Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/J_tOL95e8HMLTCU6Z7S-BOxJgB4.roa
File:                     J_tOL95e8HMLTCU6Z7S-BOxJgB4.roa (raw, json)
Hash identifier:          Hr4APZqw8zhHIwPfugMfQGvup4Q/PZRJTjbMV+ihmNM=
Subject key identifier:   27:FB:4E:2F:DE:5E:F0:73:0B:4C:25:3A:67:B4:BE:04:EC:49:80:1E
Certificate issuer:       /CN=0083f697954ec7cc492e5aa46cc8ef13fc8eda91
Certificate serial:       0C7B19
Authority key identifier: 00:83:F6:97:95:4E:C7:CC:49:2E:5A:A4:6C:C8:EF:13:FC:8E:DA:91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AIP2l5VOx8xJLlqkbMjvE_yO2pE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/J_tOL95e8HMLTCU6Z7S-BOxJgB4.roa
Signing time:             Tue 24 May 2022 12:42:13 +0000
ROA not before:           Tue 24 May 2022 12:42:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206543
IP address blocks:        185.44.231.0/24 maxlen: 24
                          185.44.230.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 817945 (0xc7b19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0083f697954ec7cc492e5aa46cc8ef13fc8eda91
        Validity
            Not Before: May 24 12:42:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=27fb4e2fde5ef0730b4c253a67b4be04ec49801e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:44:63:e4:ba:9f:dd:dc:ea:39:77:35:23:5b:
                    13:4f:b8:7c:ff:77:51:aa:ff:91:03:b1:02:c5:5c:
                    6f:2b:85:36:04:be:fe:b3:8a:ef:8d:78:77:e4:5a:
                    ff:f2:b6:a8:9b:e1:48:9e:34:30:1a:ed:e0:51:f9:
                    1d:6b:2f:13:bc:d4:5d:29:6e:be:2e:46:ee:12:73:
                    8f:f1:6a:5b:be:d5:ba:45:08:97:db:82:d8:6f:0c:
                    1c:6d:b9:b4:f4:b6:7c:16:7d:87:50:c8:26:b5:51:
                    e1:89:ab:cd:6d:5d:f8:7f:7c:e9:c7:13:16:f8:0d:
                    3d:71:48:28:16:d4:3a:f1:e7:3a:5d:6e:eb:02:eb:
                    ea:c3:eb:3b:a2:de:21:b0:9c:8e:57:da:be:89:27:
                    b5:b6:1e:3f:24:9b:62:44:a5:c4:72:3b:a0:f0:56:
                    a5:43:af:c3:11:56:33:36:b1:a3:d8:d6:52:30:ba:
                    5a:87:9c:8d:03:16:96:b0:8f:e2:a3:ef:70:0f:39:
                    6f:de:ee:05:5e:49:a2:ad:5e:3e:45:68:1c:87:c1:
                    aa:81:08:f3:08:f4:f1:95:d7:fd:08:45:3f:46:75:
                    72:24:22:fb:7a:b0:c6:fc:52:ad:f6:c4:cf:8c:4a:
                    9b:4d:16:e4:a0:8a:15:a6:56:2f:af:35:71:72:c1:
                    2b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:FB:4E:2F:DE:5E:F0:73:0B:4C:25:3A:67:B4:BE:04:EC:49:80:1E
            X509v3 Authority Key Identifier:
                keyid:00:83:F6:97:95:4E:C7:CC:49:2E:5A:A4:6C:C8:EF:13:FC:8E:DA:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AIP2l5VOx8xJLlqkbMjvE_yO2pE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/J_tOL95e8HMLTCU6Z7S-BOxJgB4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.44.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5d:10:73:a5:70:64:19:5d:60:60:45:d0:fe:06:f4:a6:30:63:
         6c:65:77:36:b6:ca:e7:41:f4:c8:c0:96:21:0f:29:95:99:fc:
         6d:66:a8:f3:a4:7f:83:59:14:28:67:78:88:1b:2d:65:41:97:
         c7:30:51:0e:58:4f:70:b0:bc:ef:25:af:5b:bd:ef:d4:49:2d:
         67:d3:2f:8a:08:ca:8a:91:d9:f1:03:71:e8:04:b3:a7:a9:c1:
         aa:89:c9:66:1b:4f:21:f2:f0:a2:73:0c:a5:a8:81:9c:70:53:
         2a:34:2d:5c:64:28:a9:a1:b1:1b:6a:94:b3:e2:1d:8a:43:84:
         8e:0e:41:9d:ba:63:05:49:d0:39:c8:97:fa:3e:ba:f7:bc:3f:
         91:cf:ef:b4:05:5e:a4:ac:24:b1:5b:ae:f5:67:d5:be:2b:0d:
         d9:da:4a:37:e6:fe:e2:5b:eb:96:f7:ed:67:35:b5:e5:46:a7:
         81:45:a5:ce:c2:d9:7f:53:da:44:30:87:de:79:aa:51:9a:63:
         b6:37:b4:16:6b:c9:95:cf:aa:5a:a3:db:f8:15:61:78:ff:15:
         fc:de:63:6a:54:4e:2a:8c:42:d2:53:b0:c7:05:fc:33:95:39:
         31:64:94:48:bf:74:b6:1d:7b:57:dc:bc:ff:40:08:48:65:0e:
         a0:9f:3e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:44 2024 by rpki-client on console-ams.rpki-client.org