Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/27c919-ccce-46a9-84b3-ef81fca63029/1/fjeTpEJeYNgAT3KY3Bn46xd-0k8.roa
File:                     fjeTpEJeYNgAT3KY3Bn46xd-0k8.roa (raw, json)
Hash identifier:          1bdLj34mfwnlsxORy7WtoESZbdKfFaf2orfwEbGE4fo=
Subject key identifier:   7E:37:93:A4:42:5E:60:D8:00:4F:72:98:DC:19:F8:EB:17:7E:D2:4F
Certificate issuer:       /CN=2e5664e02936cb5b5454d595c5382b7e7a0c7944
Certificate serial:       023F9106
Authority key identifier: 2E:56:64:E0:29:36:CB:5B:54:54:D5:95:C5:38:2B:7E:7A:0C:79:44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/27c919-ccce-46a9-84b3-ef81fca63029/1/fjeTpEJeYNgAT3KY3Bn46xd-0k8.roa
Signing time:             Sat 01 Jan 2022 04:56:57 +0000
ROA not before:           Sat 01 Jan 2022 04:56:57 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     213093
IP address blocks:        185.184.63.0/24 maxlen: 24
                          185.184.62.0/24 maxlen: 24
                          185.184.62.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37720326 (0x23f9106)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e5664e02936cb5b5454d595c5382b7e7a0c7944
        Validity
            Not Before: Jan  1 04:56:57 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7e3793a4425e60d8004f7298dc19f8eb177ed24f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3a:26:c9:ee:7b:07:3b:29:e0:a1:0d:f5:26:
                    8f:a7:9c:28:73:c2:45:06:85:8a:fc:2d:92:1d:22:
                    64:d9:5e:cd:6c:65:7e:76:18:38:c7:31:ba:3c:bc:
                    26:97:4b:76:69:f5:d1:27:e4:19:ab:dc:36:ae:68:
                    cf:b4:76:d6:9e:d0:5f:f8:dc:b9:2d:5f:c7:e0:eb:
                    84:a3:ee:d8:74:11:3e:b5:04:c6:1d:6e:9c:2d:86:
                    a8:95:86:e4:49:6e:b3:55:d9:fa:ca:7d:fe:b3:4e:
                    27:ba:73:cd:d1:1c:b7:74:51:24:2f:fa:02:bb:92:
                    02:c4:c5:10:f7:03:d7:a2:8a:12:44:9d:df:10:7e:
                    90:19:b2:35:7f:68:93:73:38:c6:a9:61:83:64:7e:
                    d2:07:bb:95:6c:4b:5e:c2:e8:13:ed:d3:87:f2:a7:
                    9a:a9:08:72:73:90:2a:d8:4c:ea:66:ce:2a:dc:1b:
                    aa:92:49:dc:f0:49:e4:ce:5b:48:9b:bb:c6:9e:b8:
                    bc:46:1c:94:8b:c7:ec:bd:65:44:fe:c1:1f:f9:2c:
                    76:36:16:bf:65:e2:78:58:93:3a:ad:7a:dd:65:76:
                    30:34:e3:1b:f4:51:1c:eb:58:48:d0:ba:d0:0e:8a:
                    bc:94:8f:4c:b5:6e:54:1d:35:2a:db:87:54:94:bd:
                    16:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:37:93:A4:42:5E:60:D8:00:4F:72:98:DC:19:F8:EB:17:7E:D2:4F
            X509v3 Authority Key Identifier:
                keyid:2E:56:64:E0:29:36:CB:5B:54:54:D5:95:C5:38:2B:7E:7A:0C:79:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/27c919-ccce-46a9-84b3-ef81fca63029/1/fjeTpEJeYNgAT3KY3Bn46xd-0k8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/27c919-ccce-46a9-84b3-ef81fca63029/1/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.184.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         53:a1:5d:78:65:e5:2d:42:12:65:4a:d7:8d:f8:48:10:f7:cb:
         9b:e7:2d:26:4f:cf:72:cb:79:98:5a:00:db:eb:f1:95:f8:8a:
         10:66:6a:35:c6:1a:2a:c5:1e:ce:62:ef:ab:0c:c8:b9:36:27:
         cd:62:38:7f:9f:8c:f1:d6:6f:42:31:7c:a2:82:05:bf:a3:21:
         5c:02:0b:57:f8:60:b3:a8:40:cd:fc:55:9e:3b:e2:37:88:76:
         e1:c7:dc:77:5e:e3:87:37:e9:41:8c:a5:ef:fa:52:72:42:95:
         ef:94:74:e9:c4:a8:36:ec:58:86:55:b2:26:46:64:59:b1:b0:
         02:10:37:07:a0:f7:0c:aa:e4:6b:d4:0c:a1:46:f4:e7:24:cf:
         7e:0d:83:5e:5f:a9:1d:24:cd:64:98:a6:42:65:e7:13:fe:9c:
         25:74:00:b7:63:ed:76:73:03:e3:71:21:e5:ac:a0:8f:8f:b3:
         c1:fe:12:93:3a:fe:5b:f7:83:7e:ed:60:44:8f:9d:4c:e1:80:
         cf:7d:ad:40:c6:d1:f7:50:de:48:45:3e:e5:92:57:21:db:a8:
         7b:a0:98:93:76:a0:da:40:92:da:a3:48:c3:d2:a8:10:46:e1:
         73:0f:bb:d2:8e:00:8e:bf:0e:be:b4:00:c6:f3:b8:80:84:8b:
         74:f3:8e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:32 2024 by rpki-client on console-fra.rpki-client.org