Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/6YvfiBtwlmQA3FpIVUxNN_WHWn4.roa
File:                     6YvfiBtwlmQA3FpIVUxNN_WHWn4.roa (raw, json)
Hash identifier:          2mKeCet29TuslZmAJCmbgAuK2caTF2WIkf3rCQmZunw=
Subject key identifier:   E9:8B:DF:88:1B:70:96:64:00:DC:5A:48:55:4C:4D:37:F5:87:5A:7E
Certificate issuer:       /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial:       0A7537BB
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/6YvfiBtwlmQA3FpIVUxNN_WHWn4.roa
Signing time:             Fri 17 Jun 2022 11:35:44 +0000
ROA not before:           Fri 17 Jun 2022 11:35:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     328867
IP address blocks:        185.243.7.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 175454139 (0xa7537bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
        Validity
            Not Before: Jun 17 11:35:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e98bdf881b70966400dc5a48554c4d37f5875a7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:fc:eb:bc:07:f1:cb:5b:e1:67:ae:6b:83:a9:
                    df:7a:b4:72:6d:15:5a:1a:1b:14:54:3f:31:d1:4e:
                    85:80:9d:46:ec:3f:19:c6:79:77:61:03:33:56:62:
                    f7:d3:59:44:0b:d3:17:77:f3:d5:fe:3f:0f:c4:a7:
                    57:19:5d:53:46:cb:3c:7d:ba:63:5e:f4:b5:e8:c2:
                    a8:4c:57:5a:e8:0c:41:26:4f:2e:f2:c9:2c:3e:fa:
                    42:54:e3:8d:70:87:c2:ca:b7:da:f2:ea:f3:c3:ac:
                    45:b8:76:bf:aa:1c:9d:64:bb:01:f1:76:8b:56:76:
                    c0:50:e7:c6:9c:66:83:0f:23:af:f3:f7:20:8d:a9:
                    72:39:e3:cf:60:d9:ff:56:47:58:0e:23:62:50:63:
                    e3:43:1c:78:34:3b:ab:e3:87:ca:07:ef:c0:67:2c:
                    8f:2d:23:fe:1b:12:a2:5a:67:74:0f:f9:61:6a:8b:
                    19:22:f7:6b:94:e1:3a:2e:36:0f:47:31:18:9c:97:
                    ec:43:db:a5:06:45:41:c8:38:88:fd:91:23:47:24:
                    64:6d:ec:1c:d7:7c:83:20:29:e9:32:e0:b8:a9:c1:
                    b6:6a:92:c8:d2:e5:4d:4b:43:29:0e:62:32:0a:eb:
                    fa:35:5b:26:c8:17:92:68:e9:b3:a5:f9:7e:f1:fb:
                    12:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:8B:DF:88:1B:70:96:64:00:DC:5A:48:55:4C:4D:37:F5:87:5A:7E
            X509v3 Authority Key Identifier:
                keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/6YvfiBtwlmQA3FpIVUxNN_WHWn4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.243.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:c2:c5:ca:c1:33:6f:2b:3e:ae:9a:07:03:92:1e:4b:f6:da:
         0c:c4:9a:ae:c1:0c:1b:bd:c6:01:05:db:16:f4:27:a2:ad:15:
         58:26:f8:3f:f4:10:c9:41:d7:65:2a:b5:7b:d3:ab:f7:28:c2:
         54:70:ae:13:6a:71:bd:02:0b:2f:d7:59:bf:9e:7e:0f:8a:2f:
         2a:ac:57:89:19:1e:fc:c6:c4:9c:ce:25:f6:d2:81:41:61:05:
         66:13:7b:94:a6:27:c9:61:33:17:b8:a5:42:17:e3:34:cc:76:
         05:53:21:39:65:3d:b5:55:d8:1f:40:ef:f3:44:08:da:a9:90:
         fa:ca:8c:d4:a8:30:e9:0b:d1:7f:7c:84:d1:2f:9b:5d:7b:42:
         a2:88:23:dc:2d:a6:b1:eb:be:0c:a9:f1:8e:8f:5e:89:32:a6:
         02:a3:e5:48:a1:97:ef:f6:ab:7e:e4:64:86:56:ff:f4:a1:27:
         52:74:ef:82:af:07:a1:8c:61:23:7d:22:10:b5:0f:69:d1:e0:
         63:ab:49:2e:ed:1e:2c:57:6e:40:10:e3:c6:cb:5d:78:f3:2d:
         b0:9f:9a:f8:73:8b:45:8d:31:cc:1f:63:a0:f6:fa:55:ac:f2:
         d6:e8:37:d9:d1:32:af:c1:66:9f:a4:f6:ff:6d:8a:3e:b0:fa:
         b8:49:5d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:03 2024 by rpki-client on console-ams.rpki-client.org