Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/ci2ZLJHjNDltqRA3-jExsg9uFsA.roa
File:                     ci2ZLJHjNDltqRA3-jExsg9uFsA.roa (raw, json)
Hash identifier:          2Y3Sdq4IvMzeaPrA5uq9iMauYe+oguFr7/cGClBsxf4=
Subject key identifier:   72:2D:99:2C:91:E3:34:39:6D:A9:10:37:FA:31:31:B2:0F:6E:16:C0
Certificate issuer:       /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Certificate serial:       0BE2D820
Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/ci2ZLJHjNDltqRA3-jExsg9uFsA.roa
Signing time:             Mon 09 May 2022 22:51:16 +0000
ROA not before:           Mon 09 May 2022 22:51:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206119
IP address blocks:        185.169.180.0/24 maxlen: 24
                          45.133.37.0/24 maxlen: 24
                          45.133.36.0/24 maxlen: 24
                          45.133.38.0/24 maxlen: 24
                          185.174.21.0/24 maxlen: 24
                          185.174.20.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 199415840 (0xbe2d820)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
        Validity
            Not Before: May  9 22:51:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=722d992c91e334396da91037fa3131b20f6e16c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ce:06:8c:22:ab:1f:cb:88:75:13:3b:9e:89:
                    37:6e:ec:08:4c:45:be:92:2a:7b:59:93:41:ba:d6:
                    43:17:ae:8b:81:6f:65:c8:08:ec:01:bb:36:70:0e:
                    e4:c0:99:0c:4d:b9:d9:ce:0d:91:68:20:e8:3a:77:
                    0f:d7:fd:99:a5:cb:75:19:aa:91:3a:47:6b:70:2e:
                    c8:7c:c6:d3:a4:37:b9:fd:be:52:0a:10:e3:d6:6f:
                    27:62:e1:05:8a:1c:80:e8:c3:f0:d5:bc:ac:b7:24:
                    e2:a8:7e:e5:6b:9b:61:dc:22:05:50:15:52:78:64:
                    c4:86:20:9c:f3:a1:7f:b0:dd:42:d4:e0:48:c5:e0:
                    f2:6e:ca:d9:be:01:fa:d9:66:63:a5:a8:09:fe:d8:
                    4f:e3:77:ad:19:03:68:2e:de:24:7a:14:32:07:df:
                    04:76:f1:83:ea:63:09:26:d1:f4:4a:56:71:ac:84:
                    36:47:3d:f7:c6:88:fd:e1:49:1f:01:ef:08:9c:da:
                    90:ca:bd:c6:39:f3:1d:8b:7b:93:ef:6b:db:9c:81:
                    e6:69:9b:dd:58:15:b7:94:9d:73:d0:36:45:97:07:
                    9a:d9:a6:7b:39:d9:92:04:49:03:dc:25:ad:4e:40:
                    3e:7a:16:98:01:b3:df:2d:6c:5d:f1:b8:4e:a5:23:
                    89:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:2D:99:2C:91:E3:34:39:6D:A9:10:37:FA:31:31:B2:0F:6E:16:C0
            X509v3 Authority Key Identifier:
                keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/ci2ZLJHjNDltqRA3-jExsg9uFsA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.133.36.0-45.133.38.255
                  185.169.180.0/24
                  185.174.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c4:ad:50:de:21:ce:8d:f5:80:52:5b:ea:97:f6:e2:c9:65:05:
         21:f0:8e:42:5a:1e:3e:82:40:6a:6a:a1:ce:02:ff:f2:ad:31:
         90:b1:6a:c1:01:71:a6:bd:51:da:e4:cf:a1:6d:12:68:11:8c:
         cf:4b:8a:e7:a1:dc:3a:03:f7:a7:82:cb:03:02:6a:f3:ec:5a:
         1b:05:b4:d8:45:b6:c0:05:83:87:3b:fd:65:bc:81:90:15:f2:
         69:60:44:78:84:10:e1:4a:e1:1e:f9:6e:15:06:ed:6d:0f:12:
         73:94:92:8b:13:5a:a5:82:22:ed:13:62:2d:ae:cf:e1:8a:cd:
         3a:5b:10:8a:c3:65:28:99:bb:41:56:4b:44:96:82:4f:61:fc:
         61:98:49:87:77:99:09:92:e0:9d:18:80:68:1f:da:60:7f:3d:
         81:c0:c8:10:59:ae:75:f8:26:83:85:e2:73:d4:1a:e5:9d:7c:
         56:fc:6f:dd:84:df:85:6f:ff:5e:bf:c7:b9:77:27:c6:56:c7:
         cd:93:e6:9c:8a:26:34:11:2d:87:9d:e3:ab:87:2d:00:a6:0d:
         42:9f:a8:3d:5b:dc:80:bd:64:c1:cb:a2:f0:36:f1:23:22:2a:
         be:e6:0d:a2:43:51:9a:5e:60:fb:5b:fb:6a:d9:83:0c:ce:42:
         83:17:4d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:45 2024 by rpki-client on console-ams.rpki-client.org