Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/f55d44-5893-4c22-b0b7-c655ad594193/1/nTo8rYXCP0zs_35LSLgtfe1NISA.roa
File:                     nTo8rYXCP0zs_35LSLgtfe1NISA.roa (raw, json)
Hash identifier:          TnQB50+MHMCg4Wf2q//+br0GfCffEKUt7d86udojOYY=
Subject key identifier:   9D:3A:3C:AD:85:C2:3F:4C:EC:FF:7E:4B:48:B8:2D:7D:ED:4D:21:20
Certificate issuer:       /CN=ec167bb6b061fffa629dd2a84ccf7db44c71a351
Certificate serial:       1BF6537B
Authority key identifier: EC:16:7B:B6:B0:61:FF:FA:62:9D:D2:A8:4C:CF:7D:B4:4C:71:A3:51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7BZ7trBh__pindKoTM99tExxo1E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/f55d44-5893-4c22-b0b7-c655ad594193/1/nTo8rYXCP0zs_35LSLgtfe1NISA.roa
Signing time:             Sat 01 Jan 2022 02:52:40 +0000
ROA not before:           Sat 01 Jan 2022 02:52:40 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3257
IP address blocks:        185.3.30.0/23 maxlen: 23
                          185.3.28.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 469128059 (0x1bf6537b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec167bb6b061fffa629dd2a84ccf7db44c71a351
        Validity
            Not Before: Jan  1 02:52:40 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9d3a3cad85c23f4cecff7e4b48b82d7ded4d2120
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:50:73:12:df:62:46:a9:d0:b0:53:02:34:7a:
                    62:fd:2b:d8:a9:a9:10:f1:07:fb:f5:ec:6c:a1:46:
                    6d:78:a1:14:2e:a4:e5:14:a6:8e:a8:a5:e5:5c:11:
                    4f:a0:e9:84:47:6d:63:3b:0b:c6:c6:20:0e:36:6c:
                    62:d8:77:54:1a:90:91:61:ee:23:af:25:ba:5a:91:
                    f6:91:50:8d:f7:80:a9:d1:7e:30:d0:53:da:ed:d1:
                    46:8b:99:ca:b1:6a:4a:47:5c:b1:ae:92:93:c6:ef:
                    b8:d2:26:a6:e4:28:47:30:57:49:a7:b7:3b:38:13:
                    99:b0:0f:ee:dd:7b:88:4e:43:8d:89:68:6b:d1:9c:
                    e6:89:60:ba:01:38:b5:df:4a:f0:3c:56:11:57:ae:
                    ce:c4:bb:67:ee:3b:c1:8b:c7:c2:89:7e:28:65:c3:
                    48:7b:e7:92:61:a0:17:c2:e3:70:1e:e5:4a:fd:a4:
                    dc:98:2b:ef:c5:3e:fb:55:68:86:3f:48:c0:96:c9:
                    a5:34:f7:79:d6:f4:bb:0b:ee:3e:e5:27:c9:3b:b5:
                    33:0f:2d:3a:c1:48:1b:3d:50:3a:93:64:47:74:83:
                    bf:c6:93:3a:90:97:3c:01:89:8d:fb:2e:a7:a0:d0:
                    d9:50:f3:9b:a8:d9:c9:5a:47:59:e8:2e:7d:24:bd:
                    63:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:3A:3C:AD:85:C2:3F:4C:EC:FF:7E:4B:48:B8:2D:7D:ED:4D:21:20
            X509v3 Authority Key Identifier:
                keyid:EC:16:7B:B6:B0:61:FF:FA:62:9D:D2:A8:4C:CF:7D:B4:4C:71:A3:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7BZ7trBh__pindKoTM99tExxo1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/f55d44-5893-4c22-b0b7-c655ad594193/1/nTo8rYXCP0zs_35LSLgtfe1NISA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/f55d44-5893-4c22-b0b7-c655ad594193/1/7BZ7trBh__pindKoTM99tExxo1E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.3.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:53:25:1a:bc:ce:94:d6:f5:f3:61:0e:8f:bc:bd:47:b3:9c:
         12:75:cf:6a:c5:22:7f:25:0d:de:c2:6c:b0:9c:d6:78:94:b6:
         35:3f:b7:ec:9b:f1:cf:2c:2a:39:95:1b:90:5b:e6:8a:3a:6f:
         51:03:ed:47:81:55:b5:85:5e:8e:b6:68:ce:94:49:f1:d6:8f:
         05:92:27:19:b8:8e:08:44:c4:c7:47:16:ff:14:eb:ae:94:05:
         89:9e:6a:9c:00:ec:c8:80:94:cf:1d:af:a9:4b:b8:2e:9e:2e:
         6c:18:07:08:7c:68:8f:a7:c3:cb:9a:6b:1d:f0:92:1d:29:23:
         2d:a8:ed:6e:39:80:f8:c7:c4:35:fa:7a:7c:0f:ea:65:d4:78:
         1d:84:3c:39:a9:4d:ad:50:f2:26:89:27:44:e2:e0:48:ca:d8:
         6a:d6:07:91:f9:37:f6:88:af:7e:d0:ed:9a:e2:df:52:7d:d6:
         c1:ee:e7:6f:0c:a6:fa:df:a8:35:58:dc:51:b1:ef:5d:30:6a:
         a3:1b:c9:4e:fb:7a:3a:71:a7:8f:82:e0:8b:3e:fc:92:ff:c3:
         10:ad:a3:4d:8c:2d:20:3d:48:a3:ed:d9:e9:29:d5:e2:4e:ac:
         89:88:19:64:a6:fe:44:47:ad:ce:79:e8:0f:15:a3:83:4a:58:
         a3:76:aa:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:53 2024 by rpki-client on console-ams.rpki-client.org