Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/B6Y_VY1BvnetwWP_BO8W3N08m1Y.roa
File:                     B6Y_VY1BvnetwWP_BO8W3N08m1Y.roa (raw, json)
Hash identifier:          UbqmXrNykpyC9M9nGSy+D3frDKp5z0Rd9wPtskCnMiM=
Subject key identifier:   07:A6:3F:55:8D:41:BE:77:AD:C1:63:FF:04:EF:16:DC:DD:3C:9B:56
Certificate issuer:       /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial:       284A6990
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/B6Y_VY1BvnetwWP_BO8W3N08m1Y.roa
Signing time:             Sat 01 Jan 2022 16:10:05 +0000
ROA not before:           Sat 01 Jan 2022 16:10:05 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209074
IP address blocks:        92.253.201.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 675965328 (0x284a6990)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
        Validity
            Not Before: Jan  1 16:10:05 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=07a63f558d41be77adc163ff04ef16dcdd3c9b56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:05:4a:48:d7:44:01:d3:18:b2:19:1b:38:43:
                    12:18:ac:a6:ec:fb:cb:82:c7:70:10:32:d7:99:f0:
                    8f:12:13:11:ca:60:8c:14:42:df:84:8d:ff:fb:6f:
                    74:78:3e:ca:72:e5:a3:11:90:29:af:fd:37:a3:80:
                    b8:4a:46:e5:f3:15:7a:41:82:ca:cc:cb:da:4d:ab:
                    e7:95:3c:43:55:37:9f:f8:bc:4b:43:9a:c0:8b:d9:
                    ee:35:22:85:74:02:1c:a4:ba:46:a0:53:11:07:d9:
                    b8:b5:fe:f3:47:33:07:c5:25:db:c4:dc:9e:4b:7f:
                    6c:61:92:ff:3f:fd:60:d3:04:3b:c2:71:8d:52:52:
                    33:21:16:d3:ef:b2:5c:aa:67:b8:be:5b:8d:01:f0:
                    96:f3:0d:55:52:32:8a:fb:62:8f:02:bb:96:1b:5e:
                    ec:c5:bb:fa:f5:9f:8f:f5:ca:21:42:f8:62:e1:27:
                    f9:78:15:5c:6b:81:99:37:b2:11:8b:59:b1:c3:3d:
                    10:54:dc:a3:eb:77:85:68:e7:01:fb:95:a4:39:8f:
                    90:a1:51:cb:bf:50:ea:cd:96:3b:10:20:73:24:2c:
                    04:38:02:dc:0d:af:8c:fa:6a:b7:45:73:38:61:83:
                    ca:82:e1:06:23:42:5e:1f:f6:85:66:5d:7c:6b:9d:
                    a6:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:A6:3F:55:8D:41:BE:77:AD:C1:63:FF:04:EF:16:DC:DD:3C:9B:56
            X509v3 Authority Key Identifier:
                keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/B6Y_VY1BvnetwWP_BO8W3N08m1Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.253.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:20:4d:d6:a2:3b:bb:ef:9c:4d:05:b1:c2:c9:e3:d6:71:ec:
         3b:c2:23:ef:0e:e4:d0:06:93:de:af:e0:d2:1b:1e:0f:d0:eb:
         ad:fd:38:1b:5c:54:b4:21:d3:82:df:92:54:e4:de:bb:86:42:
         f2:9d:28:7e:8f:54:86:2f:68:28:5b:c0:35:0c:eb:9d:00:39:
         62:94:0e:74:b4:2a:f0:a7:cc:c6:5b:82:fa:37:f9:4a:8e:8e:
         39:f8:f5:43:94:34:40:b2:f2:cb:ea:84:bb:ac:2b:b4:79:82:
         1f:36:a4:06:9f:f9:8a:44:af:ed:67:31:b9:3a:e5:43:cd:e1:
         47:0b:e6:d6:cf:94:00:e5:da:15:b6:5f:9a:a9:57:f8:fa:fb:
         d8:69:89:cf:5d:7d:c4:26:5e:a9:47:0a:20:14:f8:34:6a:b1:
         21:f6:bf:c4:dd:1c:e8:23:96:f7:00:a3:ef:e4:56:5e:aa:53:
         85:7b:bc:8b:f5:17:de:7c:98:5d:fd:f5:70:17:08:6f:32:a8:
         b8:96:eb:e8:e9:53:19:ae:92:77:59:a1:ac:1d:36:19:b8:48:
         0e:84:72:78:c5:e3:c7:c8:bc:e7:62:60:5e:73:b2:d6:e6:8b:
         20:47:49:eb:1c:f3:9f:bf:4d:97:9e:63:20:62:a4:ee:4b:27:
         43:50:91:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:43:56 2025 by rpki-client