Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/Wv9541jm-4Tyrbi__12bfocy8Ek.roa
File:                     Wv9541jm-4Tyrbi__12bfocy8Ek.roa (raw, json)
Hash identifier:          iLH4+P635d7GRK9MtTR1Hb6ZXtjemUExilMNVenTcNs=
Subject key identifier:   5A:FF:79:E3:58:E6:FB:84:F2:AD:B8:BF:FF:5D:9B:7E:87:32:F0:49
Certificate issuer:       /CN=607e5caff4f47b2b8dc81cc36c8e346662639898
Certificate serial:       0334F085
Authority key identifier: 60:7E:5C:AF:F4:F4:7B:2B:8D:C8:1C:C3:6C:8E:34:66:62:63:98:98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YH5cr_T0eyuNyBzDbI40ZmJjmJg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/Wv9541jm-4Tyrbi__12bfocy8Ek.roa
Signing time:             Sat 01 Jan 2022 11:00:25 +0000
ROA not before:           Sat 01 Jan 2022 11:00:25 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208821
IP address blocks:        185.189.53.0/24 maxlen: 24
                          185.189.54.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53801093 (0x334f085)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=607e5caff4f47b2b8dc81cc36c8e346662639898
        Validity
            Not Before: Jan  1 11:00:25 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5aff79e358e6fb84f2adb8bfff5d9b7e8732f049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:3b:47:e1:98:ef:ef:be:07:7a:be:91:79:3c:
                    e4:75:d7:04:01:01:21:f0:10:46:ee:f7:9d:ce:5f:
                    39:1a:cd:1e:86:3f:68:00:86:02:78:b9:07:e5:56:
                    e1:2f:ce:1f:be:aa:24:18:d2:2a:60:59:1d:27:b2:
                    53:fe:78:41:c9:46:60:fe:2d:e4:40:a0:e4:8d:83:
                    7f:0d:5f:40:63:5c:a0:3b:e5:aa:c1:c1:78:f3:68:
                    3c:38:5e:19:20:64:e3:c7:c2:ec:16:f0:99:c0:04:
                    7e:30:7d:55:ef:06:b6:14:46:e4:22:e8:f0:c9:d8:
                    6e:d8:68:78:a2:94:59:1c:25:24:d7:c9:25:e5:01:
                    95:62:b2:84:33:f0:dd:c3:c2:49:e1:c7:b2:87:16:
                    b5:08:58:f6:d8:d8:87:14:17:09:59:fb:46:18:29:
                    ef:23:f6:07:a2:c2:92:4e:a7:44:9f:bd:4d:32:3d:
                    b9:d6:09:69:9b:d7:df:6b:91:ab:85:68:18:8a:4f:
                    de:0f:cf:48:eb:59:de:c1:80:14:7c:32:28:b4:0a:
                    eb:28:f8:75:60:ce:9e:22:ee:6c:c6:9f:7f:34:0d:
                    82:10:cc:ff:b2:68:44:93:2a:1a:c2:8c:68:8c:f1:
                    04:de:b4:ec:ff:c5:de:d8:ae:28:f5:71:88:27:8c:
                    23:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:FF:79:E3:58:E6:FB:84:F2:AD:B8:BF:FF:5D:9B:7E:87:32:F0:49
            X509v3 Authority Key Identifier:
                keyid:60:7E:5C:AF:F4:F4:7B:2B:8D:C8:1C:C3:6C:8E:34:66:62:63:98:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YH5cr_T0eyuNyBzDbI40ZmJjmJg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/Wv9541jm-4Tyrbi__12bfocy8Ek.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.189.53.0-185.189.54.255

    Signature Algorithm: sha256WithRSAEncryption
         22:e4:f1:9f:8b:96:d4:ad:90:00:50:da:a1:38:e8:bb:38:a7:
         3e:43:bd:07:a8:89:83:63:f2:6e:09:d7:01:74:37:81:69:89:
         f3:0e:40:eb:d3:d8:58:39:ed:bf:e9:8e:40:81:a5:d5:a2:2e:
         04:67:be:7b:36:f9:81:38:5a:bf:f6:39:bf:59:e8:9a:2c:e5:
         3e:d9:11:4b:ea:19:9d:18:6e:d4:ea:e6:09:ab:10:d6:11:f0:
         88:94:12:80:84:af:01:58:a1:d7:1c:ea:b0:54:ab:a9:35:31:
         00:70:20:40:a2:62:4d:90:6f:8f:99:24:51:38:2f:d6:91:b5:
         76:07:0b:e4:41:b3:31:2c:5c:bf:8a:cb:85:ba:61:9f:f8:9d:
         6e:34:86:75:b6:f5:79:8f:41:19:1f:19:14:c3:39:20:9b:02:
         d9:d3:e8:27:56:59:03:b7:c6:06:e1:0f:a3:b3:47:34:f0:19:
         f1:96:af:a7:52:be:dc:c4:15:4a:9e:70:5e:17:58:dd:80:29:
         a1:f2:d0:7b:25:04:40:ff:0c:ae:c5:d1:f6:30:fb:92:73:fd:
         9a:89:8c:24:9e:fe:87:b6:80:aa:02:74:36:97:a9:18:d2:20:
         a2:09:1a:fe:97:88:4b:cf:3a:64:df:f8:5b:4f:9d:61:da:83:
         69:a3:62:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:07 2024 by rpki-client on console-fra.rpki-client.org