Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/2d5960-c66d-42df-95d2-4052450c90a9/1/wJ5dTW-kL_cl2ySWTYUTQ98Hj50.roa
File:                     wJ5dTW-kL_cl2ySWTYUTQ98Hj50.roa (raw, json)
Hash identifier:          HUV5bZOX0vKqinq5z+PIuEZAcYLhU3GGSD2Lhn3wbw0=
Subject key identifier:   C0:9E:5D:4D:6F:A4:2F:F7:25:DB:24:96:4D:85:13:43:DF:07:8F:9D
Certificate issuer:       /CN=a7c7544e8b482d2311903706eed724049fe385bf
Certificate serial:       01C79825
Authority key identifier: A7:C7:54:4E:8B:48:2D:23:11:90:37:06:EE:D7:24:04:9F:E3:85:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p8dUTotILSMRkDcG7tckBJ_jhb8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/2d5960-c66d-42df-95d2-4052450c90a9/1/wJ5dTW-kL_cl2ySWTYUTQ98Hj50.roa
Signing time:             Sat 01 Jan 2022 09:00:54 +0000
ROA not before:           Sat 01 Jan 2022 09:00:54 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     33932
IP address blocks:        185.120.182.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29857829 (0x1c79825)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7c7544e8b482d2311903706eed724049fe385bf
        Validity
            Not Before: Jan  1 09:00:54 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c09e5d4d6fa42ff725db24964d851343df078f9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:82:ec:f7:fc:27:e4:3e:82:52:17:8b:3d:ac:
                    b2:ef:21:ef:e7:28:3e:dd:dc:29:12:00:77:ae:f5:
                    f4:31:8f:d6:06:bf:e6:63:9a:62:25:42:d4:e5:4f:
                    69:3b:bc:be:97:bf:d4:4a:e9:e9:11:56:93:8e:f7:
                    0f:dd:22:0f:38:7c:93:63:f6:24:32:25:82:4a:30:
                    98:fe:cf:16:95:99:57:3b:eb:e8:09:6a:b9:2c:1e:
                    18:aa:32:99:55:fc:bc:45:17:5a:df:62:0a:67:6b:
                    3c:4e:89:43:b1:60:34:a1:63:8b:cd:bf:76:ce:44:
                    31:53:09:a1:5c:77:28:f7:8f:a2:40:06:37:fe:f8:
                    42:65:6b:eb:3d:1c:6e:23:27:98:01:de:4e:62:cf:
                    11:5b:5d:d4:f8:f4:14:57:c9:46:0b:02:0f:1d:70:
                    34:c3:8e:79:5f:8b:b0:4b:af:bc:2f:70:90:a9:7b:
                    10:87:0a:37:07:be:e9:d4:56:7d:4c:ca:b1:17:79:
                    45:ee:49:4d:a2:f7:de:d2:90:6c:eb:1d:54:2d:5c:
                    51:04:13:94:74:82:73:9c:16:d9:2b:fe:b5:cd:49:
                    cd:07:8d:78:ca:86:8d:1e:18:a1:64:40:98:a3:a8:
                    31:21:f0:97:d1:4b:4c:26:a1:07:2a:51:03:24:f3:
                    49:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:9E:5D:4D:6F:A4:2F:F7:25:DB:24:96:4D:85:13:43:DF:07:8F:9D
            X509v3 Authority Key Identifier:
                keyid:A7:C7:54:4E:8B:48:2D:23:11:90:37:06:EE:D7:24:04:9F:E3:85:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p8dUTotILSMRkDcG7tckBJ_jhb8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/2d5960-c66d-42df-95d2-4052450c90a9/1/wJ5dTW-kL_cl2ySWTYUTQ98Hj50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/2d5960-c66d-42df-95d2-4052450c90a9/1/p8dUTotILSMRkDcG7tckBJ_jhb8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.120.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:5a:ea:f5:8d:88:3b:b3:27:83:f8:c0:9d:13:a3:af:1b:47:
         99:36:bb:e4:ab:a5:fe:99:a6:5a:e6:c8:1f:fc:3c:d0:4a:74:
         03:87:c0:39:be:de:84:fc:3f:43:33:ca:83:ae:d7:90:c6:1c:
         16:78:37:22:15:65:f6:18:95:16:ee:a8:cb:a3:78:d4:24:75:
         dc:5b:3f:5e:85:e2:d8:55:45:5a:ba:cb:df:6c:c2:da:0d:fb:
         b0:14:7c:61:61:5b:81:45:3f:f1:81:20:f1:9a:12:e7:3d:60:
         ca:3d:82:06:3a:67:7a:10:fd:77:cf:1b:3f:d1:e6:df:c0:e3:
         57:a9:78:d2:5f:b3:36:45:7b:a8:c7:99:0f:d7:8a:84:9c:3e:
         fc:93:c7:9c:73:08:08:cf:b2:30:56:a9:3c:57:4f:55:20:d4:
         73:58:43:c4:bb:4e:88:37:16:2b:86:63:bd:62:cb:7f:2b:7a:
         af:c9:f1:fd:f0:ca:49:2f:18:76:9b:9b:43:4c:69:2b:4c:49:
         b3:77:dd:c7:27:b6:93:92:f3:47:ab:9e:b9:73:68:0b:72:88:
         66:d2:ed:08:9e:65:f5:06:6c:c4:cc:6c:b8:9b:54:8d:e4:87:
         a3:fe:4d:5b:4a:a1:11:a6:63:b3:cc:37:39:22:e8:32:15:68:
         94:03:43:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:12:11 2024 by rpki-client on console-ams.rpki-client.org