Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/spxw24blyD4-xETQ9NjXb2DaiPY.roa
File:                     spxw24blyD4-xETQ9NjXb2DaiPY.roa (raw, json)
Hash identifier:          rkBDmnIO61MJpO8zhFG0c0Nv/g4oRqHxLOjNmct8kOg=
Subject key identifier:   B2:9C:70:DB:86:E5:C8:3E:3E:C4:44:D0:F4:D8:D7:6F:60:DA:88:F6
Certificate issuer:       /CN=27321078f359d7990276dabb0f8c30070e685963
Certificate serial:       054E0BA1
Authority key identifier: 27:32:10:78:F3:59:D7:99:02:76:DA:BB:0F:8C:30:07:0E:68:59:63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JzIQePNZ15kCdtq7D4wwBw5oWWM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/spxw24blyD4-xETQ9NjXb2DaiPY.roa
Signing time:             Sat 01 Jan 2022 14:58:26 +0000
ROA not before:           Sat 01 Jan 2022 14:58:26 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     213024
IP address blocks:        185.179.215.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89000865 (0x54e0ba1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27321078f359d7990276dabb0f8c30070e685963
        Validity
            Not Before: Jan  1 14:58:26 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b29c70db86e5c83e3ec444d0f4d8d76f60da88f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7f:40:92:b5:0f:c3:3b:ba:de:8d:02:77:c4:
                    e0:4b:80:d7:34:d3:d0:3d:db:b4:c1:31:77:14:3e:
                    f2:0f:bd:a5:e2:5a:17:76:f7:24:69:19:54:e6:c5:
                    08:2d:d6:9a:e2:e8:12:6b:28:65:58:c4:de:5d:64:
                    b9:ac:d0:99:76:a2:51:36:0a:93:fc:d1:30:06:36:
                    92:50:b3:30:5b:d6:09:a6:c5:fd:19:ab:40:7c:b8:
                    cb:8f:90:68:8b:7f:e8:ba:5e:3b:7a:b4:42:ce:f6:
                    01:fb:c4:a2:94:e8:94:78:48:8f:4e:db:82:fa:d1:
                    3e:bb:93:b3:67:01:4c:6b:c4:1e:8f:06:cd:9f:8c:
                    72:65:d7:bc:0a:19:08:7a:0a:d4:9a:da:1c:d3:bc:
                    8a:5a:8d:80:6c:95:04:8e:82:7c:fe:9e:40:6c:b9:
                    d4:be:28:a5:20:a4:81:7c:34:24:01:d6:de:8c:19:
                    fd:ed:e3:91:71:fb:8c:b7:f2:a6:ea:94:e6:fa:97:
                    f7:95:c7:6a:df:84:60:c7:00:7f:4b:cb:af:e0:31:
                    37:f2:69:73:89:45:82:a0:49:c9:c3:1f:7f:8f:10:
                    cb:86:35:88:45:1c:31:63:8c:82:b8:e0:38:0f:d4:
                    25:f3:7a:91:a5:f3:76:39:ac:06:7b:aa:33:b7:06:
                    36:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:9C:70:DB:86:E5:C8:3E:3E:C4:44:D0:F4:D8:D7:6F:60:DA:88:F6
            X509v3 Authority Key Identifier:
                keyid:27:32:10:78:F3:59:D7:99:02:76:DA:BB:0F:8C:30:07:0E:68:59:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JzIQePNZ15kCdtq7D4wwBw5oWWM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/spxw24blyD4-xETQ9NjXb2DaiPY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/JzIQePNZ15kCdtq7D4wwBw5oWWM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.179.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:0c:92:97:98:a2:ba:2b:2d:10:ae:50:ce:20:d2:dd:d3:5d:
         f0:54:85:ee:89:a5:ef:a1:33:da:4e:d9:fb:ef:37:20:c0:71:
         9b:70:87:e5:8c:d6:af:79:be:0b:2d:5a:5b:ae:e6:8c:dd:a4:
         0d:2e:b5:57:77:1f:8c:da:35:67:5b:0e:74:bb:8b:28:a3:c7:
         87:ce:cd:48:cc:01:18:88:d0:56:46:1e:e3:cd:58:36:57:13:
         74:76:3e:58:6d:8e:ab:b5:69:7c:4c:f5:d2:bb:69:c8:50:d0:
         bd:44:78:fc:a7:51:d8:5e:b7:cd:85:02:67:c5:75:fb:78:c6:
         b6:6f:1d:59:7b:80:5e:c4:84:5b:4a:86:27:d5:67:37:87:88:
         42:c0:12:1d:7c:2c:4a:36:bf:39:99:68:66:ff:e5:a3:c6:98:
         64:d1:ae:0e:26:2d:88:b2:0f:c1:92:77:d3:1e:b9:94:db:87:
         91:35:02:49:5a:93:d6:5a:59:a9:87:40:53:7d:6a:2b:97:1f:
         76:a5:b9:6e:5d:43:ed:89:5c:8d:d6:74:fd:f1:1f:17:af:fa:
         e7:95:d1:e9:60:46:c5:40:ec:0e:e2:9f:9a:b8:da:3c:8c:50:
         4e:d7:12:65:5a:bd:e7:5d:32:35:03:55:07:9c:cc:2d:20:24:
         5c:03:e8:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:17 2024 by rpki-client on console-ams.rpki-client.org