Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/tbNuue1rGf02SNv9JAeOfJDYhgM.roa
File:                     tbNuue1rGf02SNv9JAeOfJDYhgM.roa (raw, json)
Hash identifier:          A/20dPJN2QoafTy4DLIjZXBR3iTe5MHDWbiocEb7LyI=
Subject key identifier:   B5:B3:6E:B9:ED:6B:19:FD:36:48:DB:FD:24:07:8E:7C:90:D8:86:03
Certificate issuer:       /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial:       0181CEA5EB6E237602949887D4DB2BF6F91C
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/tbNuue1rGf02SNv9JAeOfJDYhgM.roa
Signing time:             Tue 05 Jul 2022 13:56:29 +0000
ROA not before:           Tue 05 Jul 2022 13:56:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     7018
IP address blocks:        185.207.12.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:ce:a5:eb:6e:23:76:02:94:98:87:d4:db:2b:f6:f9:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
        Validity
            Not Before: Jul  5 13:56:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b5b36eb9ed6b19fd3648dbfd24078e7c90d88603
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:06:e1:fc:d0:9f:d4:9f:ad:a7:85:79:e7:2b:
                    fc:f1:f3:93:d6:79:11:d8:10:6b:a4:1a:24:d8:68:
                    aa:e1:3f:ba:52:fa:84:f5:3a:5e:83:4c:9d:55:f6:
                    05:16:7e:88:e9:c8:34:fb:fa:2b:89:3d:98:00:20:
                    8a:54:ea:f5:48:4c:ae:ee:a3:48:87:bc:71:70:a2:
                    b3:1c:96:5d:e2:0f:62:da:7d:41:05:ec:23:7a:03:
                    52:65:71:a1:f1:67:68:2b:dd:4c:81:43:f7:5b:e1:
                    bf:d1:ac:7b:52:ba:28:cb:d2:38:61:8d:11:af:68:
                    11:d8:28:1f:51:98:72:c7:c6:c3:31:35:8d:fc:3c:
                    bf:f9:07:5c:8b:c1:70:89:6f:8a:87:bd:c5:e6:e3:
                    3c:fe:98:94:d7:ff:24:d0:42:91:ef:92:5b:5c:98:
                    e9:85:4e:2e:ae:8f:e3:47:f7:c0:2d:99:3e:03:70:
                    f7:3f:fb:db:93:1f:10:58:29:e2:e3:22:80:af:ad:
                    36:2f:da:25:c5:d6:7d:64:5d:1a:b2:e8:3c:76:8f:
                    d0:24:b1:f9:55:44:da:3d:02:60:2a:62:85:4a:ff:
                    80:3c:c2:5c:87:77:c9:ad:06:15:89:c5:84:37:66:
                    e1:31:29:6c:f4:b7:be:b9:7b:dc:77:0d:76:8d:84:
                    a5:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:B3:6E:B9:ED:6B:19:FD:36:48:DB:FD:24:07:8E:7C:90:D8:86:03
            X509v3 Authority Key Identifier:
                keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/tbNuue1rGf02SNv9JAeOfJDYhgM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.207.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:87:5b:11:e7:b7:d5:db:57:db:0c:a1:9d:aa:ad:89:34:70:
         5b:b1:85:91:55:c7:1f:6e:a6:dd:7f:8c:4e:58:53:49:98:64:
         48:01:4f:67:a9:1c:8f:31:6d:d3:fd:03:1a:49:0a:3a:69:4b:
         83:8e:89:6e:5a:ef:83:2a:a1:e6:38:da:23:5a:0e:84:f7:bb:
         d8:7e:d2:db:80:34:79:77:61:af:56:d6:ff:16:2c:59:1f:08:
         0c:14:92:c5:ab:9d:b9:1b:b0:83:11:31:c6:77:3d:dc:fe:de:
         71:67:eb:96:b1:a0:89:0c:50:d6:dc:df:b7:ce:9c:7c:6a:05:
         da:46:74:43:f9:3f:99:22:f0:9e:b2:13:30:4b:05:03:57:c3:
         aa:e6:35:39:b8:0e:a4:26:c7:9b:be:3b:70:ec:51:a3:79:3e:
         df:6a:7e:b6:9f:54:77:53:c4:56:db:6d:57:27:e6:2c:5f:73:
         30:3a:f4:0c:9a:72:30:6b:7a:c8:e8:45:c7:8d:15:68:05:44:
         98:96:fa:19:00:f0:86:b2:43:d6:15:ac:e1:fb:29:0a:8c:44:
         17:55:b0:44:30:72:88:c2:62:a4:b0:77:f8:9e:2b:71:cd:3e:
         17:13:59:8b:46:c4:00:bc:8d:b6:1d:fe:64:a3:69:e9:a2:6a:
         75:89:33:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:45 2024 by rpki-client on console-ams.rpki-client.org