Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/gm7b2MjPs9JZ63BNCUqxQdH2VXk.roa
File:                     gm7b2MjPs9JZ63BNCUqxQdH2VXk.roa (raw, json)
Hash identifier:          jHjmDu4K/AsFy/VtgDOfo1rtlFtaOtqyD+l2o1Wr/6U=
Subject key identifier:   82:6E:DB:D8:C8:CF:B3:D2:59:EB:70:4D:09:4A:B1:41:D1:F6:55:79
Certificate issuer:       /CN=9e9e6887ea7572a6411306c87b0cc089397a6354
Certificate serial:       03E8BBED
Authority key identifier: 9E:9E:68:87:EA:75:72:A6:41:13:06:C8:7B:0C:C0:89:39:7A:63:54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/np5oh-p1cqZBEwbIewzAiTl6Y1Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/gm7b2MjPs9JZ63BNCUqxQdH2VXk.roa
Signing time:             Fri 27 May 2022 14:55:36 +0000
ROA not before:           Fri 27 May 2022 14:55:36 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     213145
IP address blocks:        185.117.99.0/24 maxlen: 24
                          185.117.120.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65584109 (0x3e8bbed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e9e6887ea7572a6411306c87b0cc089397a6354
        Validity
            Not Before: May 27 14:55:36 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=826edbd8c8cfb3d259eb704d094ab141d1f65579
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e0:49:57:ce:43:46:2d:36:b4:31:a8:ec:3e:
                    0c:01:c6:d4:40:fe:bb:43:84:59:12:e5:8e:8e:65:
                    9b:a6:ed:14:71:95:92:aa:40:57:f7:a2:a1:ba:a9:
                    25:0a:4d:aa:0b:88:16:fe:70:15:ec:02:84:c8:da:
                    c6:bc:b3:3c:9c:bf:37:7b:d1:f1:c8:a7:5a:47:77:
                    db:54:f3:d9:bb:e6:57:d8:2b:d2:72:f6:ef:cd:b0:
                    92:2e:3c:7d:31:55:7f:01:58:49:df:16:c5:5b:57:
                    91:7d:dd:be:ef:40:fa:3a:e6:b2:91:9d:37:17:95:
                    54:c8:58:fa:38:cf:74:79:45:0b:72:ca:de:39:65:
                    88:11:3a:c5:ba:5c:4c:10:88:62:6a:7b:6f:f9:47:
                    1a:98:48:e2:07:1c:c1:0d:de:5d:f1:b2:08:9d:77:
                    2e:bb:90:32:e6:b8:83:37:e7:7b:58:bc:10:3b:04:
                    6f:b5:af:fc:54:e4:ce:02:00:bf:fa:67:2f:2a:d1:
                    3e:4b:cd:be:28:de:e6:67:ce:4c:eb:1a:37:0e:3d:
                    f8:b7:28:59:da:d9:23:af:7c:2f:bf:46:d6:64:75:
                    55:1c:8b:c9:df:a2:72:c2:84:2a:09:4d:76:e3:b9:
                    b5:19:f4:5c:5d:ce:4b:84:61:a2:32:7d:ec:76:c7:
                    8b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:6E:DB:D8:C8:CF:B3:D2:59:EB:70:4D:09:4A:B1:41:D1:F6:55:79
            X509v3 Authority Key Identifier:
                keyid:9E:9E:68:87:EA:75:72:A6:41:13:06:C8:7B:0C:C0:89:39:7A:63:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/np5oh-p1cqZBEwbIewzAiTl6Y1Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/gm7b2MjPs9JZ63BNCUqxQdH2VXk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/np5oh-p1cqZBEwbIewzAiTl6Y1Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.117.99.0/24
                  185.117.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:bc:e3:77:c8:c6:bc:37:a7:ea:cf:7f:40:2c:5d:a3:49:6e:
         76:cf:3c:ce:b0:f2:25:c6:01:90:41:99:f4:9c:de:1d:bd:98:
         05:96:e3:ea:ee:ea:18:2a:23:2f:77:18:5c:f7:e4:64:11:bc:
         8d:4e:08:b9:69:7c:10:16:dc:e1:b0:a6:8d:61:3d:d8:b4:07:
         1a:ec:4d:ac:6b:31:f4:d7:45:2a:15:4b:5f:ff:41:cf:87:01:
         5c:20:c3:05:a3:40:50:61:97:1c:a4:55:2e:b2:1d:9f:bd:f2:
         9b:60:f8:3f:a2:dc:f1:0c:71:4a:95:78:65:9d:cd:24:22:1c:
         b7:5d:7e:eb:56:a8:21:37:10:5a:66:20:cb:89:6f:11:ee:30:
         63:08:9a:30:1e:66:6f:19:9b:b5:29:c2:3d:6b:9e:2a:59:66:
         4d:93:97:17:b1:d1:8a:98:d7:1a:0b:06:bb:3a:b1:83:d0:c4:
         74:1f:62:a0:d3:cc:6c:b0:3a:b7:87:49:47:9b:00:eb:27:92:
         55:4f:41:80:2c:08:52:b5:a3:c8:83:85:8a:f9:28:a5:9d:89:
         0b:12:5b:3b:13:7c:18:a6:21:77:ea:c7:47:99:f6:14:e2:75:
         97:4f:97:89:42:dd:05:f8:cc:8a:b1:0a:3c:08:4d:61:df:94:
         50:5a:b3:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:58 2024 by rpki-client on console-ams.rpki-client.org