Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/vGESW_voIx6SZRrHlLFxNylU-OY.roa
File:                     vGESW_voIx6SZRrHlLFxNylU-OY.roa (raw, json)
Hash identifier:          aYaFpD2ZhWKIIDl5bmkK/Qosr7TsVj2xQEMykiNAtsM=
Subject key identifier:   BC:61:12:5B:FB:E8:23:1E:92:65:1A:C7:94:B1:71:37:29:54:F8:E6
Certificate issuer:       /CN=473163527e83542dce693b16d0aedcd126d3319a
Certificate serial:       160C5E70
Authority key identifier: 47:31:63:52:7E:83:54:2D:CE:69:3B:16:D0:AE:DC:D1:26:D3:31:9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RzFjUn6DVC3OaTsW0K7c0SbTMZo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/vGESW_voIx6SZRrHlLFxNylU-OY.roa
Signing time:             Sat 01 Jan 2022 06:01:26 +0000
ROA not before:           Sat 01 Jan 2022 06:01:26 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     201152
IP address blocks:        185.55.248.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 369909360 (0x160c5e70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=473163527e83542dce693b16d0aedcd126d3319a
        Validity
            Not Before: Jan  1 06:01:26 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=bc61125bfbe8231e92651ac794b171372954f8e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:71:c1:a3:ce:ae:46:4e:db:61:e3:8a:e6:0c:
                    15:96:6b:45:9d:33:b2:0b:57:e9:64:c6:cb:f6:11:
                    29:60:01:44:39:26:45:ef:78:f1:c0:8c:73:b3:87:
                    2d:83:31:82:45:3e:70:10:f7:89:b0:ea:3f:ab:b3:
                    bc:76:07:39:ef:51:a9:a3:ac:4c:af:cd:16:7e:12:
                    23:3c:90:b8:21:36:7f:ac:36:ea:1a:e3:e7:43:60:
                    51:b3:d4:a3:7b:ae:3b:fa:64:0b:80:41:ef:08:1e:
                    4a:e2:30:32:57:0e:70:2e:1f:79:76:e0:4e:bb:4d:
                    a0:68:ba:c0:5f:58:aa:5a:14:3f:67:68:5d:60:b5:
                    9c:40:92:9e:53:a7:6a:38:7a:07:e4:7f:2f:97:8e:
                    6f:a8:23:a6:d4:ab:b5:48:d3:d1:e7:d4:bc:3d:17:
                    6a:9c:4f:e2:f2:4f:8d:26:58:67:00:02:89:26:a4:
                    d2:c1:9d:f8:a8:45:df:5e:8c:59:d8:e8:80:3a:c3:
                    4e:9b:74:ca:c4:1d:b6:21:db:23:b0:46:b0:6a:85:
                    d3:1d:f3:b6:29:81:9f:ca:9b:8b:aa:f7:c1:68:a3:
                    e1:f6:1c:ae:4c:c8:59:b5:e1:41:41:b9:c2:ce:d1:
                    fe:40:b5:4f:af:02:e0:13:e7:06:f1:85:64:6a:69:
                    36:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:61:12:5B:FB:E8:23:1E:92:65:1A:C7:94:B1:71:37:29:54:F8:E6
            X509v3 Authority Key Identifier:
                keyid:47:31:63:52:7E:83:54:2D:CE:69:3B:16:D0:AE:DC:D1:26:D3:31:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzFjUn6DVC3OaTsW0K7c0SbTMZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/vGESW_voIx6SZRrHlLFxNylU-OY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.55.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:d4:2c:92:f5:cc:5c:36:e1:f9:a7:54:ff:ea:a5:83:1a:bf:
         c4:99:81:68:b2:d3:8b:57:47:aa:6b:20:61:c0:55:98:55:02:
         ca:e5:2f:32:06:97:52:d0:df:c1:33:31:c9:35:6f:cc:97:9f:
         df:74:c4:e5:d6:56:2f:94:07:14:24:85:d0:bc:a8:32:ff:66:
         cf:65:96:51:de:5d:ba:36:81:b0:73:a0:c5:a2:6c:ac:42:bc:
         93:2f:6a:96:e8:9c:de:df:f9:25:c3:fa:28:7c:2f:af:ce:ab:
         44:7f:93:e7:c0:25:6a:19:21:7a:9f:fb:70:3c:44:6a:6e:a5:
         15:b2:4e:ab:f1:e0:6d:c8:13:de:8e:0d:db:30:10:bf:fc:ec:
         46:a8:35:22:f3:ee:da:e6:69:49:fb:23:92:eb:30:a5:f7:c1:
         1c:07:13:bf:86:69:cf:1b:1f:fc:3f:2b:3f:d8:1c:79:90:75:
         51:fd:2a:f7:74:4f:01:6e:5a:ae:5d:ce:4d:ba:d0:e1:6a:7b:
         55:3b:d8:06:17:6f:8f:e2:7b:3f:76:15:51:fd:6d:74:bb:5e:
         b7:f6:f2:41:65:4b:de:6e:81:f6:73:6c:5b:d4:06:d4:4a:e8:
         a0:33:f0:2b:73:84:c0:37:79:d7:fe:43:d5:82:53:11:3f:0f:
         29:4d:da:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:43 2024 by rpki-client on console-ams.rpki-client.org