Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/0ZZmYErH1NJaGx_cIDxYw5DhbJg.roa
File:                     0ZZmYErH1NJaGx_cIDxYw5DhbJg.roa (raw, json)
Hash identifier:          c/m/G9yZyZeunQ7FBgXQ4WdsW5NsdGmxxcURP2C9tn4=
Subject key identifier:   D1:96:66:60:4A:C7:D4:D2:5A:1B:1F:DC:20:3C:58:C3:90:E1:6C:98
Certificate issuer:       /CN=84bbaeb70b3f1d06716358ad9a2ecfef7d2126fb
Certificate serial:       07ABB4FC
Authority key identifier: 84:BB:AE:B7:0B:3F:1D:06:71:63:58:AD:9A:2E:CF:EF:7D:21:26:FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hLuutws_HQZxY1itmi7P730hJvs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/0ZZmYErH1NJaGx_cIDxYw5DhbJg.roa
Signing time:             Sat 01 Jan 2022 16:02:25 +0000
ROA not before:           Sat 01 Jan 2022 16:02:25 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     42910
IP address blocks:        185.179.24.0/24 maxlen: 24
                          185.179.27.0/24 maxlen: 24
                          185.179.26.0/24 maxlen: 24
                          185.179.25.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 128693500 (0x7abb4fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84bbaeb70b3f1d06716358ad9a2ecfef7d2126fb
        Validity
            Not Before: Jan  1 16:02:25 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d19666604ac7d4d25a1b1fdc203c58c390e16c98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c4:74:0a:31:ec:81:ce:8a:98:a7:2e:c0:bc:
                    26:f7:2e:ad:a3:9e:01:69:8a:f8:16:d4:fe:d5:4e:
                    eb:44:93:d0:0f:7d:1e:2c:2a:b6:d8:e7:a6:44:cd:
                    35:f3:c2:e6:6b:d0:4c:46:a5:9b:bd:45:73:ec:bd:
                    95:a8:38:68:5f:09:c9:44:b1:86:fb:59:ee:2a:08:
                    05:68:70:ae:4b:d4:42:88:4f:33:81:0b:19:b6:44:
                    ea:f3:ec:bb:65:67:be:64:37:07:f6:8a:da:c8:8c:
                    a1:c8:5b:69:bb:68:8a:9c:d0:47:5a:50:34:85:a4:
                    51:13:51:2c:d7:98:f0:57:94:78:35:4d:4c:59:46:
                    88:52:f4:b2:6b:ca:b6:9e:7a:de:e0:5d:af:9e:8a:
                    98:07:cb:b7:f7:b7:41:02:7b:16:c5:4b:46:f9:e3:
                    28:65:36:86:78:ba:54:5a:6b:c7:5a:2a:29:67:75:
                    f6:6a:ce:20:e0:29:e0:a9:8d:f5:1a:cf:5d:c7:f3:
                    c8:f1:89:6c:8c:6a:51:98:5a:00:0a:8d:e2:25:80:
                    3c:12:78:29:3d:9d:80:d5:97:b0:7e:81:59:5f:40:
                    d5:38:56:7e:f1:57:23:aa:f1:58:b8:83:a4:21:81:
                    f8:94:b4:5f:a1:8f:e0:17:ea:08:8c:a9:b7:44:c7:
                    c2:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:96:66:60:4A:C7:D4:D2:5A:1B:1F:DC:20:3C:58:C3:90:E1:6C:98
            X509v3 Authority Key Identifier:
                keyid:84:BB:AE:B7:0B:3F:1D:06:71:63:58:AD:9A:2E:CF:EF:7D:21:26:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLuutws_HQZxY1itmi7P730hJvs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/0ZZmYErH1NJaGx_cIDxYw5DhbJg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.179.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b8:af:bd:61:1a:62:23:3e:5e:73:54:80:28:c2:b1:ca:2e:57:
         d1:68:12:d1:e3:51:84:b7:49:b6:65:b5:73:8e:c3:5a:16:24:
         42:1e:52:a8:92:69:a2:10:97:89:f5:7c:97:25:bc:e9:f0:ad:
         38:27:30:b2:08:8d:87:45:3c:b7:1a:0d:b8:44:c6:13:e1:23:
         4f:cc:12:3b:09:6e:3d:b6:a1:9b:3d:fd:e9:68:04:28:1d:3c:
         76:a7:d7:01:a5:08:e5:9e:63:86:af:89:1f:67:15:e9:ad:34:
         e5:17:51:fd:a1:ac:07:4e:45:bf:33:64:98:27:fb:07:b9:33:
         45:45:6f:c9:90:ba:75:41:3d:3f:64:9c:35:6c:ad:44:05:6b:
         83:19:b2:c6:70:73:93:cc:8f:aa:d7:7c:cf:29:9b:a1:ff:b0:
         1d:8c:81:c7:81:f4:f7:e8:e5:22:07:33:74:42:7f:04:b5:4b:
         e8:21:e9:a8:c5:25:da:11:d4:2e:87:86:00:9a:99:d9:2f:8d:
         68:5b:37:44:ec:5e:3d:c7:54:d8:cf:3d:bd:4b:02:14:46:98:
         64:a7:44:d0:be:88:4e:bf:ed:ec:b5:d9:4d:d0:2b:f8:5e:03:
         bd:2e:e4:a1:58:8d:a1:e5:d0:18:0d:14:18:99:b2:d8:25:1e:
         1a:e6:d1:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:32 2024 by rpki-client on console-ams.rpki-client.org