Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/_wd6uas3ja88gD8j0XPuk9ULRHM.roa
File:                     _wd6uas3ja88gD8j0XPuk9ULRHM.roa (raw, json)
Hash identifier:          oc73PJsNPkrih4LdNPbw42F+NGeLEQGdxdnQcCGa1cc=
Subject key identifier:   FF:07:7A:B9:AB:37:8D:AF:3C:80:3F:23:D1:73:EE:93:D5:0B:44:73
Certificate issuer:       /CN=5324defbaade93e998e13a942029dd593b8b2ea3
Certificate serial:       1A29F03F
Authority key identifier: 53:24:DE:FB:AA:DE:93:E9:98:E1:3A:94:20:29:DD:59:3B:8B:2E:A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UyTe-6rek-mY4TqUICndWTuLLqM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/_wd6uas3ja88gD8j0XPuk9ULRHM.roa
Signing time:             Sat 01 Jan 2022 12:55:14 +0000
ROA not before:           Sat 01 Jan 2022 12:55:14 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     7018
IP address blocks:        185.212.175.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 438956095 (0x1a29f03f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5324defbaade93e998e13a942029dd593b8b2ea3
        Validity
            Not Before: Jan  1 12:55:14 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ff077ab9ab378daf3c803f23d173ee93d50b4473
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:14:c2:08:fa:b3:d8:90:73:ff:a1:e8:48:d3:
                    86:9d:21:d9:49:56:92:0d:45:93:26:6d:a8:41:f3:
                    d0:b2:47:08:18:fd:f9:c8:b6:07:0f:71:44:1e:09:
                    e3:3f:6d:72:04:88:fe:64:1f:6d:2e:60:5b:0a:4a:
                    72:1d:2e:55:0d:10:63:54:5e:c0:d9:50:b6:9f:66:
                    c0:b5:e1:2e:71:37:de:fe:3e:07:16:3f:e6:c3:cd:
                    cd:be:48:17:90:58:d6:5a:9f:16:fe:9a:73:27:1c:
                    6b:ae:52:4e:28:ba:89:56:bc:e6:96:34:55:bf:38:
                    31:df:c1:c9:45:bd:c1:e4:f6:2a:77:7c:3b:15:de:
                    01:f8:f4:2e:f8:38:aa:50:41:46:1b:ba:69:a6:a8:
                    26:27:bb:8e:5f:ca:b2:9b:06:7c:0f:ec:70:a5:23:
                    c5:d3:8d:19:9f:46:4f:e5:78:42:82:76:da:c5:b3:
                    8f:f2:b4:e1:20:b7:fa:f0:c6:f9:e0:d5:f8:ec:e8:
                    4e:af:cd:32:e0:41:1b:50:38:c2:f6:21:3b:93:27:
                    19:5e:c0:9a:c2:7f:cb:25:cc:fc:99:ad:8d:85:77:
                    74:de:8b:85:c0:b6:02:b2:e7:f4:e9:64:ef:04:85:
                    15:ba:00:c7:4c:8d:3e:52:3e:26:fc:15:b7:a2:3c:
                    53:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:07:7A:B9:AB:37:8D:AF:3C:80:3F:23:D1:73:EE:93:D5:0B:44:73
            X509v3 Authority Key Identifier:
                keyid:53:24:DE:FB:AA:DE:93:E9:98:E1:3A:94:20:29:DD:59:3B:8B:2E:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UyTe-6rek-mY4TqUICndWTuLLqM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/_wd6uas3ja88gD8j0XPuk9ULRHM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/UyTe-6rek-mY4TqUICndWTuLLqM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.212.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:b6:8c:46:62:d8:24:33:db:a3:24:e6:e0:49:db:83:30:7c:
         0f:90:e8:14:f7:cc:ed:84:11:c4:c0:9e:9e:a7:44:e3:94:ca:
         27:ed:a5:38:c8:a7:af:09:17:e3:31:6c:22:f0:e8:ec:5f:b6:
         a7:46:0f:b4:f9:fa:02:65:8e:00:a6:76:85:27:2c:30:10:0a:
         7a:10:4c:c1:1b:0d:ee:98:bd:41:a6:ea:51:80:a2:2d:52:9e:
         76:81:5b:04:e4:d2:3d:11:a9:25:51:b6:3b:ff:db:00:d3:e7:
         4d:48:74:d3:41:37:0e:3e:0f:a0:c1:d3:52:29:10:c1:9c:4f:
         d6:4c:dd:35:4e:82:c2:70:15:6d:85:f4:80:bc:c4:ce:2f:12:
         9f:a1:65:8d:4f:c0:aa:da:71:4a:c5:6e:5b:e3:09:5f:97:43:
         bc:e2:3d:b8:c2:32:36:86:46:4b:a7:8d:4d:ba:67:1d:57:61:
         24:da:c7:03:47:35:c1:9f:ab:54:fb:9a:96:d7:a8:1d:ac:89:
         f4:e2:d6:27:f4:cd:77:5b:89:1f:63:58:30:71:06:ea:10:06:
         d9:7f:52:77:9f:23:41:df:7f:43:66:4c:e2:5b:9c:3b:85:80:
         d2:c8:59:81:c4:2b:7a:68:ae:e3:98:63:61:ee:51:c5:41:84:
         01:04:e2:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:19 2024 by rpki-client on console-fra.rpki-client.org