Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/1-M3Fw9V7WnOwwC66Z5-vg9kWLig.roa
File:                     1-M3Fw9V7WnOwwC66Z5-vg9kWLig.roa (raw, json)
Hash identifier:          W2xw86DLKIRemE+l2CcQIDloJNsYLsyss18E0NF08wk=
Subject key identifier:   F8:CD:C5:C3:D5:7B:5A:73:B0:C0:2E:BA:67:9F:AF:83:D9:16:2E:28
Certificate issuer:       /CN=98e2f4aba0bc9b3e3ab1856497a40071971b704a
Certificate serial:       03945762
Authority key identifier: 98:E2:F4:AB:A0:BC:9B:3E:3A:B1:85:64:97:A4:00:71:97:1B:70:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mOL0q6C8mz46sYVkl6QAcZcbcEo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/1-M3Fw9V7WnOwwC66Z5-vg9kWLig.roa
Signing time:             Sat 01 Jan 2022 15:57:45 +0000
ROA not before:           Sat 01 Jan 2022 15:57:45 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     44716
IP address blocks:        185.219.152.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60053346 (0x3945762)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98e2f4aba0bc9b3e3ab1856497a40071971b704a
        Validity
            Not Before: Jan  1 15:57:45 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f8cdc5c3d57b5a73b0c02eba679faf83d9162e28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:cf:9c:dd:cb:7f:0e:0a:b9:73:8c:bc:4a:b5:
                    b5:e6:16:8f:e2:af:45:f8:f8:80:db:13:3e:3c:aa:
                    29:26:0c:69:0f:14:bb:a3:48:49:45:72:77:3b:bd:
                    9c:bb:ed:98:14:f1:bd:60:74:f1:08:fb:59:80:6e:
                    31:c0:34:57:44:43:ae:23:c9:ab:c0:ab:9a:0d:95:
                    49:3c:50:56:dc:84:b3:6b:e2:e8:e9:42:00:07:0b:
                    d3:9a:8e:f2:c9:7d:2a:96:5d:07:15:02:7f:cc:fc:
                    0f:da:45:fb:36:0c:c0:98:d3:4a:7c:f8:7a:6f:85:
                    16:0a:d6:a3:12:b6:a1:ba:66:b6:ad:6e:6a:f7:ec:
                    19:97:e7:8c:5b:46:bb:04:95:51:c4:83:5c:fe:2a:
                    9b:26:7a:4b:a7:51:76:0f:c1:36:26:0b:63:30:38:
                    f6:5a:6d:5c:a8:ce:28:65:2d:f8:8d:cb:94:8a:23:
                    9d:c7:1e:e4:4f:0e:6e:a5:cb:cb:b8:f7:91:0e:4b:
                    e8:63:25:cb:eb:95:3e:62:d9:c1:c0:b6:7a:ed:f5:
                    33:89:05:d0:96:a3:a1:ca:1b:18:ba:88:ba:7b:bf:
                    bf:13:e4:41:fa:43:88:3e:62:6c:49:79:c2:c8:97:
                    f3:ec:10:72:8f:c5:79:47:b4:01:b8:d8:26:6a:0b:
                    a4:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:CD:C5:C3:D5:7B:5A:73:B0:C0:2E:BA:67:9F:AF:83:D9:16:2E:28
            X509v3 Authority Key Identifier:
                keyid:98:E2:F4:AB:A0:BC:9B:3E:3A:B1:85:64:97:A4:00:71:97:1B:70:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mOL0q6C8mz46sYVkl6QAcZcbcEo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/1-M3Fw9V7WnOwwC66Z5-vg9kWLig.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.219.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b2:41:53:44:35:a6:d9:11:2c:31:27:4e:45:02:b1:89:72:ed:
         21:ca:89:92:76:1d:04:72:33:b7:7f:80:5d:8a:4f:ed:ab:75:
         80:52:82:bf:6b:18:fc:21:6c:07:e0:a8:40:86:d6:d5:48:2c:
         66:53:8b:a0:a9:16:35:b5:fd:47:30:fa:af:0f:c3:a3:c2:3e:
         53:c1:a5:4c:23:b5:a6:3c:80:71:a9:9d:a5:25:64:9b:7a:be:
         7e:32:e7:8b:f5:46:89:0f:45:b2:d4:0c:30:b6:f7:e5:10:2b:
         c1:f7:21:4e:87:7f:73:5e:c8:94:19:ac:0d:6f:36:24:a8:b0:
         4a:6b:cf:f0:8d:d1:bd:35:b5:d6:36:30:98:63:55:9a:55:fb:
         48:88:ad:e6:fe:57:d5:44:d4:2e:9c:e1:40:3c:b5:55:43:89:
         db:80:d5:a9:43:c5:a4:08:ae:be:d9:2c:bf:55:b5:d6:89:a6:
         29:52:d2:04:4e:d0:ec:56:04:d5:c8:61:bc:97:e5:15:80:90:
         5f:f9:cb:f1:ca:da:bd:b0:da:d6:44:fb:57:9d:a6:a6:9c:5b:
         91:7d:6c:dc:0d:78:63:63:22:82:cc:7b:0c:53:fa:bb:fe:73:
         58:a7:8d:76:66:26:4e:26:f4:1d:2d:08:03:86:dc:0b:76:93:
         93:ea:7b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:52 2024 by rpki-client on console-fra.rpki-client.org