Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/e6dYIVYHHRWUF6YzaxWnfYp7vrw.roa
File:                     e6dYIVYHHRWUF6YzaxWnfYp7vrw.roa (raw, json)
Hash identifier:          uoFk2Flhrgy9dvDX1OLyn43qtVgBErb6LTAa5dxAiOU=
Subject key identifier:   7B:A7:58:21:56:07:1D:15:94:17:A6:33:6B:15:A7:7D:8A:7B:BE:BC
Certificate issuer:       /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial:       09DA2FC8
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/e6dYIVYHHRWUF6YzaxWnfYp7vrw.roa
Signing time:             Tue 21 Jun 2022 13:17:57 +0000
ROA not before:           Tue 21 Jun 2022 13:17:57 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     47726
IP address blocks:        185.65.203.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 165294024 (0x9da2fc8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
        Validity
            Not Before: Jun 21 13:17:57 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7ba7582156071d159417a6336b15a77d8a7bbebc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:74:9d:c3:ef:16:99:76:7e:76:0b:e0:a9:e9:
                    dd:94:ba:4c:a9:ce:6b:d1:6d:eb:63:e8:2f:2b:ce:
                    42:aa:ed:91:10:3b:98:74:6a:9a:d0:66:ab:7d:8e:
                    5f:14:01:a8:eb:42:d9:99:e2:f2:f5:78:6b:51:92:
                    a1:ae:32:dd:af:1f:26:aa:40:b7:d5:4c:e2:61:e3:
                    20:0e:c2:45:4d:7d:48:9f:40:f4:7b:9b:fa:ce:f8:
                    b8:20:97:f6:90:3b:97:97:b2:8d:5f:8d:27:1b:16:
                    21:f4:93:b3:73:fa:74:0f:37:c6:59:9c:e0:0b:3d:
                    52:b0:01:20:d9:c0:96:e0:55:8e:39:33:3b:cc:a8:
                    50:db:64:05:d0:d1:6a:9a:0a:1d:aa:31:e5:3e:61:
                    6a:f5:3e:94:e7:f6:8d:44:c0:63:ac:a2:23:54:7c:
                    bc:01:ed:76:37:ad:28:b4:99:a0:a8:ee:6f:f4:60:
                    24:9a:9c:a1:e1:cd:eb:67:91:0a:8f:12:d7:6e:d3:
                    ff:0d:05:29:73:5c:d9:0b:01:c9:11:7c:0a:17:5e:
                    30:27:e6:d7:a6:ff:de:ee:c2:40:4e:80:44:1f:eb:
                    c8:ed:47:84:4d:6e:ea:ad:c4:60:a3:51:a2:72:ef:
                    88:3a:f7:72:05:5e:77:41:ee:7b:3d:6c:3f:98:c1:
                    18:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:A7:58:21:56:07:1D:15:94:17:A6:33:6B:15:A7:7D:8A:7B:BE:BC
            X509v3 Authority Key Identifier:
                keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/e6dYIVYHHRWUF6YzaxWnfYp7vrw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.65.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:1d:e4:af:bb:fe:06:6f:a5:81:be:ad:1e:f1:b4:10:ae:61:
         3f:00:d6:fc:a4:b6:71:57:f0:3a:66:c3:ea:9e:53:df:69:71:
         db:4b:4e:b7:0b:de:46:3f:2d:ad:01:46:c6:13:5b:55:5d:20:
         73:10:37:f0:af:02:38:f5:99:de:46:fa:9f:17:67:22:b4:df:
         63:6e:ed:33:90:7e:2a:1b:88:50:53:ac:1b:c4:7a:0d:c9:7a:
         14:40:6b:96:35:34:a0:a2:ce:62:79:e0:b7:d5:a0:2a:5e:ff:
         f1:45:d6:4e:4b:9c:df:4c:84:b8:c1:b0:69:dc:21:69:1f:77:
         1f:78:20:25:42:82:9a:35:04:dc:86:ae:37:fd:8d:fa:88:ed:
         24:47:e4:66:9e:cc:6a:39:15:c6:13:9a:76:65:25:cd:d1:80:
         2a:19:95:23:ce:51:3d:ab:85:9f:a7:05:47:71:71:51:c3:32:
         ae:50:55:3d:b3:43:ac:82:bb:d9:65:f0:c7:d6:9f:b3:06:ed:
         78:04:c4:99:af:da:d9:b5:42:a4:30:38:5b:c8:90:d7:67:8e:
         e2:99:36:a9:5b:46:38:b4:7c:b8:20:7d:0a:e2:97:4b:b5:e4:
         29:9b:cd:bf:7d:a4:9a:50:48:c6:4a:63:48:e4:39:75:ab:0b:
         7c:ec:c2:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:30 2024 by rpki-client on console-ams.rpki-client.org