Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/bb4ZfogNyzlg47SSSYn-iheYFBE.roa
File:                     bb4ZfogNyzlg47SSSYn-iheYFBE.roa (raw, json)
Hash identifier:          a+in/oOOTuul9psugfmJ4OuTFpZVzkE4uGAkKFLIF4s=
Subject key identifier:   6D:BE:19:7E:88:0D:CB:39:60:E3:B4:92:49:89:FE:8A:17:98:14:11
Certificate issuer:       /CN=22f35c611c29234bf4b40b35990ddfa293a537f9
Certificate serial:       0424101F
Authority key identifier: 22:F3:5C:61:1C:29:23:4B:F4:B4:0B:35:99:0D:DF:A2:93:A5:37:F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IvNcYRwpI0v0tAs1mQ3fopOlN_k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/bb4ZfogNyzlg47SSSYn-iheYFBE.roa
Signing time:             Thu 23 Jun 2022 06:57:33 +0000
ROA not before:           Thu 23 Jun 2022 06:57:33 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     44217
IP address blocks:        185.181.110.0/24 maxlen: 24
                          185.181.111.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 69472287 (0x424101f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22f35c611c29234bf4b40b35990ddfa293a537f9
        Validity
            Not Before: Jun 23 06:57:33 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6dbe197e880dcb3960e3b4924989fe8a17981411
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c2:a4:c8:21:71:ac:b3:e7:6d:57:0d:f9:07:
                    2e:64:26:aa:d7:ed:16:9a:b3:b2:d6:76:44:97:00:
                    31:97:fa:76:4b:8b:4b:18:12:11:f4:3f:07:b3:03:
                    62:86:fc:d3:dc:82:3f:eb:2e:a8:d9:b2:cb:8b:95:
                    b3:48:af:78:fd:f6:51:b6:fc:6c:87:78:59:a0:2c:
                    8b:e4:58:f1:2a:ca:9b:2b:88:a2:24:cd:f5:d6:72:
                    cd:b5:29:2e:7f:45:3d:ec:41:d1:12:e2:02:29:11:
                    e7:82:71:89:6a:cb:9c:96:3b:d1:66:0b:f0:9f:f5:
                    a9:07:12:1a:bb:8c:4e:02:5b:59:eb:7a:60:39:a3:
                    28:e3:86:69:31:01:e2:cc:b2:e0:e2:34:0a:9c:5d:
                    66:db:b9:8a:fc:62:e1:fc:9c:b1:9b:37:5e:65:05:
                    5c:5e:32:ae:79:99:72:1b:be:eb:45:76:5a:60:9d:
                    8d:e5:56:97:f2:fe:34:b5:9e:45:0f:4b:fb:26:4f:
                    09:ec:e9:b8:4e:27:d4:eb:53:35:d2:66:51:a5:05:
                    e3:87:e0:a2:2a:d3:c3:27:47:94:15:59:d5:42:09:
                    47:ad:b5:8b:77:74:b1:9e:32:50:76:57:33:bb:02:
                    09:43:6f:bb:f2:33:8d:94:4f:80:24:d4:fa:b1:7d:
                    8b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:BE:19:7E:88:0D:CB:39:60:E3:B4:92:49:89:FE:8A:17:98:14:11
            X509v3 Authority Key Identifier:
                keyid:22:F3:5C:61:1C:29:23:4B:F4:B4:0B:35:99:0D:DF:A2:93:A5:37:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNcYRwpI0v0tAs1mQ3fopOlN_k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/bb4ZfogNyzlg47SSSYn-iheYFBE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.181.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         61:d2:6a:9c:12:57:43:0f:e2:00:57:5c:6b:40:b1:29:cd:88:
         87:7b:ce:31:5a:a1:bf:87:a0:02:2c:21:62:c8:ec:df:e9:40:
         02:75:e3:0a:88:ec:2f:a1:03:53:9a:30:58:62:42:8d:20:e3:
         28:0e:6a:16:44:4d:2d:4a:92:d5:a4:0d:20:67:a0:cd:28:df:
         b4:21:2f:fb:96:1b:2e:0b:20:8f:f7:8e:9d:10:77:32:4f:3c:
         be:d9:71:39:8a:27:92:01:50:0a:e1:f4:94:61:16:e4:b1:03:
         e2:2b:11:ad:00:18:9c:04:f7:c8:06:8a:ea:b1:0d:3a:c3:8a:
         1d:09:50:27:bf:3b:2a:9b:4d:9f:1f:6f:f6:15:64:dd:cb:d7:
         72:91:18:33:2a:50:e0:2f:fc:b6:74:f7:1c:8b:a3:a8:a1:c3:
         9b:10:33:a8:85:2a:e8:fd:3d:5b:30:39:de:8b:a8:82:08:f2:
         3c:5d:18:8f:6b:d8:2b:c0:22:d3:9f:44:46:a2:2e:b1:4d:8a:
         cf:29:77:b4:a9:42:00:be:1c:2b:0c:38:b7:a1:11:45:92:6f:
         f4:d5:ac:8e:3b:53:ef:bc:4e:4a:94:df:b5:d1:01:9d:9f:5a:
         22:f3:fb:70:6e:93:c1:27:b4:0a:3c:13:09:70:1a:59:4e:61:
         80:80:64:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:06 2024 by rpki-client on console-fra.rpki-client.org