Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/pVrgllzVi_poDaAp01HnVgWLPXc.roa
File:                     pVrgllzVi_poDaAp01HnVgWLPXc.roa (raw, json)
Hash identifier:          bXaEcA8JcyzBDhVElqnpLSsjA2EpzXwn6JKGgcTF24M=
Subject key identifier:   A5:5A:E0:96:5C:D5:8B:FA:68:0D:A0:29:D3:51:E7:56:05:8B:3D:77
Certificate issuer:       /CN=c9d6b59a93e324083fbca4237e47e9f5ebf371ab
Certificate serial:       018516E3547BBD20E5F172FFBE258A80C394
Authority key identifier: C9:D6:B5:9A:93:E3:24:08:3F:BC:A4:23:7E:47:E9:F5:EB:F3:71:AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/pVrgllzVi_poDaAp01HnVgWLPXc.roa
Signing time:             Thu 15 Dec 2022 17:44:35 +0000
ROA not before:           Thu 15 Dec 2022 17:44:35 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     43260
IP address blocks:        185.193.165.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:16:e3:54:7b:bd:20:e5:f1:72:ff:be:25:8a:80:c3:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9d6b59a93e324083fbca4237e47e9f5ebf371ab
        Validity
            Not Before: Dec 15 17:44:35 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a55ae0965cd58bfa680da029d351e756058b3d77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:2f:c0:55:79:b1:f5:8c:d1:63:50:fb:e4:ec:
                    c0:47:6b:34:d2:7b:8e:fc:ed:e1:3d:49:e3:25:3b:
                    9f:bc:0f:1d:9d:2d:6b:22:80:fc:45:62:98:f2:59:
                    22:94:7c:13:8b:aa:4c:d7:c5:aa:79:86:a6:d5:fa:
                    54:f0:d4:16:63:b6:db:27:a8:04:dc:ef:a7:48:05:
                    fc:b1:69:ae:da:e6:c0:f8:df:4b:38:59:2d:d5:2c:
                    38:c3:42:85:ba:3c:a1:85:3d:bf:52:87:80:be:09:
                    ed:5c:cb:e1:9a:31:c6:01:9e:87:0d:be:cb:39:1f:
                    e3:97:af:bc:6c:91:5e:55:d5:d3:83:5a:0c:ee:ed:
                    ee:ec:3c:42:96:35:7e:c6:bf:de:7d:be:19:1b:47:
                    a5:a8:ad:3c:31:6a:f5:17:59:e1:56:b5:53:f5:3f:
                    36:10:0d:0f:89:fc:df:5f:c9:ff:f8:bd:f6:d2:a3:
                    1e:31:c4:ee:ef:36:bf:02:b9:b4:45:c8:12:fe:fe:
                    d5:70:6e:80:eb:96:e0:c7:c8:63:83:ff:1c:12:fd:
                    03:96:51:36:b7:af:ba:40:b0:a8:ba:e4:bc:5a:44:
                    7d:e8:61:fa:63:07:7b:db:3a:ef:e6:de:ca:d6:49:
                    e2:6a:83:45:13:44:72:ea:69:42:fb:04:7f:78:34:
                    fd:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:5A:E0:96:5C:D5:8B:FA:68:0D:A0:29:D3:51:E7:56:05:8B:3D:77
            X509v3 Authority Key Identifier:
                keyid:C9:D6:B5:9A:93:E3:24:08:3F:BC:A4:23:7E:47:E9:F5:EB:F3:71:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/pVrgllzVi_poDaAp01HnVgWLPXc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.193.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:93:32:17:be:f3:d1:12:28:90:d9:10:70:07:87:7e:4e:7b:
         cd:24:e5:b6:3b:af:50:09:c8:47:4e:67:a6:6f:70:ce:70:89:
         a7:95:0b:21:10:84:68:a7:63:2b:37:b6:b8:66:3d:9c:47:e4:
         59:3b:31:ed:e3:16:88:c9:4c:b2:db:5b:b3:aa:1b:72:df:45:
         49:28:7c:ae:aa:ce:c6:1f:77:aa:d6:41:0b:dc:7e:7f:31:f9:
         4d:c5:22:e7:ad:e2:fb:58:5f:61:90:77:a6:1e:00:f0:d4:4d:
         75:9a:4a:1d:ec:17:0f:58:9c:d6:f2:ef:83:67:a0:cb:e2:2c:
         24:03:69:06:db:12:52:bd:a8:d1:7e:12:cb:16:da:91:70:08:
         b2:7c:33:1f:05:06:d0:20:b8:ca:29:e6:22:c1:d8:83:d4:39:
         ef:cc:b9:b6:7b:96:39:fd:d5:34:b5:08:4e:95:94:d0:fa:4c:
         0e:fe:59:01:4b:58:cf:53:ca:45:3a:a2:bf:f6:22:5c:12:fe:
         e3:a8:73:0b:10:ae:74:6e:c8:27:d2:d2:4d:7a:82:69:66:cc:
         57:17:61:37:2e:b9:23:cc:ed:af:0c:04:16:2e:b0:1f:b0:e0:
         7f:ab:bb:41:2a:13:f6:91:d3:a3:0c:86:e1:39:a3:8d:d5:92:
         9d:36:25:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:41 2024 by rpki-client on console-ams.rpki-client.org