Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/oWM93_yorLnMmlI-k_FlyNAozTE.roa
File:                     oWM93_yorLnMmlI-k_FlyNAozTE.roa (raw, json)
Hash identifier:          B7UVIK/JDZ9+1uTwr6Y1pPS2WXixF4ftnjgZ0TjH5Qw=
Subject key identifier:   A1:63:3D:DF:FC:A8:AC:B9:CC:9A:52:3E:93:F1:65:C8:D0:28:CD:31
Certificate issuer:       /CN=b78cddbfc76bda26a029ea80c8987798745f1f02
Certificate serial:       036874EA
Authority key identifier: B7:8C:DD:BF:C7:6B:DA:26:A0:29:EA:80:C8:98:77:98:74:5F:1F:02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t4zdv8dr2iagKeqAyJh3mHRfHwI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/oWM93_yorLnMmlI-k_FlyNAozTE.roa
Signing time:             Sat 01 Jan 2022 01:56:33 +0000
ROA not before:           Sat 01 Jan 2022 01:56:33 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     16509
IP address blocks:        185.215.115.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57177322 (0x36874ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b78cddbfc76bda26a029ea80c8987798745f1f02
        Validity
            Not Before: Jan  1 01:56:33 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a1633ddffca8acb9cc9a523e93f165c8d028cd31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:31:e4:26:33:0b:81:be:11:0e:bd:aa:e1:a9:
                    06:a4:66:6f:66:00:6f:09:3d:7e:8d:ed:c7:66:36:
                    c2:ac:18:48:42:79:3c:4f:57:a7:fc:c8:b8:76:9e:
                    db:91:24:f0:3b:5c:1b:8a:a3:fb:14:1d:00:1b:8b:
                    34:40:47:3e:ab:38:f0:86:01:75:de:03:74:3c:46:
                    0d:c3:b2:08:db:f3:e8:b4:fb:88:69:d4:c7:83:4f:
                    0d:f1:2d:93:c0:7d:a5:02:6b:06:04:28:8b:98:eb:
                    2a:d1:41:47:55:c6:36:3e:d5:3a:3b:0a:eb:b7:2b:
                    b9:f1:b8:3b:10:55:17:37:34:b4:e9:a6:61:c2:e3:
                    17:cb:6d:86:98:6b:75:a4:ad:ae:f2:9a:b3:32:bc:
                    6a:cd:18:bc:41:55:40:9b:c5:b4:02:f5:88:34:af:
                    53:ab:8d:d8:09:04:17:51:d8:37:aa:5d:4b:65:05:
                    15:9d:ce:48:ff:38:62:29:25:69:e2:df:a8:39:95:
                    42:db:af:63:24:7b:f7:94:40:1a:3d:33:30:7e:37:
                    86:c5:e8:fe:a0:b9:68:4d:ac:3f:ea:85:eb:a8:f6:
                    91:f5:72:94:9f:e2:d9:0e:01:13:e2:af:2e:31:67:
                    23:9d:07:97:9e:fe:84:7a:e2:d3:27:46:e7:c2:7f:
                    66:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:63:3D:DF:FC:A8:AC:B9:CC:9A:52:3E:93:F1:65:C8:D0:28:CD:31
            X509v3 Authority Key Identifier:
                keyid:B7:8C:DD:BF:C7:6B:DA:26:A0:29:EA:80:C8:98:77:98:74:5F:1F:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4zdv8dr2iagKeqAyJh3mHRfHwI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/oWM93_yorLnMmlI-k_FlyNAozTE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.215.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:eb:7d:9c:b3:4d:c6:2f:c5:6f:9c:60:2b:88:f1:00:9f:14:
         e0:d6:b0:d1:e1:8e:22:c5:38:1f:25:2a:c2:64:cd:58:76:01:
         4c:d3:aa:cc:89:42:29:9a:f8:11:1f:4c:4e:73:da:64:2d:e8:
         4f:d8:54:fc:df:f5:e2:fa:15:1d:16:91:27:13:49:1a:85:13:
         0e:de:4a:d1:31:c9:b0:27:82:cf:f7:69:ed:36:ee:92:1c:bc:
         bd:d7:85:ad:c1:ca:a4:74:21:01:71:a5:be:f5:0e:17:65:75:
         54:ef:93:10:8d:7d:16:29:d1:d1:df:84:6f:26:f3:77:f8:6c:
         f5:42:4e:4e:3f:fb:1e:f6:ee:20:e9:2d:bf:4b:99:be:33:9a:
         d1:92:09:9d:06:7b:76:44:f6:31:3f:85:a9:94:38:14:d4:4d:
         4b:d6:c6:af:0a:04:66:fa:0b:d6:a1:d9:9e:29:1c:c3:c5:90:
         98:7b:b0:0f:ee:3f:c4:21:be:a3:cd:6b:26:43:25:cd:ba:48:
         fa:df:86:08:6c:be:41:96:ff:a5:e1:8b:6d:fe:26:8a:4f:78:
         b6:e0:e5:b7:bc:fb:b5:60:54:b8:dc:bb:28:b2:cd:cf:13:33:
         17:5d:5f:8e:2e:14:e2:01:c0:42:31:24:18:4c:b1:3b:86:5b:
         36:e4:6f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:59 2024 by rpki-client on console-ams.rpki-client.org