Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/7g3_GBOq8B7Q7d3VsczEQgsPZfE.roa
File:                     7g3_GBOq8B7Q7d3VsczEQgsPZfE.roa (raw, json)
Hash identifier:          X6vusnQbX24nsWcNGDR9RBLgIMa84aIRt98u/mWymI4=
Subject key identifier:   EE:0D:FF:18:13:AA:F0:1E:D0:ED:DD:D5:B1:CC:C4:42:0B:0F:65:F1
Certificate issuer:       /CN=c9d6b59a93e324083fbca4237e47e9f5ebf371ab
Certificate serial:       09AA2BB7
Authority key identifier: C9:D6:B5:9A:93:E3:24:08:3F:BC:A4:23:7E:47:E9:F5:EB:F3:71:AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/7g3_GBOq8B7Q7d3VsczEQgsPZfE.roa
Signing time:             Mon 21 Feb 2022 14:09:23 +0000
ROA not before:           Mon 21 Feb 2022 14:09:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     396356
IP address blocks:        185.193.164.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 162147255 (0x9aa2bb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9d6b59a93e324083fbca4237e47e9f5ebf371ab
        Validity
            Not Before: Feb 21 14:09:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ee0dff1813aaf01ed0edddd5b1ccc4420b0f65f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:73:ea:01:f3:a4:ae:3c:7c:d0:f1:0c:72:24:
                    81:5b:8c:fc:e4:20:4d:9f:42:9a:d4:41:fa:2c:9e:
                    ea:9d:18:3f:0b:07:49:df:51:ef:9e:fa:d5:9e:5f:
                    74:9c:d3:a2:cd:35:33:a8:36:8b:29:36:e2:1b:ea:
                    f5:ad:d5:46:9f:96:ff:5d:9e:50:df:d9:d1:2c:5a:
                    0a:58:12:34:44:72:1b:2c:9a:ae:d6:c9:d4:da:c1:
                    ef:c9:f7:8e:7e:6c:b3:a3:42:0c:8e:71:94:6a:bb:
                    5d:f7:bb:11:28:5b:86:75:0d:85:47:d1:2c:d6:58:
                    ca:2b:50:3f:da:cd:3e:47:8c:89:a6:2c:89:67:cb:
                    20:0f:ec:9f:32:73:1f:94:a5:2f:8b:47:18:b2:a3:
                    06:7d:0d:43:c8:fc:f4:cf:bf:94:b0:eb:d3:1d:ae:
                    ae:e5:aa:ef:89:bc:f6:95:c7:a3:f9:fa:c2:76:97:
                    4e:53:7c:e3:90:55:e5:46:f1:72:51:c1:7c:0d:a7:
                    97:58:ae:7c:03:4c:2b:ef:f7:07:77:c4:5c:dd:ba:
                    2f:51:0c:a3:2d:4c:9a:92:f3:ea:e8:20:58:80:6a:
                    10:fc:12:bd:97:df:91:46:48:6c:98:0a:b9:27:8f:
                    41:62:8e:86:b6:6f:b9:99:7a:3b:89:32:ac:8e:8a:
                    77:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:0D:FF:18:13:AA:F0:1E:D0:ED:DD:D5:B1:CC:C4:42:0B:0F:65:F1
            X509v3 Authority Key Identifier:
                keyid:C9:D6:B5:9A:93:E3:24:08:3F:BC:A4:23:7E:47:E9:F5:EB:F3:71:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/7g3_GBOq8B7Q7d3VsczEQgsPZfE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.193.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cc:4e:c3:17:7a:40:f4:63:fd:2a:a3:93:57:47:31:90:a4:70:
         96:05:86:46:d0:b4:69:2f:88:7d:44:c7:55:76:76:b9:54:03:
         57:68:0b:8e:e0:2b:00:e3:ae:49:02:73:c4:b7:51:f2:81:11:
         8d:62:74:c7:ce:63:77:e9:bc:b9:e9:55:d3:69:da:87:05:03:
         e3:01:10:34:8f:1b:e2:36:22:61:eb:93:1d:16:61:4b:00:2b:
         40:c1:93:83:ea:65:67:a8:cd:de:42:ae:b0:d9:ab:0c:1d:f6:
         50:e9:c8:99:5b:ed:d8:27:38:81:f1:5c:85:27:24:c3:e8:b5:
         e5:b4:f2:3f:d7:1a:5d:27:ae:c3:c4:e6:fa:74:f9:45:ca:8d:
         6d:f6:d2:19:98:a1:fa:80:0a:fb:a4:4f:67:1e:05:52:f3:66:
         61:70:93:e0:80:79:d7:d3:a3:55:70:e5:3f:7a:60:35:e0:05:
         dd:07:c1:1f:4d:fd:e5:87:b5:89:58:6e:52:f4:46:0b:f8:2d:
         51:a0:2c:1e:99:c5:75:07:ad:67:ac:af:b4:67:85:fa:5c:2d:
         13:94:5b:3b:2d:b9:9b:95:49:87:e9:9e:a6:6e:31:d1:8e:13:
         63:c9:ff:85:e4:f3:20:bf:b9:31:10:f2:90:96:db:cd:19:0b:
         18:23:18:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:30 2024 by rpki-client on console-fra.rpki-client.org