Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/27c919-ccce-46a9-84b3-ef81fca63029/1/qfugrHft3J9RGiEvHoVw6w6omP0.roa
File:                     qfugrHft3J9RGiEvHoVw6w6omP0.roa (raw, json)
Hash identifier:          M7DWCnVMopjSGKCwmdfY5jyOjuWClu9FifOx3OwiOyU=
Subject key identifier:   A9:FB:A0:AC:77:ED:DC:9F:51:1A:21:2F:1E:85:70:EB:0E:A8:98:FD
Certificate issuer:       /CN=2e5664e02936cb5b5454d595c5382b7e7a0c7944
Certificate serial:       03BDC9FB
Authority key identifier: 2E:56:64:E0:29:36:CB:5B:54:54:D5:95:C5:38:2B:7E:7A:0C:79:44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/27c919-ccce-46a9-84b3-ef81fca63029/1/qfugrHft3J9RGiEvHoVw6w6omP0.roa
Signing time:             Tue 21 Jun 2022 15:31:44 +0000
ROA not before:           Tue 21 Jun 2022 15:31:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204784
IP address blocks:        185.184.61.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62769659 (0x3bdc9fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e5664e02936cb5b5454d595c5382b7e7a0c7944
        Validity
            Not Before: Jun 21 15:31:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a9fba0ac77eddc9f511a212f1e8570eb0ea898fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:99:8e:78:8d:cb:a3:e9:f2:0d:72:24:8a:56:
                    52:cd:52:b1:3e:1e:51:e4:a8:65:1d:66:27:10:a8:
                    af:ae:94:a4:3b:a1:ab:cd:40:c8:73:59:bd:29:9f:
                    f4:9f:5e:06:ac:70:89:07:a1:ef:b3:df:aa:61:02:
                    1d:ff:c9:71:42:bd:65:e1:5e:95:30:ba:ba:8a:9f:
                    c3:fa:61:44:e5:4b:98:2c:c4:9d:36:41:2b:93:b8:
                    8b:e3:6b:bc:79:ce:24:29:f3:5c:07:1d:f1:a2:46:
                    84:1d:7f:b8:ee:5e:e8:61:ac:f1:6a:d1:f5:f2:62:
                    6e:f3:a5:a4:a6:5e:b1:2a:03:36:68:b9:ea:68:cc:
                    69:7b:69:75:94:ce:07:9e:9e:85:f6:9d:23:7f:29:
                    a5:32:8a:7c:ce:4c:74:c0:29:bd:15:f2:53:e0:51:
                    62:de:e6:53:31:3a:0c:6d:e8:80:1a:d3:1b:47:19:
                    2d:14:72:29:ab:09:ba:7e:1d:e3:65:ad:94:84:15:
                    dd:d5:87:a9:10:4a:fa:34:3c:bc:1e:fa:f1:3e:40:
                    55:f2:ac:48:48:ad:58:7f:eb:55:d8:3d:7e:d9:69:
                    29:48:31:b3:19:aa:a1:d6:06:d5:3b:11:13:47:2b:
                    f9:f8:b4:09:9c:a1:c3:ac:cc:1e:04:78:fc:18:39:
                    85:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:FB:A0:AC:77:ED:DC:9F:51:1A:21:2F:1E:85:70:EB:0E:A8:98:FD
            X509v3 Authority Key Identifier:
                keyid:2E:56:64:E0:29:36:CB:5B:54:54:D5:95:C5:38:2B:7E:7A:0C:79:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/27c919-ccce-46a9-84b3-ef81fca63029/1/qfugrHft3J9RGiEvHoVw6w6omP0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/27c919-ccce-46a9-84b3-ef81fca63029/1/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.184.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:30:2f:21:d2:b2:d9:1a:7a:d5:2e:96:d5:af:c0:e5:30:dd:
         36:75:c9:67:20:cb:f0:ae:d4:e3:8e:23:4e:0c:4d:2f:5b:e8:
         55:47:88:91:b4:e9:60:e2:8f:ec:81:f6:84:69:28:90:00:26:
         e7:3e:5f:1a:fc:d1:6d:9a:36:0f:37:b0:1e:b9:88:0c:a4:cc:
         47:1a:e0:f5:70:f4:c4:23:a2:e0:ff:1d:db:44:3b:a5:f1:c9:
         6b:82:42:43:41:39:c5:9b:f0:80:7e:a8:f3:6b:d6:6f:e0:2d:
         83:29:32:c4:36:b5:a1:94:80:dc:6c:e5:d0:2f:d0:4d:68:54:
         b6:26:5f:be:1c:b5:e3:93:52:92:ec:e8:f9:e9:7f:d5:c8:7c:
         50:a6:97:b7:02:47:65:b9:69:40:05:3b:e9:62:47:ca:43:5b:
         ee:64:c9:65:ae:e2:eb:57:32:a8:31:23:19:95:c5:b9:49:31:
         63:28:07:76:e3:3a:c3:d2:f3:4b:be:96:e6:e6:6b:a9:80:4d:
         9e:af:d1:ff:f8:ed:52:df:0e:67:4c:fc:67:8d:df:69:1f:62:
         d9:5f:7c:ef:8c:c0:bd:6f:38:fc:38:2c:30:7c:c1:c3:69:b8:
         e9:55:bd:36:a5:5e:fd:82:7f:ac:6f:85:c1:86:9a:1a:14:b8:
         57:cf:3a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:32 2024 by rpki-client on console-fra.rpki-client.org