Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c6eb97-48e8-4e5b-97cd-d5d8e04e5975/1/1-OtS5cczxP_iFiuryFdfLe4SInc.roa
File:                     1-OtS5cczxP_iFiuryFdfLe4SInc.roa (raw, json)
Hash identifier:          Yxzqqmv2SYK/m4RbTb5yO3ywFNvx/Xvd72AiztIyygI=
Subject key identifier:   F8:EB:52:E5:C7:33:C4:FF:E2:16:2B:AB:C8:57:5F:2D:EE:12:22:77
Certificate issuer:       /CN=15bd7f78b7a044ae134c88b624e831a761143b79
Certificate serial:       178D22F0
Authority key identifier: 15:BD:7F:78:B7:A0:44:AE:13:4C:88:B6:24:E8:31:A7:61:14:3B:79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fb1_eLegRK4TTIi2JOgxp2EUO3k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/c6eb97-48e8-4e5b-97cd-d5d8e04e5975/1/1-OtS5cczxP_iFiuryFdfLe4SInc.roa
Signing time:             Sat 01 Jan 2022 02:01:09 +0000
ROA not before:           Sat 01 Jan 2022 02:01:09 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203618
IP address blocks:        185.92.231.0/24 maxlen: 24
                          185.92.230.0/24 maxlen: 24
                          185.92.230.0/23 maxlen: 23
                          2a03:8d60::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 395125488 (0x178d22f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15bd7f78b7a044ae134c88b624e831a761143b79
        Validity
            Not Before: Jan  1 02:01:09 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f8eb52e5c733c4ffe2162babc8575f2dee122277
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f2:fe:6a:2c:68:7b:64:5d:dd:43:dc:8c:4b:
                    4d:33:d4:dc:bb:b4:e1:41:40:9e:3d:47:a8:56:df:
                    57:3f:9d:7d:d9:4b:fe:3c:86:62:58:e3:e1:93:77:
                    b9:35:49:c2:b2:87:85:7c:10:94:1b:83:f3:e4:72:
                    57:f5:27:8b:51:03:03:2a:e5:bb:55:de:53:b9:0a:
                    22:c3:98:4b:74:98:d5:3f:e6:39:80:9e:4c:cc:63:
                    fc:b6:c6:51:f8:81:f4:0f:f6:9b:f0:ac:3b:d3:da:
                    7e:31:98:41:0b:a7:e0:ef:24:71:bd:69:e8:40:fb:
                    0f:4a:31:0c:a4:93:d2:be:31:c9:6f:39:1b:45:6c:
                    0a:a7:e1:70:d2:ab:41:11:15:38:85:4e:c0:40:06:
                    a2:48:a0:37:c4:dc:36:59:d7:16:0b:f0:fe:39:44:
                    7b:44:34:79:3d:5b:57:1c:12:40:2c:42:00:4f:ea:
                    27:d1:d6:85:6a:2a:6f:ab:57:bc:d4:86:92:56:c5:
                    12:e7:b7:99:8c:c8:84:c7:56:0d:14:7c:a2:33:6b:
                    08:3a:a5:c1:70:f6:fb:b7:93:eb:37:61:01:ab:01:
                    12:9d:ec:21:f9:8e:e9:13:34:1d:13:e6:3a:13:20:
                    2f:f4:46:f6:f1:94:54:d1:98:b1:6d:19:4f:23:f8:
                    a0:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:EB:52:E5:C7:33:C4:FF:E2:16:2B:AB:C8:57:5F:2D:EE:12:22:77
            X509v3 Authority Key Identifier:
                keyid:15:BD:7F:78:B7:A0:44:AE:13:4C:88:B6:24:E8:31:A7:61:14:3B:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fb1_eLegRK4TTIi2JOgxp2EUO3k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c6eb97-48e8-4e5b-97cd-d5d8e04e5975/1/1-OtS5cczxP_iFiuryFdfLe4SInc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c6eb97-48e8-4e5b-97cd-d5d8e04e5975/1/Fb1_eLegRK4TTIi2JOgxp2EUO3k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.92.230.0/23
                IPv6:
                  2a03:8d60::/48

    Signature Algorithm: sha256WithRSAEncryption
         d1:98:c1:9b:ad:ef:48:0a:d8:a6:3f:4a:a8:7b:76:97:87:1a:
         8e:8d:c6:3f:bb:5f:fc:99:2f:29:a0:92:86:49:28:d8:fb:56:
         c9:fc:73:c9:16:c3:42:05:67:0a:4d:75:c8:3d:40:35:67:3f:
         b2:ba:cd:06:d0:82:93:c1:23:db:32:e0:fa:25:18:89:0a:b8:
         62:f0:05:22:58:78:b4:e2:73:90:18:02:f0:dd:87:70:4a:28:
         a2:a3:79:6f:4a:c1:2c:de:00:91:ac:99:b4:98:dd:d7:a6:43:
         b3:f8:f4:24:3e:8d:20:e0:6c:c2:ee:dc:2b:6d:a3:7e:53:ab:
         5c:ae:17:0d:99:59:42:ea:e1:69:a1:6b:a4:5e:31:ce:ce:6c:
         33:65:13:5e:58:08:af:7d:91:75:07:b3:97:4c:21:94:82:24:
         f0:a5:17:9c:c9:6c:71:8f:2a:2a:0b:91:b9:5e:a9:3f:a4:89:
         34:a0:02:ec:bd:98:50:9c:88:9a:5d:f2:f6:27:a0:df:c5:54:
         20:48:1d:85:13:7d:ab:15:78:f3:91:81:44:ac:ed:43:c9:f8:
         bf:25:43:1e:02:83:1e:38:c7:90:36:22:3c:d2:7a:76:03:48:
         c2:99:0e:b7:18:fc:29:b9:49:86:4d:9c:f0:6a:e3:b7:4f:34:
         a3:f5:34:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:26 2024 by rpki-client on console-ams.rpki-client.org