Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/AnU4NwnW1wJyyMhW_RWjoL9uY0g.roa
File:                     AnU4NwnW1wJyyMhW_RWjoL9uY0g.roa (raw, json)
Hash identifier:          kPX9nryEfD1sTH19dJfyEy/Kvyic+hlKUIksexroyPw=
Subject key identifier:   02:75:38:37:09:D6:D7:02:72:C8:C8:56:FD:15:A3:A0:BF:6E:63:48
Certificate issuer:       /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial:       09346649
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/AnU4NwnW1wJyyMhW_RWjoL9uY0g.roa
Signing time:             Sat 01 Jan 2022 05:55:30 +0000
ROA not before:           Sat 01 Jan 2022 05:55:30 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211939
IP address blocks:        185.13.159.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 154429001 (0x9346649)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
        Validity
            Not Before: Jan  1 05:55:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0275383709d6d70272c8c856fd15a3a0bf6e6348
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:57:2b:98:83:6d:70:07:13:b4:3e:af:c1:0a:
                    e1:57:db:31:0b:57:35:17:f8:fe:50:3e:f9:1d:cf:
                    23:39:f7:56:f5:11:76:43:d3:b0:32:37:bf:2a:cb:
                    38:56:00:ef:e7:95:3c:08:68:a6:41:94:08:bd:bd:
                    0b:65:09:85:64:32:3f:ad:4c:10:30:e9:73:e2:7f:
                    e7:7f:28:0b:d2:d7:73:45:22:7e:d5:12:c6:ce:6a:
                    c6:12:3e:e8:71:1f:90:96:9d:ef:13:d5:26:0c:33:
                    aa:64:8c:ab:64:0b:47:b4:49:c3:af:d2:59:0f:c3:
                    98:d3:e6:e6:12:21:e2:64:6e:8b:03:d4:68:ce:94:
                    ee:73:96:77:84:ac:11:4a:c5:d7:10:0c:a0:49:22:
                    d9:60:17:58:04:7a:1c:46:3b:80:c3:37:5f:ae:9c:
                    45:ef:f6:0a:13:7b:c1:8e:a3:a4:8a:8e:13:9c:fc:
                    83:29:2b:67:eb:4e:a0:f1:ce:20:76:fc:c2:20:91:
                    9f:75:46:f5:8f:7a:a8:1a:31:b3:4d:26:58:bc:66:
                    96:90:d4:d0:e5:3f:60:f6:08:42:2a:09:70:ae:c5:
                    70:f8:91:49:00:dc:62:b7:5c:b2:dc:cf:4a:b0:98:
                    8b:f9:74:3e:4a:8a:ef:a8:be:86:ce:c0:a6:06:ee:
                    aa:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:75:38:37:09:D6:D7:02:72:C8:C8:56:FD:15:A3:A0:BF:6E:63:48
            X509v3 Authority Key Identifier:
                keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/AnU4NwnW1wJyyMhW_RWjoL9uY0g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.13.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:7c:70:93:b9:92:5f:2d:09:0e:dc:90:b5:3b:52:30:1d:54:
         1b:84:e0:77:c2:c5:b5:ab:a6:c4:8b:99:94:de:bd:6f:a6:f4:
         2e:87:42:c3:a5:01:2d:ea:2a:10:10:e7:4e:14:ad:e5:b6:79:
         f5:b4:76:c6:1a:78:bc:d6:70:ff:48:14:29:b8:4b:dd:85:58:
         08:b3:81:52:5b:ea:7c:16:15:40:b4:ad:8b:87:da:eb:ba:96:
         5f:d7:00:9e:0f:a8:b1:d9:af:70:dc:0b:3a:4f:2a:44:e7:6b:
         7a:e6:bd:28:21:ca:a6:0e:2e:eb:42:d6:b5:d5:dd:03:52:8e:
         d6:8d:bf:c4:aa:8d:98:07:31:cc:d6:32:96:16:1d:87:ba:c7:
         87:21:a8:de:fb:68:d2:ec:9e:28:9d:6e:77:f4:53:7e:ef:16:
         b8:1f:42:45:e7:31:eb:3d:c4:17:bc:f2:f2:19:25:5d:ad:83:
         c2:5d:3f:f6:a9:1f:1e:cd:9a:48:45:cd:4b:9e:5b:b3:39:31:
         4d:82:2d:4b:db:33:3d:1f:ae:a8:17:91:c9:69:ff:49:20:3e:
         cb:c0:ed:5c:bd:02:be:8d:e9:ea:4c:35:95:a8:21:cf:65:64:
         ba:9c:99:46:46:5b:78:2b:9f:67:5a:cc:66:a6:cb:4b:54:ef:
         2b:e1:3e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:30 2024 by rpki-client on console-fra.rpki-client.org