Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/DVS71iI8Md5v6Pvo3kzuYd_W-Zc.roa
File:                     DVS71iI8Md5v6Pvo3kzuYd_W-Zc.roa (raw, json)
Hash identifier:          ll0W0D8yrIvzAp4YmZNSBruU+QtdGuUgZ3CK9u8R8pY=
Subject key identifier:   0D:54:BB:D6:22:3C:31:DE:6F:E8:FB:E8:DE:4C:EE:61:DF:D6:F9:97
Certificate issuer:       /CN=d9884f92afeb58ffab26487b23205fe0d5da8a9f
Certificate serial:       8919FD
Authority key identifier: D9:88:4F:92:AF:EB:58:FF:AB:26:48:7B:23:20:5F:E0:D5:DA:8A:9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2YhPkq_rWP-rJkh7IyBf4NXaip8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/DVS71iI8Md5v6Pvo3kzuYd_W-Zc.roa
Signing time:             Sat 01 Jan 2022 01:54:17 +0000
ROA not before:           Sat 01 Jan 2022 01:54:17 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206519
IP address blocks:        185.184.85.0/24 maxlen: 24
                          185.184.84.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8985085 (0x8919fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9884f92afeb58ffab26487b23205fe0d5da8a9f
        Validity
            Not Before: Jan  1 01:54:17 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0d54bbd6223c31de6fe8fbe8de4cee61dfd6f997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4a:be:2f:a3:35:58:0f:b3:1a:2a:ed:17:87:
                    78:1d:f4:71:71:54:2e:ad:11:51:41:e9:07:ef:ea:
                    a7:c9:4b:b5:99:5d:38:7a:d0:6d:c3:37:8b:1d:03:
                    82:5a:da:cb:46:92:9a:a5:20:fe:d8:30:23:7f:8f:
                    0f:ee:77:0a:6f:f8:34:e1:ad:38:a8:48:82:50:7e:
                    be:ad:1a:f8:6a:9d:60:4b:a6:10:50:e5:b0:e9:ba:
                    25:f1:01:b2:11:49:93:86:7f:ce:c5:97:44:b5:9f:
                    02:eb:58:f7:e1:72:32:8a:c7:52:2e:4e:a1:a1:69:
                    52:8e:a3:67:f6:9d:33:2c:d5:1c:6b:f2:21:fc:0c:
                    ba:a1:ef:b1:c2:d5:68:97:e0:e1:6f:fc:05:2f:aa:
                    cb:1f:93:ee:26:0c:9c:cb:27:a3:3e:4d:e7:0e:82:
                    83:4f:90:fa:90:89:df:9e:32:d3:0c:3f:5f:cb:c0:
                    9e:63:e1:1e:89:b8:52:e4:5b:14:99:32:d3:9a:5e:
                    32:cb:c3:8c:07:fe:d5:0f:99:73:e4:e1:ee:15:84:
                    99:aa:4d:c9:8f:87:2a:e3:95:04:fa:da:f7:f3:af:
                    46:02:31:9f:9f:94:7e:82:25:6f:2f:ce:a9:6f:e4:
                    7a:7d:de:22:db:0e:de:46:f1:64:c3:07:d6:f8:f5:
                    a4:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:54:BB:D6:22:3C:31:DE:6F:E8:FB:E8:DE:4C:EE:61:DF:D6:F9:97
            X509v3 Authority Key Identifier:
                keyid:D9:88:4F:92:AF:EB:58:FF:AB:26:48:7B:23:20:5F:E0:D5:DA:8A:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YhPkq_rWP-rJkh7IyBf4NXaip8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/DVS71iI8Md5v6Pvo3kzuYd_W-Zc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.184.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ae:14:c9:35:d6:93:5f:46:c1:49:5b:ac:90:a8:4f:c3:f3:ad:
         4e:68:75:97:db:23:46:aa:d7:5b:6b:d9:14:91:32:1c:c3:b2:
         c5:eb:5b:cd:b5:a1:54:8f:84:13:3a:1f:7a:cf:5c:4c:83:13:
         89:bc:f6:2b:0d:56:52:99:76:dc:2d:5c:5f:2d:3c:93:9a:dd:
         19:57:9a:07:f8:60:3e:1c:05:82:9d:33:22:d9:db:c9:45:06:
         d9:af:90:9e:fa:87:40:0a:81:f1:1d:1b:d1:c8:64:91:0c:47:
         09:e1:09:d5:f8:9b:26:e5:e0:c4:fd:2c:7f:ce:b5:8a:6c:a2:
         ac:af:de:ea:ed:e2:a6:36:8d:f0:1c:80:43:84:3f:1b:f1:52:
         be:d3:bd:bf:af:6a:8d:64:77:a3:fe:8b:e5:66:e9:1d:02:b0:
         e3:b4:51:24:aa:fb:fd:22:72:3a:9d:c0:73:98:e6:79:ba:cf:
         0d:e4:5e:2b:8a:dd:7f:23:3f:4e:a4:ac:c1:a7:32:82:18:b4:
         8a:82:b5:df:13:c3:b8:8e:1c:12:60:07:4e:4a:6b:8b:47:6e:
         b4:73:da:fb:0a:09:2f:ca:e7:cd:35:ad:6b:86:b1:e0:c9:6c:
         91:55:de:31:9b:42:1a:49:82:b7:9b:9c:ee:80:d1:60:58:c2:
         4e:98:fb:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:16 2024 by rpki-client on console-fra.rpki-client.org