:36:
                    62:c5:9e:af:de:31:e0:da:31:e0:f0:3c:e4:84:50:
                    c1:38:89:23:77:da:a3:b2:dd:a0:b8:fa:53:f1:6b:
                    7f:72:5e:cf:96:d1:4c:ef:ec:f7:36:aa:60:13:4f:
                    e6:f3:e8:5b:c8:64:74:68:6d:e3:e3:84:50:27:5a:
                    2c:3b:45:38:97:d3:d3:cb:4f:fb:8c:c6:4f:cd:85:
                    4a:ee:f8:24:13:4f:1c:23:97:15:12:68:6d:e3:18:
                    9f:8f:f3:15:a9:a5:03:79:b6:f7:44:9e:aa:7d:12:
                    30:2d:14:33:4b:13:2d:a0:c6:e6:35:5a:13:92:e7:
                    48:5e:07:cb:b8:c4:26:8d:1b:69:bc:c5:84:63:06:
                    08:9f:82:b8:46:ea:ff:a6:e6:0e:9e:02:87:d6:75:
                    fe:a1:f6:a3:14:aa:4d:73:1f:36:e3:e1:c5:d1:3d:
                    1d:71:d5:77:86:f3:f3:6d:12:13:b5:95:51:34:3c:
                    20:6f:fd:a6:65:34:16:ff:28:65:34:16:55:b4:cc:
                    a8:17:29:5e:cd:9f:fd:40:34:0d:e1:fe:f5:b9:5a:
                    93:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:CC:51:21:FF:FC:0B:8F:1C:26:F2:BE:C2:E0:A8:09:ED:2F:DA:1B
            X509v3 Authority Key Identifier:
                keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/VcxRIf_8C48cJvK-wuCoCe0v2hs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.126.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:d7:11:80:04:6e:8c:40:1a:b7:e9:10:70:c3:20:aa:a0:6c:
         27:46:7f:ae:a8:18:b0:c5:b8:65:f0:b4:29:e5:3a:bf:cc:f4:
         2f:ff:09:be:2a:42:01:e3:43:a2:d0:21:f2:4d:b3:be:9a:4c:
         b1:4f:4d:a9:f9:5d:8b:92:6e:fd:60:c9:d3:ba:3b:ab:cc:0f:
         5a:5d:dd:f7:7f:93:da:ef:24:6b:0e:37:84:04:e8:4c:04:de:
         11:5c:38:23:af:16:91:ec:80:50:27:98:ea:fd:52:45:ac:e0:
         04:5f:03:5e:4e:18:46:48:77:3b:46:de:c9:cd:74:2c:86:36:
         4b:c1:38:bc:f9:23:70:46:7c:a8:67:3b:6a:a6:4e:ad:3d:15:
         8f:62:0f:2c:91:78:f2:a7:e2:8c:74:9c:8c:82:3f:36:cf:d4:
         cc:ac:98:40:f0:08:19:01:9d:69:77:45:92:61:36:5a:1c:f3:
         f3:8c:90:84:d3:1b:27:b3:b4:ce:0c:22:55:ed:1a:14:37:c2:
         1c:32:c7:3e:c9:b8:05:9c:60:91:08:49:5a:01:b5:7e:18:25:
         90:2b:76:54:0b:b9:9c:55:be:18:e8:65:f5:7a:83:b8:14:45:
         5e:e5:91:e1:cb:ab:ab:25:40:e2:f2:f7:fa:07:4b:e3:4a:76:
         aa:78:ec:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:02 2023 by rpki-client on console-fra.rpki-client.org