Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/eba747-4ddc-4249-8ad2-7f8cb85ffdb6/1/3LJFMBy-9NZWWLo5yPTXvk5kTT4.roa
File:                     3LJFMBy-9NZWWLo5yPTXvk5kTT4.roa (raw, json)
Hash identifier:          jXS3eH62KSjG6M+Flk+kIWHpNz51fiUml/Fcxxa7VzY=
Subject key identifier:   DC:B2:45:30:1C:BE:F4:D6:56:58:BA:39:C8:F4:D7:BE:4E:64:4D:3E
Certificate issuer:       /CN=c3a55281ef84bb111e33ecc7c0088948fd4a8db2
Certificate serial:       1C605FC7
Authority key identifier: C3:A5:52:81:EF:84:BB:11:1E:33:EC:C7:C0:08:89:48:FD:4A:8D:B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w6VSge-EuxEeM-zHwAiJSP1KjbI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/eba747-4ddc-4249-8ad2-7f8cb85ffdb6/1/3LJFMBy-9NZWWLo5yPTXvk5kTT4.roa
Signing time:             Sat 01 Jan 2022 04:58:07 +0000
ROA not before:           Sat 01 Jan 2022 04:58:07 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     42160
IP address blocks:        185.19.180.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 476078023 (0x1c605fc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3a55281ef84bb111e33ecc7c0088948fd4a8db2
        Validity
            Not Before: Jan  1 04:58:07 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=dcb245301cbef4d65658ba39c8f4d7be4e644d3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7f:8b:55:57:f6:ef:08:07:a6:c4:95:72:72:
                    dc:88:b8:4a:1c:d1:8e:e9:73:e2:97:0d:2d:e1:82:
                    a2:d5:54:cf:2d:2e:5f:da:6d:15:5e:65:19:e4:b2:
                    19:bb:bc:fd:74:3d:03:5d:92:38:fd:68:1b:83:04:
                    2b:29:c0:55:c5:fe:18:14:e3:d7:01:68:06:ae:aa:
                    69:d2:74:93:01:20:c0:69:eb:0e:4c:2b:18:97:e2:
                    42:50:3b:42:a3:99:43:34:11:f3:f4:24:28:13:6b:
                    6d:ef:ff:4b:f4:ef:9c:d7:86:b2:10:a4:76:93:8f:
                    8a:77:4a:4d:2e:3b:40:3e:c2:42:d2:e8:5a:8a:8e:
                    4d:00:70:2e:88:b7:55:6d:f0:f4:64:8b:2d:c0:30:
                    fa:50:d0:d1:6b:27:5e:26:b8:b2:7a:4c:8a:f2:fd:
                    d0:0b:1a:0a:af:e4:37:06:fc:10:6d:18:45:41:29:
                    2b:45:16:32:a8:74:71:f0:0a:b0:5f:41:09:31:11:
                    22:21:ad:cc:7b:bf:89:e5:f8:05:92:e5:c8:7d:e6:
                    b0:10:22:c0:77:61:a2:46:40:5b:1f:7b:e8:a8:30:
                    44:d6:b5:c7:de:b3:2a:0d:f0:a4:f4:e8:87:4e:ee:
                    76:83:48:28:51:1d:ec:63:9b:64:1c:4a:19:ae:64:
                    7c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:B2:45:30:1C:BE:F4:D6:56:58:BA:39:C8:F4:D7:BE:4E:64:4D:3E
            X509v3 Authority Key Identifier:
                keyid:C3:A5:52:81:EF:84:BB:11:1E:33:EC:C7:C0:08:89:48:FD:4A:8D:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6VSge-EuxEeM-zHwAiJSP1KjbI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/eba747-4ddc-4249-8ad2-7f8cb85ffdb6/1/3LJFMBy-9NZWWLo5yPTXvk5kTT4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/eba747-4ddc-4249-8ad2-7f8cb85ffdb6/1/w6VSge-EuxEeM-zHwAiJSP1KjbI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.19.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:3d:e6:16:4f:7c:23:3e:b8:10:81:76:b4:4a:2d:fd:94:50:
         e1:4e:d8:8d:36:6c:f6:07:b1:44:28:f9:73:3d:93:ea:6c:67:
         3f:fb:cd:03:04:a1:20:60:c4:c2:92:bb:79:44:8e:3c:99:57:
         e4:ac:c1:b0:fb:37:00:90:74:da:ca:ec:94:14:a8:b4:98:85:
         6e:d2:66:7f:b4:27:ce:9f:cb:0a:1c:c4:0a:08:37:4b:e8:7d:
         2d:f3:52:48:d7:96:b5:25:d0:53:74:25:e8:49:be:9e:5e:16:
         2c:2a:4b:a0:c2:52:a7:26:92:5c:26:fe:73:c6:1f:89:54:ab:
         65:c8:a9:83:62:99:67:58:e4:86:1d:9b:73:53:f1:67:ec:31:
         fe:12:43:31:9e:f8:c7:be:cd:2d:7f:fe:7b:d8:51:56:88:14:
         70:12:d6:0d:f3:96:2f:70:cf:d1:a1:11:a2:0d:26:87:ef:75:
         d8:20:f0:ec:6b:b5:42:c1:81:1d:d1:20:25:e9:fe:79:98:29:
         d3:64:97:54:65:e7:fb:b8:4a:92:90:a1:d6:e9:d8:e7:ba:2c:
         c3:82:42:82:2e:b7:b4:b4:cd:a1:3f:78:0b:0e:7e:25:d4:5e:
         20:5e:6c:ea:65:5c:02:88:e4:81:31:d0:1e:12:61:29:7e:d0:
         f2:a5:06:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:27 2024 by rpki-client on console-ams.rpki-client.org