Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Dtmr5xMkcj_q0JZ_fd4qs8L8jbs.roa
File:                     Dtmr5xMkcj_q0JZ_fd4qs8L8jbs.roa (raw, json)
Hash identifier:          iQE6APFjiQMtwefla9TXbn1/x9HSCcP6Ep21yrHBiR4=
Subject key identifier:   0E:D9:AB:E7:13:24:72:3F:EA:D0:96:7F:7D:DE:2A:B3:C2:FC:8D:BB
Certificate issuer:       /CN=67bf353715a34dda28605fdcf7b7ae806d31159c
Certificate serial:       018481337773BE557AF0C8A5E328B5921E64
Authority key identifier: 67:BF:35:37:15:A3:4D:DA:28:60:5F:DC:F7:B7:AE:80:6D:31:15:9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z781NxWjTdooYF_c97eugG0xFZw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Dtmr5xMkcj_q0JZ_fd4qs8L8jbs.roa
Signing time:             Wed 16 Nov 2022 16:09:04 +0000
ROA not before:           Wed 16 Nov 2022 16:09:04 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61044
IP address blocks:        185.40.92.0/22 maxlen: 22
                          37.148.192.0/21 maxlen: 21
                          37.148.196.0/24 maxlen: 24
                          2a03:10c0::/30 maxlen: 30

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:81:33:77:73:be:55:7a:f0:c8:a5:e3:28:b5:92:1e:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67bf353715a34dda28605fdcf7b7ae806d31159c
        Validity
            Not Before: Nov 16 16:09:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0ed9abe71324723fead0967f7dde2ab3c2fc8dbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f0:cb:f9:28:b4:16:11:d9:01:85:d7:6d:bd:
                    fa:ba:73:90:87:6c:ea:d3:7e:b9:0e:90:12:b1:f5:
                    1f:42:bf:f2:95:7d:38:c2:05:e4:53:3d:57:78:dc:
                    d3:47:3a:e5:cb:23:f7:79:df:4e:cd:28:87:d5:13:
                    20:57:4c:8d:2d:b5:d3:0a:18:80:e5:ca:30:00:74:
                    9e:18:a7:93:32:e9:5b:d7:71:f0:89:bb:01:33:b8:
                    d8:31:4a:8e:63:9e:79:fd:81:85:1d:a2:26:ee:05:
                    06:6b:ad:9e:6b:5e:0c:e8:1e:83:9b:83:1e:f0:c7:
                    43:9a:51:1d:1c:8f:a9:12:54:1b:6d:35:67:d3:5d:
                    15:74:98:aa:4e:a0:c4:49:15:37:9b:0f:0d:da:fa:
                    b5:25:19:e8:86:a2:81:7e:be:b2:ae:31:3e:83:73:
                    2e:ff:f8:a0:9b:f5:07:cd:ea:6e:49:f3:40:58:a3:
                    1b:c0:de:62:2e:19:27:29:4d:d6:34:9a:93:c0:48:
                    03:02:f8:f5:84:ef:37:7c:52:98:5a:a0:1f:50:a6:
                    33:34:5d:96:d1:7d:5e:3f:61:cf:08:48:6a:cf:83:
                    d0:4b:48:da:17:d1:98:42:c9:75:cf:cc:49:e5:0b:
                    cd:99:e5:21:0d:46:d6:1c:86:2a:ae:b8:78:83:df:
                    c7:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:D9:AB:E7:13:24:72:3F:EA:D0:96:7F:7D:DE:2A:B3:C2:FC:8D:BB
            X509v3 Authority Key Identifier:
                keyid:67:BF:35:37:15:A3:4D:DA:28:60:5F:DC:F7:B7:AE:80:6D:31:15:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z781NxWjTdooYF_c97eugG0xFZw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Dtmr5xMkcj_q0JZ_fd4qs8L8jbs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.148.192.0/21
                  185.40.92.0/22
                IPv6:
                  2a03:10c0::/30

    Signature Algorithm: sha256WithRSAEncryption
         7c:8a:7a:2e:05:dd:db:b5:36:cd:b1:d4:3b:a3:49:32:e8:e8:
         c7:75:25:5f:f7:69:ae:44:25:43:bf:fb:4e:0e:80:9e:74:c2:
         f4:98:27:1a:b9:57:1d:c7:9f:1c:4e:aa:c9:b5:ef:58:a1:b9:
         ab:ab:f1:ce:67:41:b9:4f:98:5a:77:eb:35:a5:75:7f:dd:9d:
         af:73:c2:c7:50:ed:bd:03:29:f4:9a:83:bb:74:81:d1:d1:33:
         9c:9c:13:b0:38:f6:a4:63:36:48:35:67:8a:03:92:7c:56:06:
         39:3b:97:71:79:58:98:2c:55:24:ae:18:10:00:71:69:fc:4e:
         16:a6:e4:ed:24:8d:5c:4f:8f:5f:e3:00:ee:4f:b7:69:41:fb:
         19:c4:1c:3c:29:e7:78:ab:26:06:c9:0b:4e:79:26:60:df:a9:
         b2:21:4e:fa:3f:61:7b:90:03:93:6e:a2:8d:28:4f:27:92:98:
         70:64:be:4c:9c:31:b1:fb:b4:36:56:53:15:e2:56:f9:09:c8:
         db:42:23:f4:20:97:a4:3d:48:f1:dc:26:65:c3:26:2d:5d:22:
         3f:26:8e:91:d2:08:5c:82:3d:9c:38:bb:dc:39:96:f8:43:cc:
         cd:7e:2c:a9:d6:1e:d5:60:91:36:f0:9f:1b:b5:f6:62:cc:4b:
         7d:b2:06:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:04 2024 by rpki-client on console-ams.rpki-client.org