Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/wM0qlmt4tJD0mR-nVwo2HiYXwVY.roa
File:                     wM0qlmt4tJD0mR-nVwo2HiYXwVY.roa (raw, json)
Hash identifier:          WrPk8kJ6aD7BrA8kvb7sJJ11SJKdXcpIziEkTXE8CIQ=
Subject key identifier:   C0:CD:2A:96:6B:78:B4:90:F4:99:1F:A7:57:0A:36:1E:26:17:C1:56
Certificate issuer:       /CN=a8dff01f56e3419d027be7591ceef62851ce0f6b
Certificate serial:       02AAAC46
Authority key identifier: A8:DF:F0:1F:56:E3:41:9D:02:7B:E7:59:1C:EE:F6:28:51:CE:0F:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/wM0qlmt4tJD0mR-nVwo2HiYXwVY.roa
Signing time:             Sat 01 Jan 2022 16:02:41 +0000
ROA not before:           Sat 01 Jan 2022 16:02:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     64510
IP address blocks:        185.201.174.208/28 maxlen: 28

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44739654 (0x2aaac46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8dff01f56e3419d027be7591ceef62851ce0f6b
        Validity
            Not Before: Jan  1 16:02:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c0cd2a966b78b490f4991fa7570a361e2617c156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a4:e4:1c:7e:e6:3a:cc:61:04:bb:57:91:e5:
                    2c:9b:cd:95:b8:19:7e:69:41:e0:a7:5b:23:d9:19:
                    b2:2e:8c:ea:b3:a1:03:1d:3e:73:27:97:be:d0:70:
                    5b:dc:1c:5d:43:0b:a7:e3:c0:41:dd:df:f3:02:97:
                    5b:c7:30:77:cd:7b:ab:c4:9b:88:92:5c:33:32:fb:
                    b7:53:a6:bf:5c:ed:48:b9:b9:00:92:34:cc:41:38:
                    70:0a:b3:9a:4b:b8:41:5d:86:a9:49:70:09:41:f3:
                    5c:a6:7b:c0:64:15:87:63:e6:8b:3b:ff:38:31:e5:
                    87:51:90:d0:ce:b0:69:05:14:22:41:78:f9:86:37:
                    0d:ec:f9:05:09:da:c7:0a:81:8c:86:71:77:d3:87:
                    e1:3f:34:78:81:08:c0:5d:35:3e:36:1e:61:79:5c:
                    cb:5f:57:b9:54:87:cc:92:8c:9b:c2:44:0b:cf:0b:
                    87:76:b1:fb:24:2f:96:88:63:6a:20:0d:1f:22:12:
                    89:af:ad:92:1a:92:f3:51:74:33:d6:1f:ca:a3:30:
                    c5:ef:09:2b:5f:12:cd:3c:1b:e1:9a:5b:6d:3b:d4:
                    a0:86:d5:2b:33:f3:04:5f:28:50:d6:30:1a:dd:86:
                    13:c2:d4:be:c5:a2:83:de:40:d0:9b:d1:fb:84:b6:
                    9b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:CD:2A:96:6B:78:B4:90:F4:99:1F:A7:57:0A:36:1E:26:17:C1:56
            X509v3 Authority Key Identifier:
                keyid:A8:DF:F0:1F:56:E3:41:9D:02:7B:E7:59:1C:EE:F6:28:51:CE:0F:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/wM0qlmt4tJD0mR-nVwo2HiYXwVY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.201.174.208/28

    Signature Algorithm: sha256WithRSAEncryption
         11:1f:a1:fe:74:3b:33:d9:fc:36:1e:1d:10:29:05:b3:21:f8:
         fe:d0:31:b2:f5:27:c7:9b:bb:65:de:1e:2b:c8:f6:04:b3:9e:
         30:2a:7a:e5:99:59:f0:ab:f3:7c:50:ec:5a:b5:20:13:81:6d:
         37:5c:e6:28:06:5a:0b:90:54:79:cf:1a:53:f6:a8:3d:b7:9f:
         de:02:8f:d2:13:ff:c8:a5:f1:ee:46:7f:fc:e1:b5:fc:0e:f5:
         9e:a0:3c:1c:40:e6:3f:77:59:19:6a:1b:51:14:1f:97:a5:e4:
         8f:15:a1:8d:20:a5:c8:4f:39:7d:51:8f:30:6a:ac:ba:cd:bf:
         76:bf:47:a1:2f:79:a0:d4:96:4d:ce:f0:cd:b0:4a:d3:9b:93:
         a4:73:ff:fc:a8:78:da:f1:18:1c:05:e4:be:55:d4:2a:11:8d:
         88:d5:41:f0:ea:d7:36:c3:51:e1:ab:e0:89:23:21:a0:b6:9b:
         7c:87:7d:28:c3:da:db:43:78:1e:50:49:48:17:39:ec:d7:01:
         8c:20:bf:e3:d6:7e:5b:13:ef:f6:ae:fb:1c:a9:34:d9:aa:72:
         8f:40:75:ac:f0:38:92:78:18:de:b1:b5:6f:f7:04:de:2c:eb:
         d3:68:36:9a:40:93:48:f5:ae:b7:93:5a:66:85:0e:1f:0d:eb:
         13:63:2c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:59 2024 by rpki-client on console-ams.rpki-client.org