Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/tgUHh8iGkSloLtubGzI38-IVarQ.roa
File:                     tgUHh8iGkSloLtubGzI38-IVarQ.roa (raw, json)
Hash identifier:          liRBL9WBogWlO4yZkGQz8XcBNVpzcjY6111OvxUlVyQ=
Subject key identifier:   B6:05:07:87:C8:86:91:29:68:2E:DB:9B:1B:32:37:F3:E2:15:6A:B4
Certificate issuer:       /CN=4d0ade54c27e6fcddace262c4fdf790f320fed9c
Certificate serial:       292A898D
Authority key identifier: 4D:0A:DE:54:C2:7E:6F:CD:DA:CE:26:2C:4F:DF:79:0F:32:0F:ED:9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/tgUHh8iGkSloLtubGzI38-IVarQ.roa
Signing time:             Sat 01 Jan 2022 12:07:03 +0000
ROA not before:           Sat 01 Jan 2022 12:07:03 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60130
IP address blocks:        185.56.184.0/22 maxlen: 24
                          2a02:5560::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 690653581 (0x292a898d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d0ade54c27e6fcddace262c4fdf790f320fed9c
        Validity
            Not Before: Jan  1 12:07:03 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b6050787c8869129682edb9b1b3237f3e2156ab4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:47:50:38:80:54:db:56:df:8d:d5:e6:f5:8f:
                    0e:fc:9e:5e:1a:fa:c0:5a:f7:8b:55:c0:c7:0e:cb:
                    fc:0d:b3:94:b1:bf:38:ca:b4:dc:fa:70:8d:2d:66:
                    f4:53:c3:4e:b1:13:77:e8:dc:2c:26:68:53:66:78:
                    f9:74:ff:70:76:9f:bd:b2:14:69:ec:31:eb:ab:14:
                    1f:70:b8:83:4e:7a:99:88:d9:2f:87:14:24:34:8c:
                    a2:20:d4:9a:3d:8c:57:7a:79:5c:29:92:c0:c3:0a:
                    9c:d5:4f:8a:99:76:3c:18:52:f9:a3:d4:27:9c:99:
                    38:7d:48:2c:87:98:8d:62:eb:65:b3:52:d8:1c:23:
                    32:f7:95:01:2c:eb:19:71:0b:9c:f5:67:52:03:38:
                    f6:2d:3c:19:93:97:26:23:9b:1e:1a:a4:56:43:0c:
                    01:1d:d5:b4:4e:c8:e5:c4:c2:f3:3a:36:9a:c1:38:
                    db:b9:46:3d:5b:c0:6f:9a:d0:1d:63:d2:05:98:1b:
                    5f:a2:84:eb:e0:e2:0b:1b:be:89:7b:38:fe:e7:4e:
                    e6:0b:ba:f1:7e:29:80:85:39:70:de:e7:e1:b5:82:
                    5e:89:7b:50:5e:e0:56:39:bb:fd:3d:5e:fa:1b:2b:
                    66:a5:b2:91:d1:b5:07:bc:ec:34:24:69:1a:4b:15:
                    b1:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:05:07:87:C8:86:91:29:68:2E:DB:9B:1B:32:37:F3:E2:15:6A:B4
            X509v3 Authority Key Identifier:
                keyid:4D:0A:DE:54:C2:7E:6F:CD:DA:CE:26:2C:4F:DF:79:0F:32:0F:ED:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/tgUHh8iGkSloLtubGzI38-IVarQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.56.184.0/22
                IPv6:
                  2a02:5560::/32

    Signature Algorithm: sha256WithRSAEncryption
         ad:be:b0:3b:c3:8a:b0:80:c9:82:6c:4d:a1:78:f9:dd:68:b7:
         f8:c5:a4:8f:71:72:53:df:4f:9a:c4:b2:9e:bd:51:4c:d0:86:
         8b:d1:94:54:97:98:a0:f3:1a:41:83:e7:57:45:f4:10:63:49:
         28:fa:d3:55:2a:71:1c:8f:58:37:30:55:c1:e6:76:14:84:1e:
         f7:13:0e:63:d8:69:51:65:db:25:6b:93:51:a9:ee:9a:d4:91:
         34:fd:c3:df:22:10:f8:4f:4a:68:72:8d:cf:e3:75:3b:3b:d2:
         72:f6:c9:21:d4:ce:1f:69:3f:e8:54:21:1f:72:ed:16:12:83:
         87:a9:62:a2:86:62:a1:17:da:ba:32:99:e3:ba:b3:75:82:1b:
         48:99:9b:91:a5:ec:09:4a:72:65:66:2c:87:ef:3c:35:ac:9b:
         cd:6e:0c:c2:2e:2d:56:60:8e:b9:ba:4e:bf:ac:24:4d:3c:6e:
         0d:0c:aa:3f:f0:2f:85:b9:7a:3a:00:29:75:67:4c:54:be:10:
         65:bd:84:83:03:ca:5d:22:15:a6:48:19:25:e1:01:fd:c5:69:
         81:50:97:68:25:2c:04:1a:83:c0:f4:69:09:9f:5a:ad:d8:ee:
         b0:99:c2:39:5d:98:90:57:6b:36:de:68:22:81:4b:81:9e:0f:
         a4:aa:cb:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:30 2024 by rpki-client on console-fra.rpki-client.org