Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/X-YETg3Jwr6TSg-Nox6AyvDB4E8.roa
File:                     X-YETg3Jwr6TSg-Nox6AyvDB4E8.roa (raw, json)
Hash identifier:          67j/geieMnRV3WC3RqDWscgKvzbz1LixZzB/cs3JbBE=
Subject key identifier:   5F:E6:04:4E:0D:C9:C2:BE:93:4A:0F:8D:A3:1E:80:CA:F0:C1:E0:4F
Certificate issuer:       /CN=78703e7a62309bf027c1f10536926a19b7f14b1e
Certificate serial:       01880962
Authority key identifier: 78:70:3E:7A:62:30:9B:F0:27:C1:F1:05:36:92:6A:19:B7:F1:4B:1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eHA-emIwm_AnwfEFNpJqGbfxSx4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/X-YETg3Jwr6TSg-Nox6AyvDB4E8.roa
Signing time:             Sat 01 Jan 2022 10:00:31 +0000
ROA not before:           Sat 01 Jan 2022 10:00:31 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     47447
IP address blocks:        185.117.215.0/24 maxlen: 24
                          2a06:8781::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25692514 (0x1880962)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78703e7a62309bf027c1f10536926a19b7f14b1e
        Validity
            Not Before: Jan  1 10:00:31 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5fe6044e0dc9c2be934a0f8da31e80caf0c1e04f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:81:f1:a3:50:d8:0e:54:46:a8:69:85:4d:66:
                    fc:a9:10:6c:f8:c1:42:1c:2f:fa:a1:22:93:25:7b:
                    11:22:94:63:10:b2:f8:5b:35:0d:9a:fc:95:1f:87:
                    42:c3:7a:f4:9f:09:a1:c5:b4:3a:fb:5f:eb:2a:5d:
                    38:93:10:20:46:51:67:0c:06:30:7a:99:ef:c8:26:
                    dc:37:77:3a:63:0d:10:7a:2a:b5:11:b0:48:bb:f3:
                    0c:ba:1b:f3:c6:de:1c:ae:ab:0c:d6:6b:79:96:af:
                    d1:8f:32:b3:a1:15:f3:fa:d8:20:6b:1c:87:2d:a7:
                    6b:8d:cf:a6:6e:52:1e:3f:9a:ab:8e:cf:01:8d:31:
                    fc:87:80:60:ee:3a:92:91:5d:97:cb:3d:c1:c5:bd:
                    08:d6:ab:cc:72:f5:cc:e8:ff:a8:20:bf:92:63:42:
                    a2:cc:3d:9b:27:9b:db:c7:50:c0:b1:8e:6d:3c:1b:
                    10:56:2f:96:95:ef:a4:21:ef:73:3c:56:01:c3:e3:
                    da:80:ff:60:cc:3f:0c:eb:ab:7a:07:75:c0:a9:d7:
                    93:3c:f8:4a:01:e0:8b:07:89:da:c8:6a:e7:0f:3c:
                    5c:b8:60:d3:49:3b:d5:d0:bf:8c:66:f6:4b:9e:56:
                    2c:c9:84:fb:1b:50:b8:2e:45:3e:b1:09:26:b3:09:
                    ca:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:E6:04:4E:0D:C9:C2:BE:93:4A:0F:8D:A3:1E:80:CA:F0:C1:E0:4F
            X509v3 Authority Key Identifier:
                keyid:78:70:3E:7A:62:30:9B:F0:27:C1:F1:05:36:92:6A:19:B7:F1:4B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHA-emIwm_AnwfEFNpJqGbfxSx4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/X-YETg3Jwr6TSg-Nox6AyvDB4E8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/eHA-emIwm_AnwfEFNpJqGbfxSx4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.117.215.0/24
                IPv6:
                  2a06:8781::/40

    Signature Algorithm: sha256WithRSAEncryption
         5c:c9:6a:e2:13:0f:39:95:dd:17:b1:65:08:69:26:30:d1:b5:
         fd:13:5f:73:e0:6a:0a:89:5c:71:76:37:16:1a:88:53:dc:1b:
         1d:1c:58:c0:88:1e:7d:61:05:c9:9a:eb:16:c1:20:da:45:07:
         d7:11:2a:2f:a0:af:28:5b:43:a5:16:92:11:2c:ac:78:e1:2e:
         e4:e9:4d:24:d2:9c:8e:b2:24:33:07:6a:4d:77:fe:26:57:15:
         81:ec:64:2d:b1:a6:06:ec:c9:81:a6:44:3a:aa:ab:77:94:db:
         04:2f:d9:f7:27:20:49:16:f4:f4:7c:ac:70:4a:50:f4:bb:e1:
         8f:3e:fb:e8:88:d1:e4:79:07:23:59:59:57:85:f0:c6:de:28:
         fb:6a:4a:aa:a8:e9:a3:95:d5:a6:f9:9e:0e:0e:26:c2:d3:53:
         d7:2f:30:33:1a:57:b4:b7:b3:94:b5:07:b7:85:c2:8f:0d:c9:
         76:ed:92:f7:b5:62:75:1a:4b:37:7d:62:31:93:79:4a:33:9b:
         b3:b6:a0:3b:e1:7a:01:fc:aa:c8:ab:3d:45:03:12:61:2c:57:
         c6:b5:ae:5f:e5:01:09:57:8e:13:03:d1:f2:cd:39:3e:22:89:
         3d:0e:fb:5b:fb:2b:ac:9f:ef:4a:b4:24:cd:13:57:9f:43:80:
         62:ef:70:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:28 2024 by rpki-client on console-fra.rpki-client.org