Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/32b4a2-2b2f-4f6a-9b48-c1f3b9ede4db/1/uLysV0cueTot63XSzN9zNAY3cHM.roa
File:                     uLysV0cueTot63XSzN9zNAY3cHM.roa (raw, json)
Hash identifier:          VAPJSaW+SYgdlZCU+o1OmydV7zUGRGuRwkYiLwp4e7k=
Subject key identifier:   B8:BC:AC:57:47:2E:79:3A:2D:EB:75:D2:CC:DF:73:34:06:37:70:73
Certificate issuer:       /CN=78bd1c6c688a175abc8d598fbcd107fca5254bde
Certificate serial:       19D39028
Authority key identifier: 78:BD:1C:6C:68:8A:17:5A:BC:8D:59:8F:BC:D1:07:FC:A5:25:4B:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eL0cbGiKF1q8jVmPvNEH_KUlS94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/32b4a2-2b2f-4f6a-9b48-c1f3b9ede4db/1/uLysV0cueTot63XSzN9zNAY3cHM.roa
Signing time:             Sat 01 Jan 2022 00:53:55 +0000
ROA not before:           Sat 01 Jan 2022 00:53:55 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60419
IP address blocks:        185.31.84.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 433295400 (0x19d39028)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78bd1c6c688a175abc8d598fbcd107fca5254bde
        Validity
            Not Before: Jan  1 00:53:55 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b8bcac57472e793a2deb75d2ccdf733406377073
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:1f:3e:9c:b0:14:59:f7:ca:47:fe:45:4b:16:
                    b9:7b:28:7a:39:ed:94:62:71:95:3b:e0:fb:01:a3:
                    25:4f:01:e6:56:fe:29:10:de:14:da:fd:00:b4:7b:
                    a3:b4:97:78:2a:3d:f9:58:fd:49:61:e5:ff:a4:af:
                    6a:73:d4:92:88:ff:17:c3:a5:12:68:da:45:c3:ac:
                    a2:59:20:9d:67:3a:92:6d:1c:1b:aa:5a:cf:ea:9a:
                    f6:f4:62:45:00:09:81:b7:c7:c7:2f:7b:f8:63:0e:
                    92:e7:33:4a:55:de:1e:0c:3b:4e:6c:3e:ed:ba:a7:
                    b8:6e:99:91:81:60:5d:9b:ad:b1:8d:6b:73:1d:93:
                    8c:f2:40:63:a4:0d:fe:8d:af:b2:8c:ea:21:7d:f3:
                    8a:88:55:9e:f3:b1:d0:05:f4:78:42:ac:5f:31:c7:
                    99:59:71:f3:7c:ed:c0:1d:57:26:7e:37:35:e8:65:
                    b1:76:16:33:23:13:99:36:af:9f:30:da:dc:ed:91:
                    9f:cf:96:d2:74:52:4b:a9:6f:9b:2c:1d:2f:71:ef:
                    89:fd:6b:b5:2e:89:0d:76:31:f7:f4:81:96:45:bc:
                    fb:0c:8d:a8:81:6c:8f:85:a8:a4:d5:7c:5b:ac:98:
                    6d:4e:56:e6:52:83:55:a9:ec:ce:9f:25:42:64:af:
                    a0:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:BC:AC:57:47:2E:79:3A:2D:EB:75:D2:CC:DF:73:34:06:37:70:73
            X509v3 Authority Key Identifier:
                keyid:78:BD:1C:6C:68:8A:17:5A:BC:8D:59:8F:BC:D1:07:FC:A5:25:4B:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eL0cbGiKF1q8jVmPvNEH_KUlS94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/32b4a2-2b2f-4f6a-9b48-c1f3b9ede4db/1/uLysV0cueTot63XSzN9zNAY3cHM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/32b4a2-2b2f-4f6a-9b48-c1f3b9ede4db/1/eL0cbGiKF1q8jVmPvNEH_KUlS94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.31.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:32:5f:c2:b8:2f:e8:8c:94:f0:6c:7a:39:c2:21:fe:9d:38:
         70:62:24:47:58:a5:1e:31:8b:e3:5b:73:46:ea:d0:85:55:b3:
         31:97:ad:24:6f:46:1e:d1:55:5b:b6:43:2c:c6:af:0f:4b:3d:
         58:43:4b:66:ff:02:a1:ab:eb:5c:57:a0:fd:eb:81:e5:f3:b0:
         13:5f:ce:58:92:ff:bd:80:28:f4:42:49:e2:48:1a:fb:e4:80:
         d3:fc:77:e5:6e:26:a9:e0:88:5c:2d:ce:17:82:aa:4d:fb:e4:
         36:e9:b5:a0:cb:51:4a:21:02:33:b8:ef:ed:af:32:6e:1e:0d:
         b7:32:9c:8d:d4:5a:97:86:2b:5e:19:c8:e8:e7:76:fd:c4:1e:
         a5:7b:10:b0:9a:cc:17:9f:64:9c:57:dc:43:91:0f:64:39:ea:
         43:d7:50:db:4a:8e:d5:9f:5b:1c:85:d6:3f:58:c5:f5:0d:e9:
         50:dc:9a:74:99:35:6b:65:91:38:65:5e:bc:66:95:7b:03:0e:
         ec:5b:be:ed:ea:4a:05:ec:12:5d:73:07:0d:8d:1a:c5:29:5d:
         36:f2:8f:85:11:df:b9:73:0c:83:20:39:bd:a7:f9:22:d6:22:
         da:6c:84:12:05:75:b4:a9:18:86:79:11:05:b4:3c:ce:67:38:
         26:dc:4d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:00 2024 by rpki-client on console-ams.rpki-client.org