Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/kkF_OrrmyP4wwZhCtoR8ixrskjw.roa
File:                     kkF_OrrmyP4wwZhCtoR8ixrskjw.roa (raw, json)
Hash identifier:          8BxREYs/JiFUl8zSnFa2OzyOP0V6FLvyrU4WOQGxVGM=
Subject key identifier:   92:41:7F:3A:BA:E6:C8:FE:30:C1:98:42:B6:84:7C:8B:1A:EC:92:3C
Certificate issuer:       /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial:       08F637B0
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/kkF_OrrmyP4wwZhCtoR8ixrskjw.roa
Signing time:             Wed 16 Mar 2022 04:17:41 +0000
ROA not before:           Wed 16 Mar 2022 04:17:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     42093
IP address blocks:        185.65.200.0/23 maxlen: 23
                          2a06:c3c0:3::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 150353840 (0x8f637b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
        Validity
            Not Before: Mar 16 04:17:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=92417f3abae6c8fe30c19842b6847c8b1aec923c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:77:e2:8b:98:1a:27:4a:c3:4f:be:da:89:55:
                    86:f1:f0:27:66:67:eb:51:c6:73:c8:6f:0b:f1:3b:
                    83:01:93:84:0e:00:6a:81:58:15:64:8e:bc:8c:18:
                    ed:fb:61:61:ba:25:e7:7a:73:ec:be:4f:85:f9:66:
                    08:21:6a:42:97:91:5b:be:bf:2e:82:a1:85:ba:1b:
                    b2:86:70:82:7d:2e:d5:ee:00:fe:89:13:35:c5:4b:
                    80:ce:48:e6:00:b1:28:80:c1:fd:9f:37:9f:2e:41:
                    e1:96:28:49:07:57:da:2e:cd:fb:63:de:65:6f:1a:
                    76:1b:6e:79:fa:fa:96:30:98:05:a7:41:6a:4b:8e:
                    de:7d:69:5e:ff:fa:90:a6:c9:57:54:3a:c3:a1:ae:
                    91:d6:52:d9:2d:b8:7a:ef:ae:7f:fa:27:9e:71:3f:
                    ee:dd:9c:b5:05:53:7a:f9:a9:6d:93:0b:19:44:99:
                    ff:ca:7a:67:eb:94:10:da:2b:db:51:a6:74:74:14:
                    8e:51:4e:6a:dd:52:bc:f8:2e:39:42:2b:a9:13:b8:
                    88:35:52:4e:3c:1e:78:59:1e:d2:d9:ef:b4:71:4d:
                    23:be:8f:ec:e3:06:b7:80:c9:f3:a2:77:d7:41:ad:
                    91:f7:89:df:a1:b3:00:17:b1:27:fc:35:6c:a0:12:
                    3c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:41:7F:3A:BA:E6:C8:FE:30:C1:98:42:B6:84:7C:8B:1A:EC:92:3C
            X509v3 Authority Key Identifier:
                keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/kkF_OrrmyP4wwZhCtoR8ixrskjw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.65.200.0/23
                IPv6:
                  2a06:c3c0:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         48:64:e9:11:77:53:32:b6:f1:2e:9d:35:8b:c7:69:c6:6c:5e:
         ec:40:de:a8:ce:e5:33:0d:66:29:79:90:eb:7b:1d:67:8a:c0:
         b4:20:e0:40:cb:d2:16:38:74:35:6c:60:fb:54:25:d6:04:e9:
         38:94:fc:b7:54:18:9f:b6:8d:0d:13:c3:1f:c8:bf:b8:8e:34:
         3e:56:4e:d2:cf:fd:35:e0:9e:e4:91:07:3a:10:02:fd:4c:95:
         69:28:64:fe:1d:74:89:a1:0d:fe:c1:a7:1e:88:ca:8e:44:ea:
         99:1e:4b:eb:4f:95:4e:b8:78:2b:43:f2:07:c9:80:56:60:cd:
         e5:5b:c3:83:56:31:2a:c4:89:62:c1:42:a8:08:02:03:90:40:
         46:26:64:86:f5:94:15:7f:d6:ed:15:6b:53:da:19:fa:cb:81:
         31:b4:f0:9f:ae:e7:ff:6b:77:b4:16:7d:06:48:c3:6c:79:00:
         ea:c0:43:25:a2:08:50:37:bf:59:71:5d:d2:78:fe:72:8c:88:
         39:87:27:98:d2:bf:26:68:42:e9:3e:31:dc:3d:d1:27:99:c6:
         96:44:82:ab:1c:04:79:f7:cf:ca:ba:86:63:1d:54:a4:11:67:
         8e:f3:d8:16:48:c7:37:62:13:93:a3:08:0b:81:f9:26:ef:76:
         20:45:be:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:30 2024 by rpki-client on console-ams.rpki-client.org