Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/25/3138352e3234312e35382e302f32342d3234203d3e203139343337.roa
File:                     3138352e3234312e35382e302f32342d3234203d3e203139343337.roa (raw, json)
Hash identifier:          6uPXdzmkkH011DfmWdQlHECR76sTsHrlDzAUnA1oLPw=
Subject key identifier:   62:21:BF:12:5A:10:27:49:89:A4:45:8E:3E:91:97:90:8B:78:A0:0D
Certificate issuer:       /CN=77223c7df24b51552233edf70edc05faaa74141e
Certificate serial:       337DDA24FF83EFC4E2B16F00A04B2C56C212FBF3
Authority key identifier: 77:22:3C:7D:F2:4B:51:55:22:33:ED:F7:0E:DC:05:FA:AA:74:14:1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dyI8ffJLUVUiM-33DtwF-qp0FB4.cer
Subject info access:      rsync://0.sb/repo/sb/25/3138352e3234312e35382e302f32342d3234203d3e203139343337.roa
Signing time:             Wed 23 Feb 2022 02:36:31 +0000
ROA not before:           Wed 23 Feb 2022 02:31:31 +0000
ROA not after:            Wed 22 Feb 2023 02:36:31 +0000
asID:                     19437
IP address blocks:        185.241.58.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:7d:da:24:ff:83:ef:c4:e2:b1:6f:00:a0:4b:2c:56:c2:12:fb:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77223c7df24b51552233edf70edc05faaa74141e
        Validity
            Not Before: Feb 23 02:31:31 2022 GMT
            Not After : Feb 22 02:36:31 2023 GMT
        Subject: CN=6221BF125A10274989A4458E3E9197908B78A00D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:26:a7:14:9f:8e:32:33:92:06:98:29:14:2d:
                    74:a5:20:3d:0f:cc:4b:8d:76:69:f6:6c:ca:50:65:
                    87:c2:ae:b6:56:a4:96:74:2c:a4:a6:ca:3d:93:9e:
                    9c:c0:3a:88:8a:52:34:8d:b0:1a:45:7e:d5:e8:a4:
                    a8:18:68:21:54:29:ca:ab:2e:c2:33:09:bf:f1:f0:
                    95:7d:3e:c8:f0:77:5d:50:25:72:34:a6:30:2e:2f:
                    ea:e1:3b:1a:73:fe:2f:61:59:42:30:f6:44:e6:ea:
                    99:ce:10:5d:31:4a:34:36:f2:41:72:48:8a:4f:e1:
                    d5:86:e0:4e:59:fc:fb:19:7f:0e:38:ae:fe:dc:58:
                    92:a0:75:11:a3:eb:66:15:47:54:83:be:18:0a:58:
                    01:52:66:97:ea:6c:1c:67:61:30:d8:16:f3:4f:0f:
                    37:51:a1:e5:26:d9:74:9d:42:1a:00:41:ab:36:bb:
                    6d:d2:2b:ae:60:0f:e1:9c:4d:9b:59:b2:a3:ad:66:
                    64:13:ef:e5:1e:b5:e4:1f:54:dc:02:71:72:41:d9:
                    7c:e8:53:db:88:db:aa:b1:62:e9:85:86:9e:ae:e9:
                    e7:d5:f1:1b:12:67:50:c3:34:6e:18:99:93:d1:c0:
                    12:34:13:91:38:6a:12:08:94:54:82:62:f5:d5:da:
                    6f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:21:BF:12:5A:10:27:49:89:A4:45:8E:3E:91:97:90:8B:78:A0:0D
            X509v3 Authority Key Identifier:
                keyid:77:22:3C:7D:F2:4B:51:55:22:33:ED:F7:0E:DC:05:FA:AA:74:14:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/25/77223C7DF24B51552233EDF70EDC05FAAA74141E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dyI8ffJLUVUiM-33DtwF-qp0FB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/25/3138352e3234312e35382e302f32342d3234203d3e203139343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.241.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:6a:7c:08:51:b0:1b:65:a0:13:66:86:7b:c5:c6:d8:85:60:
         a1:44:ea:17:0f:fa:d8:b5:ba:cc:67:0b:a2:1a:22:31:bf:84:
         8e:ec:80:b1:da:0f:e8:46:17:9a:2f:02:cd:cf:01:54:1e:f8:
         98:86:ac:cc:03:9d:1b:ea:91:be:25:ef:67:17:cb:45:81:ca:
         0f:40:e3:90:e9:69:5c:1f:4a:c4:1c:88:74:63:83:15:22:49:
         d4:bb:88:a9:30:fd:6e:61:98:1e:22:f8:54:7e:d4:d0:a4:6f:
         fb:c5:75:ab:43:7d:0f:af:57:ad:03:68:80:7e:1e:9d:35:db:
         e5:f3:27:40:09:2f:77:64:0b:af:41:89:10:f0:9c:d1:55:b8:
         86:6c:a4:a8:bd:63:ad:30:71:ca:5a:1d:04:b7:60:9e:31:05:
         29:c0:7a:6e:19:6e:73:0c:c5:5f:e9:a1:cd:c3:c1:e6:cc:b4:
         ad:93:22:70:93:72:90:6a:f4:3a:b7:88:e3:2c:4b:d8:dd:e6:
         bf:53:9c:f1:51:7f:32:7c:12:5e:45:6b:06:d0:83:06:97:ed:
         5e:f2:19:32:9e:ad:d2:6a:e1:a6:c9:5d:a9:61:e9:c9:10:6f:
         a9:5d:8b:9e:f0:01:4e:72:6e:95:1e:c6:89:7e:c4:c5:a1:61:
         73:e1:89:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:49 2023 by rpki-client on console-ams.rpki-client.org