Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/YyvXft_Ugo4gujd6xy7ILVSXGN0.roa
File:                     YyvXft_Ugo4gujd6xy7ILVSXGN0.roa (raw, json)
Hash identifier:          H5LmIURmyC/kyW23PTi9ibDM/iokOzUhBZy0XGP6tts=
Subject key identifier:   63:2B:D7:7E:DF:D4:82:8E:20:BA:37:7A:C7:2E:C8:2D:54:97:18:DD
Certificate issuer:       /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial:       1386056C
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/YyvXft_Ugo4gujd6xy7ILVSXGN0.roa
Signing time:             Sat 01 Jan 2022 05:56:17 +0000
ROA not before:           Sat 01 Jan 2022 05:56:17 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     62071
IP address blocks:        185.212.8.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 327550316 (0x1386056c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
        Validity
            Not Before: Jan  1 05:56:17 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=632bd77edfd4828e20ba377ac72ec82d549718dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8d:15:32:c7:53:ee:3b:1a:15:04:e7:da:29:
                    6a:71:e8:c8:64:a7:ca:e6:ef:56:d1:7b:ca:d8:45:
                    a1:63:f7:0d:3d:2c:ac:90:d6:99:2b:0d:72:c2:61:
                    9b:c6:19:18:ac:cf:12:dd:d6:d0:50:69:47:0e:c4:
                    f5:95:9d:82:a1:36:9a:76:9c:5c:cd:ed:5b:ba:3c:
                    7a:55:ea:a0:86:9a:72:5f:98:50:28:40:e7:a6:fe:
                    27:32:70:b8:bb:82:3a:83:c0:5a:86:f9:ed:44:24:
                    f9:d4:50:af:ae:6f:fb:0f:8d:aa:4f:b6:bd:ce:33:
                    c7:f0:72:09:82:e8:d2:82:47:86:44:e8:3e:8f:27:
                    fa:d4:76:12:89:bf:f5:73:41:a7:08:1a:6d:ef:a0:
                    66:d7:ee:5c:7b:8e:88:9e:26:ee:bf:a5:74:60:6b:
                    dd:b2:e7:60:a2:f9:b8:ed:01:b2:11:10:73:d9:ad:
                    38:1f:62:4c:0d:18:7a:f5:93:fb:7d:8d:21:92:9f:
                    b3:18:1a:1d:ae:c8:4e:f1:e2:86:d7:e2:1e:7f:48:
                    fc:13:5f:dc:58:f0:59:23:1f:63:a7:c7:5e:2a:30:
                    9b:1c:4f:52:ec:62:5d:19:a8:02:14:26:66:7b:ca:
                    d1:6d:02:5e:a0:c9:5a:3d:38:ef:be:d8:84:07:e9:
                    0a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:2B:D7:7E:DF:D4:82:8E:20:BA:37:7A:C7:2E:C8:2D:54:97:18:DD
            X509v3 Authority Key Identifier:
                keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/YyvXft_Ugo4gujd6xy7ILVSXGN0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.212.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:5d:e6:ca:d7:a2:3b:ce:9f:9f:c3:e4:00:e4:3b:c6:78:e9:
         b5:2d:11:0e:3b:d7:1d:04:b3:b1:a3:18:94:6e:57:0e:3a:af:
         b6:78:ba:2b:40:81:2d:10:f1:db:40:1d:70:90:bb:15:2e:2c:
         a4:a7:0f:04:54:80:f1:d3:b7:41:0b:b0:71:2e:cd:61:1d:64:
         7d:6c:e2:e0:91:c6:b1:66:ad:d4:28:bd:5f:81:65:28:9c:5a:
         27:d8:a7:83:06:2d:51:cc:63:c4:c5:45:e6:44:07:e0:61:ac:
         4b:4d:84:1e:8a:92:1f:81:80:b5:19:61:bb:7b:e0:e7:a2:78:
         b2:f6:d7:c9:10:36:b2:d9:56:77:46:7b:ca:f1:af:34:67:be:
         17:82:6d:21:d0:d6:a7:95:03:29:d7:3e:9e:a4:6a:46:50:cb:
         d9:81:f1:c5:18:3c:ee:06:c7:7a:c1:12:d4:59:01:14:b4:54:
         87:26:ed:fa:d0:51:5e:22:f0:56:99:2c:c8:98:54:33:cf:e7:
         ab:ed:59:39:62:c2:9e:71:1f:75:b7:a9:d8:85:6f:63:44:bc:
         54:18:63:c5:b6:f4:69:3d:72:56:e5:9a:ad:8b:1d:32:41:5c:
         d5:82:0f:51:79:61:73:0f:9a:c6:ef:10:fd:a2:ae:63:ca:b4:
         a1:33:2f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:26 2024 by rpki-client on console-ams.rpki-client.org