Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/w8A3NOrllt2jwYJOesonEDsypEM.roa
File:                     w8A3NOrllt2jwYJOesonEDsypEM.roa (raw, json)
Hash identifier:          JfUW5Rxd52U8/QABPNsnleyPcTJ4QPF47HJ+5f/gyAM=
Subject key identifier:   C3:C0:37:34:EA:E5:96:DD:A3:C1:82:4E:7A:CA:27:10:3B:32:A4:43
Certificate issuer:       /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial:       01841410E992DD1034CFD2C53D972ADEFE90
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/w8A3NOrllt2jwYJOesonEDsypEM.roa
Signing time:             Wed 26 Oct 2022 11:32:43 +0000
ROA not before:           Wed 26 Oct 2022 11:32:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209805
IP address blocks:        185.65.200.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:14:10:e9:92:dd:10:34:cf:d2:c5:3d:97:2a:de:fe:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
        Validity
            Not Before: Oct 26 11:32:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c3c03734eae596dda3c1824e7aca27103b32a443
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:da:63:1c:62:9a:9b:2c:d2:cf:1e:a1:01:6a:
                    0d:a7:ce:e5:b7:5a:d2:49:a8:03:5f:09:5e:80:c2:
                    f5:d4:94:59:e1:e9:27:ff:d7:e0:92:77:69:30:3e:
                    f4:7d:0a:39:51:46:84:da:6e:fc:14:58:7f:52:3d:
                    e6:f8:67:10:49:42:88:bc:04:ee:5b:a3:80:2c:f2:
                    ec:f0:c8:37:59:72:cb:4b:83:cc:f1:cd:9e:4f:46:
                    c9:97:6b:38:3d:fc:54:8c:6e:75:2f:9a:ad:a2:4b:
                    b6:c0:60:b2:67:4d:aa:67:57:3a:a9:8f:44:ff:84:
                    e3:3d:5b:1d:53:e0:f2:e8:42:04:70:3c:af:b8:90:
                    cd:9c:e7:c4:54:a3:51:e0:8f:a9:fa:84:d2:72:92:
                    b2:84:b4:84:88:a0:ed:f1:dd:5b:bf:15:b1:61:8b:
                    5c:1c:56:af:ec:3f:5a:e3:de:5a:07:77:45:5e:7d:
                    85:ed:44:14:41:1a:fc:2d:fa:4e:fd:e9:9b:28:19:
                    23:ae:02:bd:0c:04:d0:da:f6:0b:14:4f:49:2f:4c:
                    23:55:5c:7d:a8:63:3b:c4:48:19:05:3a:9d:24:f2:
                    21:d4:7b:74:0e:b8:2e:26:c7:10:06:be:3c:fd:f9:
                    3a:3d:e5:48:8a:61:21:36:ad:6f:4e:53:bb:f4:50:
                    e4:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:C0:37:34:EA:E5:96:DD:A3:C1:82:4E:7A:CA:27:10:3B:32:A4:43
            X509v3 Authority Key Identifier:
                keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/w8A3NOrllt2jwYJOesonEDsypEM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.65.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:73:4e:a4:01:bc:de:c0:7c:12:9d:58:ef:39:b5:62:96:88:
         81:fc:a6:82:13:fd:9b:bf:f4:6f:37:07:1c:ae:cb:9d:a3:4d:
         76:bf:9b:9d:e7:97:17:fd:8d:71:8a:2f:2b:41:66:34:be:09:
         c9:82:01:98:09:bf:31:6d:72:bd:f5:5a:b2:38:1b:6a:44:b7:
         5b:5d:82:06:88:3f:18:c3:4c:ec:51:08:cd:28:77:a6:a7:2c:
         0f:ea:3f:ee:82:ff:d8:9c:4f:44:f3:8c:aa:4c:24:10:8b:2e:
         77:04:84:49:66:33:e0:74:5f:1f:d8:fb:4e:87:b1:d3:35:52:
         ef:35:39:d1:de:2a:5c:b7:ff:1d:47:ec:32:f3:ae:05:46:35:
         4b:dc:61:27:8e:33:3b:96:b4:1c:0f:45:c8:94:41:1e:57:84:
         4f:e1:6e:5a:e8:48:83:be:30:2a:17:f1:5d:ae:81:e7:c9:f3:
         d3:f7:71:96:9b:c4:b2:2e:4a:66:55:e7:fa:46:94:78:74:1a:
         7d:52:ee:f0:50:30:ee:1a:1d:96:84:88:68:2a:45:11:ba:ae:
         3f:c0:1b:21:16:2d:05:54:5e:c5:54:07:6b:c4:19:47:e6:b2:
         42:38:b6:59:86:94:f0:c6:00:b0:11:90:1c:08:eb:dc:6b:44:
         f8:e0:38:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:30 2024 by rpki-client on console-ams.rpki-client.org