Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/UECNOLTqsSqd7n9E_v-vuOoTExQ.roa
File:                     UECNOLTqsSqd7n9E_v-vuOoTExQ.roa (raw, json)
Hash identifier:          fEgbEwxkrgXc4BFI3+o/6tjyyle9NiWIirOK6N86Euw=
Subject key identifier:   50:40:8D:38:B4:EA:B1:2A:9D:EE:7F:44:FE:FF:AF:B8:EA:13:13:14
Certificate issuer:       /CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Certificate serial:       0FBB7A49
Authority key identifier: C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/UECNOLTqsSqd7n9E_v-vuOoTExQ.roa
Signing time:             Sat 01 Jan 2022 09:57:04 +0000
ROA not before:           Sat 01 Jan 2022 09:57:04 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     62240
IP address blocks:        185.187.155.0/24 maxlen: 24
                          185.187.154.0/24 maxlen: 24
                          185.121.24.0/23 maxlen: 24
                          185.121.26.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 263944777 (0xfbb7a49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
        Validity
            Not Before: Jan  1 09:57:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=50408d38b4eab12a9dee7f44feffafb8ea131314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e4:46:d1:4f:c0:6a:3f:d4:61:c9:eb:0c:84:
                    31:65:8b:71:bf:11:d3:08:b4:e1:6f:e5:76:87:ce:
                    08:11:41:e7:6c:03:5b:c0:08:88:16:83:38:31:ef:
                    b2:d0:ae:1b:f8:d5:48:f4:55:82:4e:fa:61:ad:f0:
                    b4:79:6a:c1:d9:86:de:ae:01:4c:29:46:c4:31:29:
                    60:ff:59:a5:38:7f:c1:55:dc:e5:13:8e:59:3a:cc:
                    6e:04:f8:85:0a:03:00:7e:c2:30:10:66:63:58:1d:
                    79:63:50:72:e8:6a:62:0d:1f:35:cb:d9:84:ae:40:
                    c7:88:30:e3:38:38:a2:44:95:2a:fb:45:db:cf:73:
                    7b:8a:7b:45:5c:24:93:36:3a:61:67:ac:c7:1c:8a:
                    7e:15:c9:28:f4:38:aa:bf:00:21:cc:0f:4a:1d:ee:
                    80:f8:bd:94:15:17:a0:09:5f:35:45:95:39:bb:4a:
                    4a:7d:1f:72:87:b0:33:a0:90:12:39:57:11:ad:fd:
                    90:75:34:cd:7a:33:21:d5:bf:15:f6:a7:c3:d0:45:
                    0b:cf:67:20:c9:f0:a9:4b:71:6a:13:b4:11:7c:7f:
                    94:cd:70:26:0f:c1:93:09:39:9f:a1:15:27:96:f9:
                    19:6e:3a:5a:79:85:e1:ec:8b:eb:b6:02:9a:96:c6:
                    de:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:40:8D:38:B4:EA:B1:2A:9D:EE:7F:44:FE:FF:AF:B8:EA:13:13:14
            X509v3 Authority Key Identifier:
                keyid:C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/UECNOLTqsSqd7n9E_v-vuOoTExQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.121.24.0/22
                  185.187.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:58:8b:7e:ba:50:1f:ec:54:a1:a9:5f:70:e3:f3:ea:dc:40:
         ef:30:d4:ea:0d:9f:03:75:63:1b:2f:33:9c:5c:9f:4e:ec:7b:
         d2:72:f3:6d:81:25:1f:af:3e:2e:18:74:5c:65:62:4b:59:45:
         a1:73:b9:94:6d:81:5d:23:53:6e:47:64:75:26:df:45:a3:31:
         25:f3:75:d0:97:2a:18:87:e3:e5:97:ed:66:9e:94:6a:43:9f:
         a6:6a:f8:dd:01:a1:9f:9c:a6:e6:fa:81:c4:63:fd:3e:39:66:
         ab:22:3c:13:04:ca:aa:5b:c6:19:cb:d9:44:be:04:40:d2:0e:
         5a:81:77:c5:e1:5f:86:e0:90:3f:91:08:3d:ed:f7:10:b0:9d:
         5a:e0:ea:5c:d0:e4:20:49:3f:05:a5:51:40:d6:1e:35:e7:68:
         73:e9:b7:5e:38:8e:6e:36:74:60:47:a1:be:74:91:ee:5a:2f:
         bc:ea:10:9a:68:80:43:5e:bc:9a:27:78:23:9f:e5:3e:64:4d:
         62:38:c2:4c:7e:ac:e2:74:f4:1b:68:63:e3:9e:a0:2b:76:ca:
         cc:81:0f:f9:a9:8f:96:01:e4:95:3c:1e:58:60:5c:51:ed:aa:
         b2:79:96:88:b1:62:72:c3:b4:0e:ab:20:27:eb:a0:de:4e:2d:
         0d:de:9e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:21 2024 by rpki-client on console-fra.rpki-client.org