Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/pvfefnFOBe1I-93IORpVNpwtV1Y.roa
File:                     pvfefnFOBe1I-93IORpVNpwtV1Y.roa (raw, json)
Hash identifier:          rhCht0BPw4c1UNjnc80Si9yb2VKd5qjRcYQ2eunJxJU=
Subject key identifier:   A6:F7:DE:7E:71:4E:05:ED:48:FB:DD:C8:39:1A:55:36:9C:2D:57:56
Certificate issuer:       /CN=042ac382689687b60fce5ce9db887b21d68a6abc
Certificate serial:       0752670A
Authority key identifier: 04:2A:C3:82:68:96:87:B6:0F:CE:5C:E9:DB:88:7B:21:D6:8A:6A:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/pvfefnFOBe1I-93IORpVNpwtV1Y.roa
Signing time:             Sat 01 Jan 2022 06:56:28 +0000
ROA not before:           Sat 01 Jan 2022 06:56:28 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     57152
IP address blocks:        185.226.92.0/24 maxlen: 24
                          185.226.95.0/24 maxlen: 24
                          185.226.94.0/24 maxlen: 24
                          185.226.93.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122840842 (0x752670a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=042ac382689687b60fce5ce9db887b21d68a6abc
        Validity
            Not Before: Jan  1 06:56:28 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a6f7de7e714e05ed48fbddc8391a55369c2d5756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a7:3c:ee:19:2b:4e:e0:ae:99:97:49:39:8e:
                    b4:71:9b:6c:0c:4f:d9:e3:26:53:93:39:b9:4c:b5:
                    11:6f:8f:96:7a:97:30:b8:98:c8:0e:3f:70:74:06:
                    47:00:32:21:51:79:7e:c4:c1:a3:36:0e:e8:b8:c9:
                    1b:32:98:fc:b2:9a:85:43:d1:69:9d:d5:4a:b6:2e:
                    3f:56:45:5c:5a:db:98:40:a9:6b:dd:9c:bd:70:35:
                    c9:52:83:69:8e:29:d0:86:4d:1d:9b:1d:d2:54:f6:
                    c3:16:09:03:06:a7:98:71:22:4b:28:12:38:2c:fd:
                    05:bb:b7:03:5d:dc:4c:ef:6d:d1:47:9e:d7:75:b7:
                    2b:7c:60:27:c7:06:ca:7d:52:43:13:5a:ad:e0:86:
                    30:79:11:15:94:77:f4:53:6f:2b:9a:9f:29:e5:09:
                    6c:b5:2f:18:f9:f4:c2:1b:fe:44:d7:4d:ea:93:6a:
                    0b:6e:c4:69:cb:f2:38:35:cf:2d:31:42:44:34:02:
                    6e:57:29:bb:ea:37:60:ca:73:3b:5f:8b:23:7d:3d:
                    61:16:12:25:fb:34:97:75:a5:b3:9b:0e:c1:2b:1d:
                    9b:cb:a4:07:6b:a0:83:5a:95:48:6f:ec:1a:46:3a:
                    18:60:fc:d3:fc:b2:dd:12:15:7d:6e:c0:a5:f7:e3:
                    1c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:F7:DE:7E:71:4E:05:ED:48:FB:DD:C8:39:1A:55:36:9C:2D:57:56
            X509v3 Authority Key Identifier:
                keyid:04:2A:C3:82:68:96:87:B6:0F:CE:5C:E9:DB:88:7B:21:D6:8A:6A:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/pvfefnFOBe1I-93IORpVNpwtV1Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.226.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:7d:39:c6:9a:17:68:dc:bd:4d:04:18:aa:8b:c8:38:c1:2c:
         4c:2e:60:89:32:52:01:ec:e8:67:5e:2c:39:a9:7b:8f:43:56:
         29:c4:73:77:64:ac:d1:1e:25:c8:53:f4:5a:45:33:44:12:11:
         67:d7:32:be:b6:70:04:c1:62:60:21:57:8e:bf:16:46:a1:9a:
         68:4d:b4:65:28:12:5d:cf:f3:e8:42:aa:77:f2:34:fa:ad:cc:
         c1:d4:09:a5:a1:8b:37:1a:24:e1:f3:09:ee:b4:04:f7:f2:b5:
         5b:5c:01:bd:55:65:6a:e5:af:2b:51:75:b2:5e:6a:60:db:c2:
         ad:a6:8e:31:b3:7b:a9:71:40:af:ac:f5:7a:06:7b:a1:d3:85:
         9d:ff:93:4a:f8:53:62:a7:82:49:0e:55:a7:1a:c0:48:59:d0:
         8a:a2:f0:cb:b9:a0:80:20:82:14:9b:ba:6e:a0:d4:fe:1c:79:
         57:d8:c8:f3:f7:46:d5:8e:c8:5e:bc:f1:71:db:99:b2:c0:5f:
         40:c6:87:bc:29:22:f0:52:c5:d9:8c:13:27:0e:94:a6:29:94:
         53:4c:f0:2c:9a:fe:7f:da:8c:00:7d:a2:6f:48:8c:71:56:81:
         19:97:48:94:64:8a:f0:47:0a:c4:20:e1:c1:d8:31:f5:cd:64:
         b6:22:ed:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:39 2024 by rpki-client on console-ams.rpki-client.org