Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/e94817-f259-4ffa-9ba3-7eb95cc0f749/1/6wJqaSjESNytEabj62uEj9-9Cfc.roa
File:                     6wJqaSjESNytEabj62uEj9-9Cfc.roa (raw, json)
Hash identifier:          2ZxE2R8MSOSDiV9JT9RMUNKh997XNwKJgSeyLdgJ6jw=
Subject key identifier:   EB:02:6A:69:28:C4:48:DC:AD:11:A6:E3:EB:6B:84:8F:DF:BD:09:F7
Certificate issuer:       /CN=47e42233ed630b0b89f52c077ff0d5c2b37d4dfa
Certificate serial:       0A242DD0
Authority key identifier: 47:E4:22:33:ED:63:0B:0B:89:F5:2C:07:7F:F0:D5:C2:B3:7D:4D:FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/e94817-f259-4ffa-9ba3-7eb95cc0f749/1/6wJqaSjESNytEabj62uEj9-9Cfc.roa
Signing time:             Sat 01 Jan 2022 05:00:32 +0000
ROA not before:           Sat 01 Jan 2022 05:00:32 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     47374
IP address blocks:        185.219.68.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 170143184 (0xa242dd0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47e42233ed630b0b89f52c077ff0d5c2b37d4dfa
        Validity
            Not Before: Jan  1 05:00:32 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=eb026a6928c448dcad11a6e3eb6b848fdfbd09f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:26:1d:d7:3b:86:86:3f:c1:24:3e:31:03:75:
                    86:ea:9f:f6:88:bf:58:da:ba:63:a5:b7:68:0d:52:
                    07:d3:d1:de:f4:ff:b4:32:a0:6d:cd:de:c3:6f:ba:
                    9b:97:0e:d0:fb:af:a4:56:cb:38:45:4c:bf:78:c5:
                    d7:8a:a8:0c:cc:6d:dd:00:d0:10:24:69:ab:4d:bd:
                    ca:79:56:f3:be:ad:ad:ce:6d:08:14:a6:36:20:ab:
                    03:88:b5:5f:a5:2a:7e:a9:9d:7e:95:c7:27:d3:ae:
                    c7:26:06:71:4a:2f:35:1f:73:16:91:83:c7:c2:76:
                    45:95:32:f9:62:e0:ba:41:a2:a5:b6:4f:59:e8:5c:
                    35:41:14:4e:53:8a:36:cf:79:2c:70:b9:1f:2e:4d:
                    4b:6b:14:ff:88:2a:63:79:e3:2e:6c:c0:4c:3a:76:
                    76:95:b5:14:20:9c:5e:50:ca:64:ae:db:7b:cc:2f:
                    dc:9f:e9:3b:f5:b6:74:06:20:49:c6:88:22:4e:0d:
                    07:2c:7a:81:48:69:96:67:20:4a:49:ba:ec:51:ac:
                    d7:9e:ed:0d:79:5b:e5:39:5a:53:53:68:64:cc:30:
                    cd:58:19:90:22:5d:40:1d:37:cf:c9:b5:ce:98:c3:
                    a1:7c:d1:94:ef:11:53:f6:11:82:db:39:a7:6d:b0:
                    09:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:02:6A:69:28:C4:48:DC:AD:11:A6:E3:EB:6B:84:8F:DF:BD:09:F7
            X509v3 Authority Key Identifier:
                keyid:47:E4:22:33:ED:63:0B:0B:89:F5:2C:07:7F:F0:D5:C2:B3:7D:4D:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e94817-f259-4ffa-9ba3-7eb95cc0f749/1/6wJqaSjESNytEabj62uEj9-9Cfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e94817-f259-4ffa-9ba3-7eb95cc0f749/1/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.219.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:2c:1d:9c:9a:95:ef:41:87:86:42:e4:e2:55:aa:60:43:5e:
         91:21:6b:b2:7e:0c:bc:77:ad:df:50:ba:82:c0:e8:cd:df:93:
         99:c3:86:83:75:f0:d6:b1:1a:cd:c9:6e:8e:b4:8c:57:78:3c:
         91:6a:af:c0:3b:b1:b9:23:2f:c3:50:c5:62:05:66:36:19:37:
         fa:3b:3f:e4:63:7f:37:a1:03:ec:60:df:54:0b:be:0d:62:81:
         c0:d2:66:3c:ba:d5:88:24:e4:2e:2e:0c:54:6a:a8:97:ad:74:
         c0:e0:7d:f8:86:9b:de:79:e3:7b:1d:1f:4a:b1:dc:2a:53:c5:
         eb:73:04:12:c4:57:cc:2b:e5:69:17:20:d9:c7:37:89:5e:84:
         36:3c:57:3a:62:10:7c:30:e7:5d:69:3a:ef:2b:39:01:a2:f4:
         19:95:db:04:3c:b1:48:91:09:ff:b0:f7:ea:48:b8:a8:1e:51:
         9c:b7:66:de:43:5a:d6:d1:68:a5:4f:db:54:33:ab:51:4a:b5:
         3f:30:0a:63:47:43:a3:44:93:9f:23:f1:a7:23:0a:0b:10:09:
         f3:b8:24:49:01:ea:59:b2:1c:f5:b8:74:12:db:44:05:00:a9:
         a4:54:9b:3d:09:f9:bf:7a:7c:d2:26:26:ad:53:0b:b2:11:41:
         48:34:b1:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:58 2024 by rpki-client on console-fra.rpki-client.org