Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/bZZiy1OioGbiLiiQvJmM8_ZZF0Y.roa
File:                     bZZiy1OioGbiLiiQvJmM8_ZZF0Y.roa (raw, json)
Hash identifier:          FxV/Sc7NoJ8cdC6T508Dojz+fQeIiupvIT6pO8wGXUY=
Subject key identifier:   6D:96:62:CB:53:A2:A0:66:E2:2E:28:90:BC:99:8C:F3:F6:59:17:46
Certificate issuer:       /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial:       284D2C7B
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/bZZiy1OioGbiLiiQvJmM8_ZZF0Y.roa
Signing time:             Sat 01 Jan 2022 16:10:11 +0000
ROA not before:           Sat 01 Jan 2022 16:10:11 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209248
IP address blocks:        92.253.206.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 676146299 (0x284d2c7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
        Validity
            Not Before: Jan  1 16:10:11 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6d9662cb53a2a066e22e2890bc998cf3f6591746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2a:4c:d7:86:0e:78:7b:35:9b:d3:fd:da:a6:
                    b4:70:5c:9e:8b:93:10:de:0a:cd:e5:63:c2:15:1b:
                    b2:8e:b1:f5:d2:4a:89:54:12:3a:a5:d1:ba:a2:a6:
                    aa:f6:e7:4b:3e:72:a2:16:e3:eb:13:9e:4f:f3:9c:
                    e2:7c:38:3e:d3:7a:06:3c:f4:41:54:3b:c8:1c:ca:
                    8c:2a:0e:6f:8c:e5:4e:67:55:23:f3:4c:c0:f3:97:
                    da:1c:1f:10:4f:b5:68:9e:e3:10:93:eb:64:96:4b:
                    d9:4e:62:66:af:ce:54:d5:96:d4:84:b6:9c:a5:51:
                    cb:58:20:3f:12:90:34:d2:a7:cd:43:b5:07:12:ad:
                    c5:69:ba:f3:6e:14:24:41:1e:b4:ec:22:7b:df:75:
                    9c:9a:fa:93:2f:56:ba:01:21:fb:f3:19:2a:35:e9:
                    ca:7b:0f:f7:1c:7c:be:46:d2:8b:61:b0:a8:a6:a8:
                    34:ad:45:ac:05:30:e4:74:3b:fc:a9:28:df:4a:5e:
                    24:e2:bb:c7:98:d3:be:d8:a9:6e:81:8c:92:47:4c:
                    6a:cc:bd:78:aa:af:fc:67:b2:25:da:2d:47:12:76:
                    76:15:ac:b0:63:a7:da:65:38:e6:1e:38:c9:d2:57:
                    96:d6:36:9f:18:0f:1c:27:32:cc:2f:ff:78:fc:92:
                    e2:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:96:62:CB:53:A2:A0:66:E2:2E:28:90:BC:99:8C:F3:F6:59:17:46
            X509v3 Authority Key Identifier:
                keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/bZZiy1OioGbiLiiQvJmM8_ZZF0Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.253.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5f:85:46:7a:c2:91:a4:7c:63:61:5f:39:9c:00:0d:56:51:53:
         68:43:f8:49:86:21:4f:d2:5a:46:06:2d:40:ca:40:48:93:2c:
         77:f8:30:3b:c4:3b:7f:f5:3f:19:22:76:49:f9:ad:57:6b:7f:
         5d:3a:9f:3a:3b:20:b5:3a:b6:69:fc:76:c3:5c:9e:64:c2:f2:
         b7:49:e0:e9:39:77:1b:a8:c9:4e:37:b9:96:36:8b:0f:db:9e:
         07:3b:1f:42:83:4a:ff:07:90:75:33:33:72:af:6f:b1:92:4d:
         2a:04:39:cc:59:49:77:28:3f:81:a0:2b:b1:bd:40:e1:e3:b2:
         f2:59:a6:97:38:67:0b:80:7c:e5:50:29:85:38:bc:4e:b8:64:
         93:8c:b3:ec:bb:c3:5d:66:42:a1:c8:ca:0e:51:f8:84:ee:6e:
         10:4e:46:b0:ef:84:be:b1:ad:9b:97:87:0a:47:58:17:da:40:
         6c:7b:96:eb:00:0e:c8:77:c6:90:89:92:cb:0e:d0:ac:3e:26:
         a4:81:32:b6:14:d7:e6:0d:f3:2f:74:f9:b8:31:3c:bc:d5:cd:
         26:15:81:1f:b2:8d:57:2a:64:d8:ce:5c:f9:a1:05:5d:b0:e7:
         1c:68:4c:cd:31:bc:70:17:de:e9:fe:2b:97:db:51:6c:99:1e:
         c3:ec:54:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:51 2024 by rpki-client on console-ams.rpki-client.org