Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/deca0e-dd4c-44ef-bf77-05dbe3df98f6/1/_6_uhAJ9OxNYFBvJAELiYOtcWrg.roa
File:                     _6_uhAJ9OxNYFBvJAELiYOtcWrg.roa (raw, json)
Hash identifier:          +6EDJsThtN16QVKTKdaUfgLbOkR1gJSgxrOxc3d0KJs=
Subject key identifier:   FF:AF:EE:84:02:7D:3B:13:58:14:1B:C9:00:42:E2:60:EB:5C:5A:B8
Certificate issuer:       /CN=508a9a08abef74dcc51004f4fae0266d620395e3
Certificate serial:       01FBD8
Authority key identifier: 50:8A:9A:08:AB:EF:74:DC:C5:10:04:F4:FA:E0:26:6D:62:03:95:E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UIqaCKvvdNzFEAT0-uAmbWIDleM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/deca0e-dd4c-44ef-bf77-05dbe3df98f6/1/_6_uhAJ9OxNYFBvJAELiYOtcWrg.roa
Signing time:             Tue 25 Jan 2022 10:54:50 +0000
ROA not before:           Tue 25 Jan 2022 10:54:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211197
IP address blocks:        185.7.213.0/24 maxlen: 24
                          2a03:b680::/29 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 130008 (0x1fbd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=508a9a08abef74dcc51004f4fae0266d620395e3
        Validity
            Not Before: Jan 25 10:54:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ffafee84027d3b1358141bc90042e260eb5c5ab8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:01:66:97:60:73:4f:1e:e3:25:a0:54:f6:87:
                    c1:56:3b:4f:8b:5b:fc:9d:08:30:69:88:21:dc:f5:
                    92:75:3d:3a:38:5f:90:49:03:41:a8:77:73:0c:e1:
                    82:33:83:28:32:4a:ab:51:70:b2:42:a7:e9:1e:26:
                    6f:72:f2:de:17:86:45:58:f8:d9:87:2b:99:c5:fe:
                    51:67:e2:fa:70:a2:8b:bb:ca:2c:0b:b0:8f:ec:7d:
                    c0:6c:f8:a0:0b:45:64:79:1a:1f:af:15:6b:76:e2:
                    fd:88:4f:33:c5:dd:39:9f:59:63:c7:a4:f2:6e:71:
                    29:a1:37:84:77:70:46:41:f3:8c:8d:df:3b:51:93:
                    a8:36:a2:2f:47:10:4c:f8:cf:3d:60:c0:0d:a3:3f:
                    90:36:c5:e7:93:ab:46:8f:69:ad:a8:d0:55:c3:70:
                    1e:2d:26:7f:5b:8f:b5:3b:19:c8:7c:59:48:cd:b6:
                    ef:00:58:a2:9c:99:89:34:c8:d3:d7:71:40:78:f9:
                    6e:6a:cc:2a:87:cb:86:93:19:21:30:f7:03:4b:68:
                    94:99:11:ca:3e:91:ea:0c:2b:26:7d:bb:30:80:61:
                    dd:78:b6:b4:73:24:7b:fd:50:bf:ce:d4:04:a7:08:
                    df:7e:a9:37:57:12:e6:f3:9f:e4:2c:09:1d:2e:de:
                    09:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:AF:EE:84:02:7D:3B:13:58:14:1B:C9:00:42:E2:60:EB:5C:5A:B8
            X509v3 Authority Key Identifier:
                keyid:50:8A:9A:08:AB:EF:74:DC:C5:10:04:F4:FA:E0:26:6D:62:03:95:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UIqaCKvvdNzFEAT0-uAmbWIDleM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/deca0e-dd4c-44ef-bf77-05dbe3df98f6/1/_6_uhAJ9OxNYFBvJAELiYOtcWrg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/deca0e-dd4c-44ef-bf77-05dbe3df98f6/1/UIqaCKvvdNzFEAT0-uAmbWIDleM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.7.213.0/24
                IPv6:
                  2a03:b680::/29

    Signature Algorithm: sha256WithRSAEncryption
         93:29:2f:20:5f:06:c6:09:2d:f1:cd:eb:82:ea:bb:e0:1e:c6:
         3b:1a:5d:9c:7a:f0:14:2f:1e:28:df:0c:3f:03:0a:96:ac:5c:
         90:48:15:77:6f:5e:39:e5:ea:2f:e7:ec:48:8c:4a:a7:5c:46:
         b7:49:e1:05:da:d6:fd:6c:a3:f0:72:81:5e:5d:7d:92:c6:1e:
         86:f9:d0:fa:e0:28:6b:62:5f:aa:8e:18:52:b6:b1:a1:0b:23:
         da:d3:83:b0:c2:b6:25:6c:04:6b:a2:ea:65:cd:89:65:4a:31:
         55:41:2f:c0:d1:93:bf:8e:ef:23:e3:15:4a:ec:7b:9d:69:db:
         05:ac:b9:1e:2e:ef:f8:75:e6:11:57:25:51:32:9a:2a:d0:2d:
         09:4d:90:cb:48:2f:a5:29:d7:c9:a9:bb:25:7a:41:1c:59:18:
         a4:a3:6a:ad:be:a8:2f:a6:1f:da:27:25:82:5d:3b:75:1f:f8:
         45:1f:aa:4c:12:b8:1c:49:21:2a:a5:a0:f5:f4:81:de:68:68:
         18:7b:84:6d:d7:9d:e7:50:29:4d:63:2b:9f:24:c6:a4:28:c8:
         06:d5:92:68:02:ed:94:b2:43:89:9b:17:32:89:ec:e8:ba:54:
         7f:8e:90:da:11:2a:38:0c:37:ce:b3:6a:52:47:05:b1:11:70:
         d6:1d:27:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:52 2024 by rpki-client on console-ams.rpki-client.org