Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/jMPY2-ufPcStrz5YkP3hrmRa0x4.roa
File:                     jMPY2-ufPcStrz5YkP3hrmRa0x4.roa (raw, json)
Hash identifier:          WEKhSeRMtMAat0/YN89Ym/Vfd2Cf6k+8GL0laGXCu34=
Subject key identifier:   8C:C3:D8:DB:EB:9F:3D:C4:AD:AF:3E:58:90:FD:E1:AE:64:5A:D3:1E
Certificate issuer:       /CN=042ac382689687b60fce5ce9db887b21d68a6abc
Certificate serial:       018382F4DF06341CAC11B655AF1370BFECAB
Authority key identifier: 04:2A:C3:82:68:96:87:B6:0F:CE:5C:E9:DB:88:7B:21:D6:8A:6A:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/jMPY2-ufPcStrz5YkP3hrmRa0x4.roa
Signing time:             Wed 28 Sep 2022 07:17:09 +0000
ROA not before:           Wed 28 Sep 2022 07:17:09 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     205196
IP address blocks:        185.226.93.0/24 maxlen: 24
                          185.226.94.0/24 maxlen: 24
                          185.226.92.0/24 maxlen: 24
                          185.226.95.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:82:f4:df:06:34:1c:ac:11:b6:55:af:13:70:bf:ec:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=042ac382689687b60fce5ce9db887b21d68a6abc
        Validity
            Not Before: Sep 28 07:17:09 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8cc3d8dbeb9f3dc4adaf3e5890fde1ae645ad31e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ab:a7:be:77:0a:14:38:cb:2a:d7:26:18:80:
                    13:af:2c:c0:f5:0d:12:1e:a4:d9:6b:5d:60:3f:08:
                    cf:1b:75:bb:99:c9:3b:8f:d2:c3:37:74:c7:40:4b:
                    68:da:c5:60:61:bf:0f:de:0f:eb:ce:62:9b:a5:36:
                    8e:a6:8b:85:85:bb:fe:f0:fa:88:44:4c:f5:02:a1:
                    8a:49:58:d3:e1:09:eb:8d:10:46:4a:74:06:2c:35:
                    59:0c:a5:8e:1a:c7:d5:02:68:ae:54:16:f5:f6:d2:
                    5c:b1:e8:cb:60:1b:fc:69:4e:0a:65:31:e2:de:c6:
                    64:76:47:8b:d2:45:54:f8:4e:d1:a9:07:b1:27:34:
                    0a:a3:30:5d:32:5a:bf:d3:9f:37:05:e7:c9:5f:a4:
                    e4:58:55:6c:28:86:66:a8:93:1f:1d:ab:8f:a3:16:
                    40:48:41:06:f6:94:fc:86:b8:c0:79:b0:4e:90:47:
                    bd:a3:89:93:68:0c:2c:91:c7:d5:24:f6:78:6e:18:
                    ca:d9:43:1b:f4:8f:63:a0:27:01:75:de:a1:d4:09:
                    3f:bb:e8:a4:bd:90:40:78:b0:6d:42:20:ea:59:0d:
                    f2:ab:1a:a0:3d:f4:52:1f:1e:34:6b:8f:84:1c:bb:
                    69:04:2b:25:90:bd:36:69:58:f1:89:58:3f:0e:67:
                    09:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:C3:D8:DB:EB:9F:3D:C4:AD:AF:3E:58:90:FD:E1:AE:64:5A:D3:1E
            X509v3 Authority Key Identifier:
                keyid:04:2A:C3:82:68:96:87:B6:0F:CE:5C:E9:DB:88:7B:21:D6:8A:6A:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/jMPY2-ufPcStrz5YkP3hrmRa0x4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.226.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:40:09:7a:8c:a2:a5:de:01:83:d6:80:8e:6b:21:ef:4d:30:
         0b:bb:40:60:66:c2:0a:b3:df:83:7c:9a:32:e0:ce:97:c3:f7:
         2a:83:7b:ab:7d:c8:53:c6:c9:ec:86:79:6c:e8:db:86:50:86:
         f9:87:c4:87:bc:71:1b:66:1e:fb:4f:f4:f9:fb:65:21:2e:c8:
         35:37:8b:f7:fa:6f:c6:e1:b1:0e:10:ed:27:95:1e:71:9a:9f:
         11:29:b7:7e:f8:28:6d:8f:6e:1d:48:8f:90:d1:3a:2f:33:36:
         e6:b0:fd:bc:1a:a8:3f:d2:5b:e1:ac:0d:92:54:9d:ca:76:ad:
         30:82:e9:02:0d:07:86:c7:79:6b:20:06:4e:ab:af:d3:fe:1f:
         7a:00:91:74:0a:5c:1e:60:71:d2:8d:2e:96:ab:77:e5:e7:be:
         b1:26:0b:f8:65:0b:24:70:59:79:95:20:4d:cd:76:92:57:dd:
         c8:94:22:d0:a3:b9:b4:21:44:cc:f0:84:ef:29:52:14:73:8f:
         09:31:48:77:4a:8a:f1:29:d6:5c:5f:e7:44:7b:f9:c1:b1:e6:
         b4:9e:1f:64:43:3e:94:60:1f:2c:c0:54:82:e5:91:d1:d6:8d:
         76:e1:91:cc:e9:4c:7e:f2:01:16:0f:6e:74:c6:36:4e:ae:11:
         8d:81:1a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:39 2024 by rpki-client on console-ams.rpki-client.org