Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/5d6ebd-a8ee-474c-b71a-a642cc85bc71/1/vzeP7WLpwoSY6F67ONie0UvZX6Y.roa
File:                     vzeP7WLpwoSY6F67ONie0UvZX6Y.roa (raw, json)
Hash identifier:          7HcvYEMJfKgjWyFreSkh4IaNDC5T3mHI/sKIHJBWduI=
Subject key identifier:   BF:37:8F:ED:62:E9:C2:84:98:E8:5E:BB:38:D8:9E:D1:4B:D9:5F:A6
Certificate issuer:       /CN=9e237f32bae14a81fda27eb29460c3a0eda34240
Certificate serial:       020435
Authority key identifier: 9E:23:7F:32:BA:E1:4A:81:FD:A2:7E:B2:94:60:C3:A0:ED:A3:42:40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/niN_MrrhSoH9on6ylGDDoO2jQkA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/5d6ebd-a8ee-474c-b71a-a642cc85bc71/1/vzeP7WLpwoSY6F67ONie0UvZX6Y.roa
Signing time:             Wed 19 Jan 2022 07:53:48 +0000
ROA not before:           Wed 19 Jan 2022 07:53:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     42885
IP address blocks:        185.225.120.0/22 maxlen: 22
                          77.234.96.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 132149 (0x20435)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e237f32bae14a81fda27eb29460c3a0eda34240
        Validity
            Not Before: Jan 19 07:53:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=bf378fed62e9c28498e85ebb38d89ed14bd95fa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:43:f3:15:a9:00:a2:e0:de:16:34:ba:9c:e2:
                    e7:10:fd:21:a3:70:bb:2c:9c:17:a9:87:5e:25:68:
                    27:28:1b:c2:ec:af:ca:8c:f9:e2:62:7d:09:5e:5f:
                    05:43:f4:07:9c:a3:22:91:3d:fe:ca:b9:b4:64:ea:
                    3c:a0:a3:71:ef:27:a5:a2:b9:22:aa:55:ea:a2:11:
                    b6:51:83:70:2e:6d:06:8e:4a:60:6f:1f:d0:2b:3a:
                    9e:8c:24:d9:69:43:6c:86:77:3b:76:ec:7f:3a:a2:
                    9f:5a:6f:8d:27:48:d7:11:20:1d:05:7c:9d:5c:cc:
                    05:a4:b7:76:a8:65:e8:dd:49:8c:10:2b:e7:94:f4:
                    35:72:56:4d:13:2e:5e:e2:d7:d1:3f:fc:45:45:d8:
                    dc:46:ac:bf:6d:fe:2f:40:c2:f8:40:0a:58:3f:51:
                    7b:32:05:c1:c3:48:1b:f3:60:d2:7b:26:1f:5e:5f:
                    f6:0f:a9:f2:d6:a5:bb:97:ba:ed:e3:7d:a5:b9:d7:
                    01:38:f2:71:43:39:b0:c1:aa:36:19:5e:ae:5f:d7:
                    58:99:f8:9e:41:e8:55:4e:5a:76:fc:81:42:d6:97:
                    34:f0:5b:63:35:9c:39:e4:f6:41:95:2a:5f:6f:bd:
                    3a:f1:a0:d5:55:ca:0c:8b:c8:9d:a7:cc:d6:9b:61:
                    fa:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:37:8F:ED:62:E9:C2:84:98:E8:5E:BB:38:D8:9E:D1:4B:D9:5F:A6
            X509v3 Authority Key Identifier:
                keyid:9E:23:7F:32:BA:E1:4A:81:FD:A2:7E:B2:94:60:C3:A0:ED:A3:42:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/niN_MrrhSoH9on6ylGDDoO2jQkA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5d6ebd-a8ee-474c-b71a-a642cc85bc71/1/vzeP7WLpwoSY6F67ONie0UvZX6Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5d6ebd-a8ee-474c-b71a-a642cc85bc71/1/niN_MrrhSoH9on6ylGDDoO2jQkA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.234.96.0/19
                  185.225.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         e9:1d:4c:ad:4d:aa:60:85:0d:d4:db:0f:4e:28:ed:ed:0f:6f:
         cd:a2:6a:4b:ed:36:d5:e0:85:77:85:45:9d:7a:19:16:c2:ca:
         60:6d:4a:59:d2:2f:44:0f:9b:2d:31:2c:9b:60:2d:95:b5:e0:
         c4:6d:79:e9:76:d3:4b:e0:f8:5b:d2:fb:5d:8c:42:b0:8c:46:
         c4:28:94:be:a6:94:68:b5:8b:b8:bf:67:de:66:8e:01:99:49:
         ce:13:1e:c6:16:ce:85:12:72:18:58:b7:00:40:cf:c3:e5:3f:
         5c:9d:dc:82:c5:39:05:2c:7a:83:4c:2b:a5:1a:60:96:8e:c7:
         43:78:91:15:72:50:a3:10:ff:fe:cd:60:e8:0f:8e:ea:a3:d1:
         8b:25:46:39:30:57:9a:78:d7:3f:d8:c5:23:0c:5d:12:0f:54:
         a0:b4:e2:74:f7:e3:5c:fe:20:f7:3c:43:a6:50:c0:9f:62:6c:
         30:f4:6c:d7:ec:32:d6:6f:be:58:c1:8d:13:98:de:84:cd:3a:
         d7:f1:33:ca:32:88:64:62:3d:a4:73:30:be:71:44:ef:53:b9:
         d9:08:f2:2e:67:22:c5:ea:f6:bd:24:6f:92:f0:2f:cd:c2:d8:
         3a:28:84:32:6a:e7:59:b3:bd:cd:a1:0d:56:3f:c3:3f:cb:fa:
         2c:90:83:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:00 2024 by rpki-client on console-ams.rpki-client.org