Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/ejKDy3Y5-oeiDuqG975uwL7v8xc.roa
File:                     ejKDy3Y5-oeiDuqG975uwL7v8xc.roa (raw, json)
Hash identifier:          JTycYyKIzAjjxjsLOfwomF6MNoM0XAZKug6NbZaQsfE=
Subject key identifier:   7A:32:83:CB:76:39:FA:87:A2:0E:EA:86:F7:BE:6E:C0:BE:EF:F3:17
Certificate issuer:       /CN=4feb9457ec519e8237867710bcc82fa30eae67c0
Certificate serial:       069E7D22
Authority key identifier: 4F:EB:94:57:EC:51:9E:82:37:86:77:10:BC:C8:2F:A3:0E:AE:67:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T-uUV-xRnoI3hncQvMgvow6uZ8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/ejKDy3Y5-oeiDuqG975uwL7v8xc.roa
Signing time:             Sat 01 Jan 2022 11:00:02 +0000
ROA not before:           Sat 01 Jan 2022 11:00:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210567
IP address blocks:        185.163.247.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111050018 (0x69e7d22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4feb9457ec519e8237867710bcc82fa30eae67c0
        Validity
            Not Before: Jan  1 11:00:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7a3283cb7639fa87a20eea86f7be6ec0beeff317
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f3:5c:b4:c8:76:1d:47:46:3a:63:bc:cc:6e:
                    7f:89:80:f1:ea:98:d6:d6:33:bc:0b:b8:b2:ec:8c:
                    0b:8b:43:32:99:70:01:64:73:ed:9d:39:cb:d3:60:
                    b8:21:04:ed:d0:45:26:43:38:5d:47:61:ea:74:4e:
                    3d:70:b9:ee:dd:b1:04:7c:50:d2:30:5c:03:9e:05:
                    63:37:e7:09:05:41:ea:63:2c:f9:d9:4d:e7:8d:23:
                    71:2b:8d:14:53:93:27:22:5c:9b:3a:3e:c8:44:04:
                    48:30:1d:91:52:0b:fa:b0:76:27:44:7e:49:54:fe:
                    b3:21:da:5d:1d:be:77:9c:f5:70:a9:a2:ef:10:2f:
                    52:49:27:2a:df:79:80:3c:98:2c:78:5e:93:c4:6e:
                    f4:49:b8:18:49:11:8b:2c:4b:5e:c6:03:3b:b3:c3:
                    b2:3d:83:58:2e:ec:00:d6:ab:1f:63:f2:c4:c1:58:
                    6f:50:01:4f:e8:8e:a8:8f:82:15:c5:af:f2:a3:61:
                    b9:47:c8:da:fe:1c:e8:c1:c8:38:00:c7:94:a9:3d:
                    0f:43:4e:09:c6:53:64:41:bf:13:24:96:ef:83:a2:
                    e7:70:6e:17:5c:4a:b3:65:4b:11:65:2a:68:3e:2e:
                    6e:77:7c:7c:b0:44:ed:77:88:7a:60:a1:bd:b4:26:
                    f6:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:32:83:CB:76:39:FA:87:A2:0E:EA:86:F7:BE:6E:C0:BE:EF:F3:17
            X509v3 Authority Key Identifier:
                keyid:4F:EB:94:57:EC:51:9E:82:37:86:77:10:BC:C8:2F:A3:0E:AE:67:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T-uUV-xRnoI3hncQvMgvow6uZ8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/ejKDy3Y5-oeiDuqG975uwL7v8xc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.163.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:dc:fd:18:ff:9c:a8:8e:49:3e:24:94:fe:a7:8f:c0:4e:77:
         18:ca:04:18:4d:f6:d8:31:71:7d:91:d2:92:bb:44:48:a8:75:
         bc:ed:13:d6:04:1e:65:e1:27:32:29:74:df:06:2d:77:f8:3b:
         48:3b:c2:d4:ad:71:bf:73:e0:ea:38:48:7c:ce:6b:00:3e:8c:
         2d:c5:db:ea:40:49:7f:16:1c:e7:53:1a:da:5f:9c:cc:70:d6:
         45:18:d1:38:cb:f9:25:6e:c3:35:94:2c:b3:fc:b3:0b:c3:43:
         c2:98:0d:2a:2b:7a:ce:eb:4d:6f:df:80:4e:16:9e:43:90:54:
         4f:3e:4a:36:f3:a1:6c:ab:e9:cb:c0:c9:1a:0c:20:ae:61:07:
         29:e3:36:25:56:68:0f:8b:ab:28:2a:71:9a:61:fd:2c:4a:31:
         16:14:79:49:30:14:d5:5a:cf:37:b9:be:13:93:ed:5e:40:a0:
         f2:58:a9:bf:6f:2b:bb:b5:74:1d:0e:07:3f:ec:5e:75:ae:2c:
         d9:95:f2:d9:47:02:cf:3a:84:38:58:9d:81:fd:aa:be:ce:88:
         3b:df:c2:2d:cc:c9:16:3f:ed:38:64:c8:d7:45:fa:e0:fa:66:
         0a:b9:25:d8:91:1f:3b:14:34:41:dc:f3:46:10:22:7c:92:81:
         fe:1f:af:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:27 2024 by rpki-client on console-ams.rpki-client.org