Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/vcMIXQ3CFXKM2Pt--BqRARWDXrQ.roa
File:                     vcMIXQ3CFXKM2Pt--BqRARWDXrQ.roa (raw, json)
Hash identifier:          89DtxaJCakjLc7U0InUMfc6k02Xh5qZtk6/4NRtP3Ik=
Subject key identifier:   BD:C3:08:5D:0D:C2:15:72:8C:D8:FB:7E:F8:1A:91:01:15:83:5E:B4
Certificate issuer:       /CN=b24cf9f6d034f46760f4f59b1739de127b8adff3
Certificate serial:       0183ED439182FC1808ED8A2C5728ACCCC9EB
Authority key identifier: B2:4C:F9:F6:D0:34:F4:67:60:F4:F5:9B:17:39:DE:12:7B:8A:DF:F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/skz59tA09Gdg9PWbFzneEnuK3_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/vcMIXQ3CFXKM2Pt--BqRARWDXrQ.roa
Signing time:             Tue 18 Oct 2022 22:42:51 +0000
ROA not before:           Tue 18 Oct 2022 22:42:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     13896
IP address blocks:        185.155.146.0/23 maxlen: 23
                          185.155.144.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:ed:43:91:82:fc:18:08:ed:8a:2c:57:28:ac:cc:c9:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b24cf9f6d034f46760f4f59b1739de127b8adff3
        Validity
            Not Before: Oct 18 22:42:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=bdc3085d0dc215728cd8fb7ef81a910115835eb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:db:66:a4:86:9e:6a:f3:f6:4a:1c:71:fa:60:
                    b8:00:10:69:48:aa:1d:57:d3:fa:9b:29:3a:3a:cf:
                    65:41:71:90:ce:3f:5a:58:2e:f9:86:6a:fb:7f:0c:
                    11:b3:ec:5b:e4:8c:0b:ef:56:cb:95:73:69:3c:75:
                    5c:4c:02:92:be:93:6c:65:23:4e:e5:f0:c4:90:f4:
                    90:a3:b6:ca:2d:d2:93:ee:64:dc:c2:5e:0a:00:4d:
                    4d:91:32:22:14:c8:71:81:48:c4:24:ee:6e:de:e5:
                    ec:4c:aa:82:33:de:52:ae:a0:fc:8c:e4:e6:bc:40:
                    ec:f7:81:67:41:e1:8b:c3:7e:46:3d:fe:b0:df:8e:
                    34:20:ba:38:bb:e4:42:14:5b:92:38:ee:88:c4:ce:
                    0f:01:22:ce:d9:49:9e:38:bd:1c:4d:a8:57:f2:4c:
                    1c:c2:68:8b:cd:35:7e:9f:3d:48:de:7e:d6:02:b0:
                    cf:f7:3a:63:82:27:73:0b:9b:7f:17:61:70:1c:da:
                    9e:8f:53:ed:c7:95:49:03:b7:90:6f:1b:a1:92:00:
                    92:6b:c0:73:d4:97:ee:a0:3f:41:27:79:e9:93:b0:
                    72:ca:f6:df:7b:24:c4:08:15:2c:dc:9e:32:4f:74:
                    eb:61:76:29:6d:30:4b:a3:5a:e5:85:c8:86:d6:41:
                    a2:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:C3:08:5D:0D:C2:15:72:8C:D8:FB:7E:F8:1A:91:01:15:83:5E:B4
            X509v3 Authority Key Identifier:
                keyid:B2:4C:F9:F6:D0:34:F4:67:60:F4:F5:9B:17:39:DE:12:7B:8A:DF:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/skz59tA09Gdg9PWbFzneEnuK3_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/vcMIXQ3CFXKM2Pt--BqRARWDXrQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.155.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:95:2b:73:f3:64:87:5a:9c:d3:4e:ee:57:f4:2e:fc:ee:47:
         a3:e7:de:11:2c:6c:20:22:fb:5d:d9:e8:30:a7:49:b5:b4:ef:
         73:f3:01:6b:d5:1c:dc:2c:9d:ba:4f:a4:50:f2:04:14:ce:d3:
         c6:4a:b0:e2:3c:87:16:c1:e1:86:27:2f:82:20:b7:28:a3:37:
         b1:9a:41:cb:bd:e5:53:70:34:40:6f:12:15:9a:3c:c4:a7:a9:
         14:36:04:e1:74:c1:ad:07:19:d4:80:2d:92:32:ca:1b:12:c5:
         e1:64:b2:a9:bc:03:d0:64:4a:a0:66:d0:d7:19:57:41:c6:39:
         94:cd:7e:b1:41:8d:15:60:fc:72:29:c2:6f:19:fa:61:c7:12:
         21:65:f9:2a:02:31:01:e3:d0:4c:07:01:44:67:bb:e0:49:80:
         0d:e5:f4:6e:14:62:51:fe:1e:fd:1f:31:d2:bc:44:ec:a6:f4:
         78:c2:2b:a7:c4:76:63:a9:b7:2c:64:e0:dc:5c:90:f4:ce:bc:
         e4:93:fc:a0:7c:a9:11:93:a9:37:c9:f3:a6:05:2b:82:5e:77:
         a8:99:52:b4:7b:89:9c:34:0a:6c:d4:48:3f:75:92:d7:00:7c:
         c9:83:46:2d:63:8c:da:cc:95:1d:a1:13:81:c2:6a:6e:c3:c0:
         93:f8:50:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:46 2024 by rpki-client on console-fra.rpki-client.org