Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/JqSt9GO7bDSrLJVr7DdRUyAuHsc.roa
File:                     JqSt9GO7bDSrLJVr7DdRUyAuHsc.roa (raw, json)
Hash identifier:          /QBvj6ky8h+9xEULxZb4PY0PWKwpGXW4tK4XnbsZObw=
Subject key identifier:   26:A4:AD:F4:63:BB:6C:34:AB:2C:95:6B:EC:37:51:53:20:2E:1E:C7
Certificate issuer:       /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial:       35C4D7AB
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/JqSt9GO7bDSrLJVr7DdRUyAuHsc.roa
Signing time:             Mon 04 Jul 2022 20:31:25 +0000
ROA not before:           Mon 04 Jul 2022 20:31:25 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     147293
IP address blocks:        185.84.162.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 902092715 (0x35c4d7ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
        Validity
            Not Before: Jul  4 20:31:25 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=26a4adf463bb6c34ab2c956bec375153202e1ec7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:10:a3:ff:bf:40:f7:05:02:16:41:53:fa:10:
                    94:b0:02:7c:d4:86:a6:93:68:ac:2e:c7:34:69:a4:
                    2f:08:38:19:7a:a9:1d:79:05:b2:33:b9:75:a6:d9:
                    1e:64:e0:d2:a9:2c:98:74:65:55:5c:a8:a1:22:0b:
                    6d:33:f0:0c:e7:2a:d0:1d:9b:cd:27:1c:cb:0c:83:
                    d2:5c:b5:9a:19:ac:4d:4a:c9:7e:f1:59:fc:c8:48:
                    a7:07:c7:b9:c0:df:c5:48:9f:11:b3:96:5c:ff:6d:
                    0e:35:89:96:c2:d9:39:20:36:a3:97:a7:c6:be:f6:
                    74:aa:b9:a4:b0:c5:cf:45:8b:09:c6:ad:ae:5e:e6:
                    8c:8c:72:e9:2f:6e:36:2b:87:58:ad:35:96:ca:a6:
                    e2:58:0e:56:bc:82:9f:1e:a4:9b:17:b7:c2:06:ea:
                    bb:23:e9:16:6f:bc:57:8f:b6:b6:08:fd:2b:2e:87:
                    95:4d:19:2f:07:60:b2:6a:84:13:86:a9:38:92:b2:
                    c1:b2:22:d7:d9:a7:89:bb:1e:bd:cc:1c:6b:25:16:
                    5b:cd:5a:9f:fa:89:37:f7:c5:12:06:c5:bb:4d:e8:
                    1a:f5:78:00:81:0e:cd:bf:2e:28:a8:d4:08:52:d6:
                    ce:39:a7:0a:98:80:3d:a6:1a:ea:bc:d8:fa:ea:05:
                    9d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:A4:AD:F4:63:BB:6C:34:AB:2C:95:6B:EC:37:51:53:20:2E:1E:C7
            X509v3 Authority Key Identifier:
                keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/JqSt9GO7bDSrLJVr7DdRUyAuHsc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.84.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:6b:3d:1c:b2:16:da:33:a4:8d:42:2d:19:d9:aa:ef:9b:3f:
         a7:e6:8f:c0:69:49:3c:4c:59:d7:45:1a:a7:1d:59:ef:55:e1:
         21:9a:ca:a7:c3:8d:5c:f2:05:64:39:49:bc:2b:51:ab:f6:86:
         cb:35:76:96:43:e3:55:14:a3:df:54:4e:f5:ae:b5:e3:f3:6c:
         f6:d9:4f:9f:19:6a:37:31:f8:95:03:34:3a:8a:8b:24:dd:00:
         22:e4:bd:f7:2f:0f:08:cb:fb:5e:01:85:1a:50:f8:ea:09:79:
         fb:fa:71:ee:7e:94:7c:1b:3a:bc:88:09:d4:e1:0c:45:d1:06:
         e1:9d:50:0f:cf:1b:1f:31:d6:26:aa:8a:79:0d:84:a8:c5:60:
         45:9c:a5:9d:cd:17:cf:dd:d5:96:15:26:6b:bb:9e:50:e1:80:
         ee:e9:8c:de:43:37:f7:3e:64:60:5b:cb:0c:e9:6e:6f:17:90:
         33:5f:d7:6e:2a:23:44:cc:05:24:aa:6b:70:db:fa:0f:18:a6:
         a3:0a:7c:6c:7e:07:a9:f7:27:04:13:ac:52:55:5a:e0:c7:fc:
         2c:3c:b9:42:94:23:0d:c9:33:58:79:1b:b0:3d:51:ab:6f:c8:
         0c:3f:51:8a:e8:3e:29:f7:9e:26:53:05:d3:df:fd:e2:cc:e4:
         fa:29:98:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:01 2023 by rpki-client on console-ams.rpki-client.org