Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/57d30a-0552-45f6-9ebc-c2bd5fc04424/1/oWQyiD1flr1kK5SruY9VIkIFf0Y.roa
File:                     oWQyiD1flr1kK5SruY9VIkIFf0Y.roa (raw, json)
Hash identifier:          CmRaGPeba3KQgix8HommheQTfTqRMGogQgsWhxjTjhY=
Subject key identifier:   A1:64:32:88:3D:5F:96:BD:64:2B:94:AB:B9:8F:55:22:42:05:7F:46
Certificate issuer:       /CN=b795582c73302eb0a974477603049850833bd210
Certificate serial:       088BD4F9
Authority key identifier: B7:95:58:2C:73:30:2E:B0:A9:74:47:76:03:04:98:50:83:3B:D2:10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t5VYLHMwLrCpdEd2AwSYUIM70hA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/57d30a-0552-45f6-9ebc-c2bd5fc04424/1/oWQyiD1flr1kK5SruY9VIkIFf0Y.roa
Signing time:             Sat 01 Jan 2022 06:56:25 +0000
ROA not before:           Sat 01 Jan 2022 06:56:25 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206640
IP address blocks:        185.180.112.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 143381753 (0x88bd4f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b795582c73302eb0a974477603049850833bd210
        Validity
            Not Before: Jan  1 06:56:25 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a16432883d5f96bd642b94abb98f552242057f46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1c:47:83:ae:62:7d:92:b0:fb:72:5c:08:a3:
                    21:eb:52:97:10:dc:c3:1b:39:dc:8a:a0:72:38:cb:
                    6b:66:bd:56:1e:3d:89:79:88:57:2e:18:67:49:ef:
                    10:44:06:db:06:0c:66:73:bd:0a:67:37:1e:0a:15:
                    58:f0:7d:02:d0:f8:f4:98:af:42:5f:2c:b4:02:33:
                    9e:da:cb:7f:d2:5d:90:c2:21:18:5b:e8:36:58:35:
                    a1:a0:7a:04:ce:0c:93:f5:9a:15:e3:7d:a0:9f:fa:
                    8a:2a:5a:db:e2:0c:76:a6:8e:f9:2c:c9:71:aa:b1:
                    5d:33:8c:83:46:fa:16:e0:c7:ee:e3:3d:af:ac:80:
                    0d:0c:f3:7c:a3:cf:a9:ae:77:64:56:dc:94:39:b1:
                    0f:76:1e:8f:4d:b9:07:6a:7d:c9:0d:c2:62:45:d9:
                    61:cf:1d:1a:da:de:57:ff:b6:34:f4:57:c1:5e:ed:
                    a9:b0:f0:fb:33:14:87:f8:9e:70:e6:4e:f6:e2:be:
                    95:63:b0:f1:9e:e6:6c:fe:8c:b4:9d:fd:ce:c8:19:
                    7f:9e:36:3f:0e:56:91:a1:2e:54:35:6b:c6:c0:df:
                    46:60:c7:e8:dd:39:2c:8d:33:f5:4b:5e:3a:cc:1d:
                    87:3c:b2:6f:08:9f:00:11:c4:22:b7:4c:f9:74:f3:
                    1b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:64:32:88:3D:5F:96:BD:64:2B:94:AB:B9:8F:55:22:42:05:7F:46
            X509v3 Authority Key Identifier:
                keyid:B7:95:58:2C:73:30:2E:B0:A9:74:47:76:03:04:98:50:83:3B:D2:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5VYLHMwLrCpdEd2AwSYUIM70hA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/57d30a-0552-45f6-9ebc-c2bd5fc04424/1/oWQyiD1flr1kK5SruY9VIkIFf0Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/57d30a-0552-45f6-9ebc-c2bd5fc04424/1/t5VYLHMwLrCpdEd2AwSYUIM70hA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.180.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:7f:54:f8:22:4f:50:45:b3:36:52:8b:95:07:16:bd:e6:03:
         88:af:4a:ce:d3:8d:0d:92:d1:2a:43:7c:76:7f:21:b0:3a:2a:
         93:aa:ba:8e:9a:1e:f7:7b:e1:fe:82:fc:a1:47:64:c5:b4:d9:
         aa:9f:c3:cd:94:45:ed:ec:bc:c9:f3:72:7b:48:ff:03:db:bd:
         10:24:5f:9e:5d:8d:04:7b:aa:c0:24:44:08:38:f6:d2:7d:40:
         82:14:5e:71:5f:56:6b:db:03:7b:2f:b3:f7:c7:aa:63:b7:dc:
         d1:a0:ec:a8:8b:87:e7:fc:d7:eb:ec:1b:41:0a:c0:b8:75:0f:
         72:b0:91:76:e7:31:66:37:43:b1:0a:3d:b2:9b:73:60:9a:41:
         13:49:72:3a:01:71:9e:c6:33:e8:c5:55:12:dd:93:e0:ae:78:
         32:ec:9c:46:c4:d0:bb:10:a3:81:08:09:db:4f:67:c5:c9:d6:
         f1:62:13:b4:c7:d0:12:60:d7:ef:28:27:db:21:73:6a:fd:c6:
         02:de:e0:43:7d:ee:49:1f:81:b8:fd:d4:d8:e2:c9:2d:fb:6d:
         8f:5b:29:92:8a:23:85:1a:42:a6:86:75:9b:25:52:0f:ea:ab:
         fc:28:d9:83:c8:0f:4f:a7:c3:2d:28:11:3f:e7:c2:9d:0f:71:
         6d:4d:f2:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:02 2024 by rpki-client on console-fra.rpki-client.org