Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/6GdyiYXpdC-YajyCH3JRHxYZqME.roa
File:                     6GdyiYXpdC-YajyCH3JRHxYZqME.roa (raw, json)
Hash identifier:          ucMExjsVNCgfVRmb0d/C9m5qKy89pgEfyPp4FdVXSzo=
Subject key identifier:   E8:67:72:89:85:E9:74:2F:98:6A:3C:82:1F:72:51:1F:16:19:A8:C1
Certificate issuer:       /CN=9e55320077696944b1613c2e8c9c606a1e06eb79
Certificate serial:       0A22EA6A
Authority key identifier: 9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/6GdyiYXpdC-YajyCH3JRHxYZqME.roa
Signing time:             Sat 01 Jan 2022 11:56:13 +0000
ROA not before:           Sat 01 Jan 2022 11:56:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     51814
IP address blocks:        185.107.133.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 170060394 (0xa22ea6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e55320077696944b1613c2e8c9c606a1e06eb79
        Validity
            Not Before: Jan  1 11:56:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e867728985e9742f986a3c821f72511f1619a8c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6d:5c:bd:42:ee:23:84:62:c2:10:8c:3a:a3:
                    4a:43:fa:0e:e0:01:c8:57:c0:6a:03:07:fd:fe:00:
                    4d:48:5f:c8:d5:e9:13:f8:95:00:33:a7:35:37:6b:
                    d5:42:7f:46:c8:40:6e:11:b3:32:15:57:90:a5:60:
                    b6:b8:37:71:f1:af:0d:f3:98:b1:20:13:ec:59:99:
                    66:34:02:f5:05:47:b9:73:f9:9f:a9:57:17:36:13:
                    5b:86:19:77:4c:d3:be:22:e6:ff:81:75:f8:22:2b:
                    84:16:2a:1a:d5:b2:97:a8:57:9e:4f:00:66:7c:68:
                    6a:db:82:cf:7f:c7:86:db:35:ba:84:e8:4f:66:76:
                    c6:e9:cf:25:eb:3b:df:10:d9:f9:54:fb:1e:30:3e:
                    57:65:1f:86:a1:d6:ad:4c:fa:8e:41:4c:13:7e:eb:
                    ae:0d:7d:61:96:d5:8a:92:2d:1e:6c:a7:45:2d:a5:
                    57:a1:db:d2:01:70:90:9a:b5:0e:d2:c5:47:8f:e3:
                    ff:4f:cf:f1:f6:4c:22:a7:d2:d5:1e:6a:ec:49:d7:
                    8f:b5:5e:5f:5a:84:78:f0:73:80:60:fb:ff:92:bf:
                    e3:80:54:27:54:d8:e8:ac:40:75:29:57:a5:2e:8a:
                    8c:72:31:ff:e4:9a:75:8b:ed:db:0f:f6:a2:d8:c1:
                    9b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:67:72:89:85:E9:74:2F:98:6A:3C:82:1F:72:51:1F:16:19:A8:C1
            X509v3 Authority Key Identifier:
                keyid:9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/6GdyiYXpdC-YajyCH3JRHxYZqME.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.107.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:ef:fb:10:77:f0:f4:2a:02:1a:4c:e1:ea:89:98:e1:b1:3a:
         61:f7:c7:07:7d:6b:ba:61:ac:2c:4e:a1:36:ce:70:9d:d7:5a:
         ad:3a:9a:3c:ff:ec:cb:d4:29:c7:50:d8:a6:02:17:4f:ad:4b:
         05:9f:a2:34:4b:cf:ed:d9:fd:52:11:75:38:d0:7f:5b:c1:17:
         e3:b8:ff:23:22:01:5a:ae:25:e4:ab:18:5b:00:1e:8e:99:99:
         09:df:70:65:b4:ee:de:e7:4f:8a:da:44:8a:2f:2e:f3:c0:9b:
         02:ae:4b:77:97:84:56:56:b0:92:ad:91:30:b7:62:7b:7e:e0:
         94:0c:2c:b5:35:46:db:10:ba:83:68:c6:1f:94:66:be:2c:00:
         b4:b6:1a:ab:86:aa:f4:83:0a:a5:88:39:7d:42:14:65:c6:19:
         6d:07:fd:e1:ae:51:b2:35:36:64:ce:12:d8:27:42:ec:ac:7e:
         18:ac:d1:da:45:f4:99:0c:55:58:d4:38:39:97:00:21:d7:cf:
         df:cc:f5:1f:39:7c:8f:fd:91:33:09:8c:1b:2e:5c:a7:b3:0f:
         5b:04:e3:02:90:d1:90:0f:70:10:1e:c8:a6:a8:0d:43:3c:14:
         8c:40:3c:c1:7f:5b:54:17:d1:2b:1f:f5:e8:f5:18:7e:e0:54:
         5e:ed:04:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:51 2024 by rpki-client on console-fra.rpki-client.org