Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/eQiS6tFsV3A9cGK_Pjdxvzxys_s.roa
File:                     eQiS6tFsV3A9cGK_Pjdxvzxys_s.roa (raw, json)
Hash identifier:          WR3yNYCihKkUb9Vc2G5XKZy0uaC4Jq+UzBTi5RiHuFI=
Subject key identifier:   79:08:92:EA:D1:6C:57:70:3D:70:62:BF:3E:37:71:BF:3C:72:B3:FB
Certificate issuer:       /CN=1f0565865a533402c2f4343fe1af541a006d9d6e
Certificate serial:       02411EA8
Authority key identifier: 1F:05:65:86:5A:53:34:02:C2:F4:34:3F:E1:AF:54:1A:00:6D:9D:6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HwVlhlpTNALC9DQ_4a9UGgBtnW4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/eQiS6tFsV3A9cGK_Pjdxvzxys_s.roa
Signing time:             Sat 01 Jan 2022 05:53:43 +0000
ROA not before:           Sat 01 Jan 2022 05:53:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     51945
IP address blocks:        185.190.37.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37822120 (0x2411ea8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f0565865a533402c2f4343fe1af541a006d9d6e
        Validity
            Not Before: Jan  1 05:53:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=790892ead16c57703d7062bf3e3771bf3c72b3fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:da:09:fb:f6:07:bf:2b:30:ec:27:09:7a:c0:
                    fc:3d:37:0a:28:43:12:21:7f:d4:a3:e1:60:71:16:
                    51:54:a2:d0:b2:4b:c6:b7:3e:ce:08:39:09:d4:d1:
                    b9:ed:43:56:16:24:3d:ae:eb:92:f6:e3:97:c4:31:
                    7b:19:33:a8:f7:19:67:a7:ab:86:16:d4:47:01:bd:
                    4e:5b:ec:74:d7:e1:23:ef:bb:ac:f5:26:87:5a:e1:
                    b7:7b:0e:38:a2:0c:ff:82:80:59:ad:b9:de:4f:fe:
                    c8:0f:00:50:ea:80:79:f8:3c:2c:12:c5:e0:db:1f:
                    c1:76:60:61:c1:f2:58:0d:8c:e1:03:da:fd:0a:a7:
                    59:a0:31:78:56:f9:c9:16:44:60:a8:38:99:ea:e4:
                    c5:02:91:90:04:ff:f2:cb:c3:28:c7:6d:10:6f:38:
                    ed:17:57:87:80:85:14:d6:d2:0c:ef:c2:fc:2a:14:
                    fd:4c:85:77:a3:97:c9:7c:a2:42:92:3d:84:16:21:
                    5d:01:48:11:c0:ad:9a:6e:17:8f:72:9f:70:b8:d3:
                    ed:a9:6b:34:94:84:11:c3:3a:1e:33:0b:8a:8d:fd:
                    41:61:0c:dc:33:f8:0d:47:08:fb:8c:69:0e:41:41:
                    70:cb:5d:97:de:19:a1:ba:46:45:f0:67:da:47:fb:
                    29:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:08:92:EA:D1:6C:57:70:3D:70:62:BF:3E:37:71:BF:3C:72:B3:FB
            X509v3 Authority Key Identifier:
                keyid:1F:05:65:86:5A:53:34:02:C2:F4:34:3F:E1:AF:54:1A:00:6D:9D:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwVlhlpTNALC9DQ_4a9UGgBtnW4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/eQiS6tFsV3A9cGK_Pjdxvzxys_s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.190.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:08:0a:3e:c4:e5:55:1c:a1:0a:c8:23:14:50:05:6a:1d:15:
         2f:1f:04:51:d7:7c:a4:5a:84:db:96:f7:4d:3d:60:f8:9f:e8:
         d2:1a:c6:ea:4e:b7:8c:58:01:8b:11:43:94:5b:ea:db:23:10:
         f2:80:fa:17:d8:98:cf:9f:93:6f:85:fd:28:69:f9:1e:46:47:
         d6:3c:fa:1d:1d:1c:fb:2c:ad:75:aa:34:ab:54:71:47:6b:ca:
         ff:82:ba:93:28:66:7a:35:29:cf:03:f9:7e:b2:64:b8:81:06:
         6c:40:95:d8:a4:d7:d3:1c:c3:ad:ff:fb:e9:6b:0f:3e:4c:5d:
         2f:9f:fa:13:97:10:1d:55:d6:17:6d:ae:91:bc:2b:09:b2:02:
         bd:2b:c6:e0:b2:b9:83:44:92:9c:2a:d8:8f:90:2f:54:b3:13:
         ea:c2:e6:21:50:04:1d:3a:38:98:94:eb:a2:80:13:6b:dc:fb:
         a2:87:91:ea:cf:ab:4e:bd:ab:7b:b0:68:d8:08:f0:31:19:19:
         8f:d5:af:35:c5:09:4c:33:94:11:c4:2e:03:9c:2b:10:b5:b8:
         10:46:24:d4:7b:dd:82:19:1c:b6:ea:c2:1e:d9:85:8a:66:b3:
         5b:9a:f5:f5:4a:b3:21:04:0b:9c:67:f7:7e:37:a0:dd:53:07:
         06:02:d8:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:56:51 2023 by rpki-client on console-fra.rpki-client.org