Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/50a352-6da1-48e2-9b83-5d4c9fec7ce3/1/j4y7ncFXAgtWibB3S8RzYh1NXcg.roa
File:                     j4y7ncFXAgtWibB3S8RzYh1NXcg.roa (raw, json)
Hash identifier:          iXEM6LKQgU+hZuf9y8/zGycwToIx4mqaebFHrE5MBTE=
Subject key identifier:   8F:8C:BB:9D:C1:57:02:0B:56:89:B0:77:4B:C4:73:62:1D:4D:5D:C8
Certificate issuer:       /CN=c0979e20ffed9f89d07cea58c4c4106819ce662d
Certificate serial:       11930028
Authority key identifier: C0:97:9E:20:FF:ED:9F:89:D0:7C:EA:58:C4:C4:10:68:19:CE:66:2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wJeeIP_tn4nQfOpYxMQQaBnOZi0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/50a352-6da1-48e2-9b83-5d4c9fec7ce3/1/j4y7ncFXAgtWibB3S8RzYh1NXcg.roa
Signing time:             Sat 01 Jan 2022 06:56:19 +0000
ROA not before:           Sat 01 Jan 2022 06:56:19 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     6779
IP address blocks:        185.13.48.0/23 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 294846504 (0x11930028)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0979e20ffed9f89d07cea58c4c4106819ce662d
        Validity
            Not Before: Jan  1 06:56:19 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8f8cbb9dc157020b5689b0774bc473621d4d5dc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:51:c1:d7:62:26:bc:39:cf:50:5c:b9:98:67:
                    d9:7c:41:95:2f:c1:1b:77:5a:f4:6e:76:f2:5e:d8:
                    d8:27:a0:db:ac:47:d8:56:6a:73:01:f5:fc:5c:81:
                    a7:fc:bf:db:4c:15:44:b9:4b:50:d8:f5:6d:2b:83:
                    41:26:f5:63:0a:ce:a6:db:a1:bd:99:a8:33:b1:b3:
                    0e:51:1f:2b:50:24:a6:43:ba:35:8a:f0:0e:ce:35:
                    f6:27:24:75:ec:89:47:33:b2:94:d3:52:8f:29:34:
                    fa:a3:fc:35:41:47:be:e9:7f:3f:53:f6:d3:81:88:
                    d1:07:f0:96:12:bf:72:eb:69:f0:5f:c0:57:a2:c4:
                    3b:88:d3:4d:cd:d5:90:4f:43:11:a8:8a:e0:6a:30:
                    50:b2:1f:23:52:86:dc:6b:fe:f1:9d:31:ad:46:27:
                    09:9d:d1:d4:2d:3b:66:85:59:78:c2:a4:99:06:92:
                    52:ae:b7:52:f6:8a:35:da:3b:ac:d4:37:66:67:26:
                    c8:c5:9d:6a:4c:07:92:80:0b:74:c9:1f:94:52:30:
                    51:08:32:5a:71:62:22:c8:09:f5:37:d6:3d:7a:34:
                    48:17:df:17:ac:b8:6e:e4:99:eb:b6:dd:15:ea:2a:
                    3a:1d:4b:e9:1f:c9:80:9f:08:97:13:6e:ba:67:d0:
                    bb:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:8C:BB:9D:C1:57:02:0B:56:89:B0:77:4B:C4:73:62:1D:4D:5D:C8
            X509v3 Authority Key Identifier:
                keyid:C0:97:9E:20:FF:ED:9F:89:D0:7C:EA:58:C4:C4:10:68:19:CE:66:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wJeeIP_tn4nQfOpYxMQQaBnOZi0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/50a352-6da1-48e2-9b83-5d4c9fec7ce3/1/j4y7ncFXAgtWibB3S8RzYh1NXcg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/50a352-6da1-48e2-9b83-5d4c9fec7ce3/1/wJeeIP_tn4nQfOpYxMQQaBnOZi0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.13.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ab:f4:0b:a8:1e:e0:33:2b:6d:09:69:54:6f:ea:ed:39:31:84:
         63:a2:ff:23:12:75:f9:a5:05:40:41:84:67:23:e1:a7:a7:2d:
         95:21:e7:86:2c:3d:26:13:29:a6:94:0f:a2:d7:5b:3c:9e:19:
         c6:b2:72:b8:59:d7:0c:d6:96:40:ff:38:3c:0c:d5:6e:a9:6b:
         72:6e:0c:cb:33:9b:f9:99:5b:50:ee:14:5b:4a:45:93:85:4f:
         4a:aa:5a:de:b6:4a:aa:d9:86:55:bf:e4:96:97:36:49:78:50:
         24:c2:1e:ec:df:ae:94:f8:93:3b:38:2b:45:c5:c4:f3:d6:5f:
         91:e3:41:25:af:c1:6a:c1:49:86:f5:95:ba:a5:fa:9f:5e:a4:
         9f:68:16:0e:44:f6:df:34:78:80:d9:57:c3:83:f2:3b:69:2f:
         a4:e4:60:10:99:78:ef:fc:c2:6d:66:4c:6a:13:a6:2c:e9:15:
         98:bb:f3:de:5b:60:c9:46:c9:49:6d:b3:36:48:a1:35:57:75:
         6c:88:25:40:1e:3f:b8:72:c0:e9:09:af:b0:eb:2f:8f:c1:dd:
         8c:d4:b3:c2:5f:eb:dc:12:da:e7:25:94:04:ce:65:ff:df:e0:
         b5:6f:0d:f7:1a:dd:7e:e7:38:4a:cc:01:97:1d:49:9a:75:da:
         67:10:b8:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:00 2024 by rpki-client on console-fra.rpki-client.org