Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/bc9563-8ff9-4e95-8e7e-13b4c0d0aae1/1/w2D0_2aAGT-znuWyzRUbjC1JiyY.roa
File:                     w2D0_2aAGT-znuWyzRUbjC1JiyY.roa (raw, json)
Hash identifier:          DOVn0B+iGejrZQwEFcwMIdHJRVRZRefyF/4I+Y0xdKw=
Subject key identifier:   C3:60:F4:FF:66:80:19:3F:B3:9E:E5:B2:CD:15:1B:8C:2D:49:8B:26
Certificate issuer:       /CN=e86fc9f927947aa48983b027cf3de38475b053d3
Certificate serial:       188858C1
Authority key identifier: E8:6F:C9:F9:27:94:7A:A4:89:83:B0:27:CF:3D:E3:84:75:B0:53:D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6G_J-SeUeqSJg7Anzz3jhHWwU9M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/bc9563-8ff9-4e95-8e7e-13b4c0d0aae1/1/w2D0_2aAGT-znuWyzRUbjC1JiyY.roa
Signing time:             Sat 01 Jan 2022 12:05:28 +0000
ROA not before:           Sat 01 Jan 2022 12:05:28 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     28795
IP address blocks:        194.247.180.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 411588801 (0x188858c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e86fc9f927947aa48983b027cf3de38475b053d3
        Validity
            Not Before: Jan  1 12:05:28 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c360f4ff6680193fb39ee5b2cd151b8c2d498b26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:49:f4:b9:92:8e:49:d0:19:73:30:2e:df:99:
                    b6:87:81:68:bc:ce:2f:d0:83:0c:98:b7:3a:1e:ec:
                    bb:50:66:34:4e:b1:59:b7:ed:da:10:b3:3d:c6:97:
                    0b:53:5a:f9:c6:0f:59:15:18:ae:1f:9c:4b:e0:14:
                    b7:04:78:fb:fc:a4:6d:86:1c:65:b8:17:02:2b:46:
                    c8:75:77:d4:fd:10:95:31:cb:14:33:e8:dc:46:f9:
                    2f:05:25:0a:b5:93:1a:2f:5b:8a:52:b9:23:56:80:
                    4b:4b:ca:b8:0c:66:24:e9:95:64:f5:2e:1a:b4:81:
                    9d:67:06:96:a4:0d:68:35:ad:e4:de:0c:33:5a:68:
                    ba:4b:e1:4d:11:68:3c:8c:73:71:ab:9c:32:d8:8f:
                    73:9a:14:df:cf:8c:2b:75:01:eb:3d:dd:b2:f6:b8:
                    62:5c:3c:89:f6:0b:b7:6a:38:c4:4e:1b:91:1f:e9:
                    69:29:83:de:bb:b1:9a:3e:1a:0c:b7:e8:77:42:eb:
                    14:5d:d3:0f:98:0e:8a:95:ee:e4:9f:75:8e:83:40:
                    45:86:c2:c8:6f:73:e6:4c:5f:50:f0:50:06:eb:ee:
                    8a:89:d5:2a:d9:84:c7:39:a6:5f:1f:c2:2f:93:16:
                    4e:12:6d:5c:cc:b4:6a:e3:a5:60:0e:a9:27:9e:40:
                    bb:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:60:F4:FF:66:80:19:3F:B3:9E:E5:B2:CD:15:1B:8C:2D:49:8B:26
            X509v3 Authority Key Identifier:
                keyid:E8:6F:C9:F9:27:94:7A:A4:89:83:B0:27:CF:3D:E3:84:75:B0:53:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6G_J-SeUeqSJg7Anzz3jhHWwU9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bc9563-8ff9-4e95-8e7e-13b4c0d0aae1/1/w2D0_2aAGT-znuWyzRUbjC1JiyY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bc9563-8ff9-4e95-8e7e-13b4c0d0aae1/1/6G_J-SeUeqSJg7Anzz3jhHWwU9M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.247.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a8:97:45:1d:0f:fb:ca:56:76:06:61:2d:74:0d:31:f4:d7:3f:
         35:34:b2:3d:66:c6:36:23:c0:72:f0:ed:d9:78:31:56:eb:91:
         4d:81:5a:2f:bd:02:56:ee:e4:2b:fc:d3:49:55:5a:7f:78:2b:
         90:11:74:30:01:66:47:f0:61:5f:2f:25:15:cd:78:6a:be:93:
         a6:02:d2:50:64:82:f2:4a:78:bc:fb:79:20:e7:8e:17:da:8c:
         52:09:7f:3a:7b:ec:5f:2d:df:be:f3:4f:44:09:c4:ff:2f:f0:
         a1:e5:5e:36:01:43:36:b9:b0:97:4f:35:69:e0:e2:51:fd:f1:
         7d:e8:80:a7:e4:b1:35:84:05:08:4a:f7:27:16:e9:0f:11:1c:
         7d:c3:8b:ac:20:6e:ef:26:e1:d8:74:0c:34:ce:5b:c6:79:bb:
         7a:1e:ec:61:1c:c7:fb:4d:83:f3:fd:b4:03:d2:97:4c:70:95:
         b0:f4:6a:97:93:1a:6e:f1:da:4f:79:ca:07:b5:f3:09:a8:3e:
         fd:3b:cf:23:bc:6f:5a:df:6d:2c:fa:4e:fe:19:d8:27:31:67:
         e5:75:64:f3:a5:d0:0d:81:53:7a:69:d8:93:8d:3e:04:49:3e:
         b4:c2:71:b6:ce:8d:e7:78:7e:6a:8f:76:83:0f:89:21:19:3f:
         2f:6e:04:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:38 2024 by rpki-client on console-fra.rpki-client.org