Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/dM4r-J3yAzkHGiVKAV3EDEcuw20.roa
File:                     dM4r-J3yAzkHGiVKAV3EDEcuw20.roa (raw, json)
Hash identifier:          Xu9yD07ljYK+84YLhEEEcbUfU8hj2se9Y4BkytSxAW0=
Subject key identifier:   74:CE:2B:F8:9D:F2:03:39:07:1A:25:4A:01:5D:C4:0C:47:2E:C3:6D
Certificate issuer:       /CN=c9d6b59a93e324083fbca4237e47e9f5ebf371ab
Certificate serial:       018516E354FBCE4F961F9AC47DAF9D438269
Authority key identifier: C9:D6:B5:9A:93:E3:24:08:3F:BC:A4:23:7E:47:E9:F5:EB:F3:71:AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/dM4r-J3yAzkHGiVKAV3EDEcuw20.roa
Signing time:             Thu 15 Dec 2022 17:44:35 +0000
ROA not before:           Thu 15 Dec 2022 17:44:35 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60721
IP address blocks:        185.193.165.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:16:e3:54:fb:ce:4f:96:1f:9a:c4:7d:af:9d:43:82:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9d6b59a93e324083fbca4237e47e9f5ebf371ab
        Validity
            Not Before: Dec 15 17:44:35 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=74ce2bf89df20339071a254a015dc40c472ec36d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c1:ed:7e:9c:35:36:ce:d2:f5:58:fb:ff:a8:
                    05:26:ca:11:a8:25:1a:5f:61:0a:1a:49:4b:b2:37:
                    6e:bd:cd:61:3c:10:b4:52:c9:51:9c:ae:ab:3e:9c:
                    9f:fc:53:f5:17:5c:5a:bf:18:a0:78:50:de:35:fc:
                    a0:74:25:4b:13:06:91:fb:d9:23:79:8d:66:53:9b:
                    84:b5:8c:0b:8c:cc:a6:40:0e:47:73:e0:ca:d0:34:
                    76:19:cf:e4:0f:3b:d6:08:df:f9:bf:14:28:04:8f:
                    7e:3d:46:1a:be:8e:15:01:10:af:c8:ad:10:35:05:
                    ac:8c:39:2a:44:16:e3:a2:f0:db:9e:36:7c:cd:e9:
                    71:20:67:90:8c:08:d3:cb:76:a8:44:77:cb:d8:01:
                    91:e6:54:9c:c7:14:d3:9f:ab:31:44:8e:15:06:fb:
                    8e:84:5f:b8:4e:6c:a1:17:ed:15:82:ec:c8:6f:21:
                    92:6f:9f:36:cb:cf:80:cf:f3:47:cb:40:df:d6:cf:
                    d6:da:1b:e5:b3:6a:a7:35:53:39:6f:46:69:a4:30:
                    13:7b:9d:91:c6:fb:65:72:ff:2f:cd:f2:eb:41:f3:
                    6d:a8:9c:dc:40:2f:bc:1b:3f:99:91:3f:70:25:6d:
                    0a:86:6c:90:e6:2b:1e:59:cc:af:17:00:a7:34:c6:
                    3d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:CE:2B:F8:9D:F2:03:39:07:1A:25:4A:01:5D:C4:0C:47:2E:C3:6D
            X509v3 Authority Key Identifier:
                keyid:C9:D6:B5:9A:93:E3:24:08:3F:BC:A4:23:7E:47:E9:F5:EB:F3:71:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/dM4r-J3yAzkHGiVKAV3EDEcuw20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.193.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:65:ea:5e:7e:24:8c:3c:5f:62:5e:a5:78:88:7c:79:3a:e9:
         f1:1b:38:4c:a8:32:a3:5f:e9:1b:9a:05:f1:d8:f7:d5:3a:a6:
         aa:70:d6:1c:07:2d:78:f6:40:48:e9:22:77:52:2c:fa:d2:24:
         31:9b:57:42:fc:af:a5:ce:83:61:77:59:36:98:14:39:78:78:
         fc:ba:54:08:27:9f:02:fd:ce:00:cd:c4:71:9b:5c:1c:47:97:
         7f:ee:1f:4e:02:9b:20:79:d0:67:99:b0:2e:54:93:ba:cf:a2:
         f1:80:f8:1c:2e:dd:05:6e:af:91:f9:38:6c:bd:88:5c:54:89:
         f2:76:f6:53:56:6d:50:d9:ce:80:10:e0:b8:fc:ed:88:cc:d5:
         2d:d8:7f:af:d5:30:e1:24:47:34:a1:30:e5:de:71:73:ca:c6:
         f5:03:4a:40:4c:55:14:75:a5:60:49:b3:82:20:01:89:dc:f4:
         3a:2c:bd:14:53:b8:9e:a2:a4:05:e0:4c:58:82:5e:2e:2b:bb:
         cb:64:8e:4c:a7:25:97:a2:c0:a8:f4:58:33:9e:5d:af:c2:5c:
         2b:16:f0:ba:c3:b7:aa:bb:eb:2f:41:48:1b:fb:5d:7b:76:79:
         79:72:3b:c5:3f:91:f3:ec:0c:ac:93:9c:35:c6:c3:a2:75:0d:
         16:c8:8a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:30 2024 by rpki-client on console-fra.rpki-client.org