Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/4e59f2-be7a-42d9-9e60-50e2533fcd4e/1/V-9VlirS_Gca9U27wMnh5va4S6I.roa
File:                     V-9VlirS_Gca9U27wMnh5va4S6I.roa (raw, json)
Hash identifier:          9i2reF1tT+En1v0KOzte2lWN6UQoEmcx9POqmFCI/OM=
Subject key identifier:   57:EF:55:96:2A:D2:FC:67:1A:F5:4D:BB:C0:C9:E1:E6:F6:B8:4B:A2
Certificate issuer:       /CN=c2e24a9da6be0754eddc1478d694e6da9e15a258
Certificate serial:       05A9FD28
Authority key identifier: C2:E2:4A:9D:A6:BE:07:54:ED:DC:14:78:D6:94:E6:DA:9E:15:A2:58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wuJKnaa-B1Tt3BR41pTm2p4Volg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/4e59f2-be7a-42d9-9e60-50e2533fcd4e/1/V-9VlirS_Gca9U27wMnh5va4S6I.roa
Signing time:             Sat 01 Jan 2022 16:05:20 +0000
ROA not before:           Sat 01 Jan 2022 16:05:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206619
IP address blocks:        185.181.76.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 95026472 (0x5a9fd28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2e24a9da6be0754eddc1478d694e6da9e15a258
        Validity
            Not Before: Jan  1 16:05:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=57ef55962ad2fc671af54dbbc0c9e1e6f6b84ba2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ef:af:55:43:51:41:69:26:63:73:99:a5:b0:
                    3b:16:70:ac:28:df:ec:a9:d0:f2:a4:41:9c:9f:aa:
                    9a:79:24:2c:1f:34:67:76:0d:f4:f4:c0:ca:91:52:
                    93:58:20:f1:2a:02:d1:52:90:80:7c:a2:bf:8f:c2:
                    05:0b:a6:1c:2b:60:92:10:b3:7a:93:12:d2:33:33:
                    a2:c1:6a:42:18:8e:48:7f:ff:87:cb:41:47:4b:6c:
                    9b:af:41:ed:b2:74:b9:94:d1:15:72:6c:3a:af:61:
                    a5:39:f3:e8:82:71:ba:a4:6c:58:34:34:38:fc:ca:
                    e6:60:e8:ba:fc:b4:72:cb:ab:96:ad:4f:9a:bf:18:
                    1d:cb:3b:b1:db:af:0b:a9:b0:89:b4:94:c9:9c:22:
                    c4:80:9e:bf:e1:ed:3d:d3:8f:1b:51:45:02:77:51:
                    00:38:ef:9d:14:c6:66:9c:59:fb:fd:17:69:ee:9d:
                    29:1d:21:1d:5d:15:18:71:fa:33:78:0b:80:b2:93:
                    17:4f:19:9d:cf:1d:93:08:01:8c:59:05:8e:64:b8:
                    5d:80:82:32:3c:70:fa:cc:5c:cf:2f:07:c0:62:22:
                    83:a2:0b:a2:d8:a1:ea:e5:c5:cc:ef:dc:c3:61:9a:
                    e2:34:b5:93:d6:65:4a:3f:aa:ea:9f:59:46:83:8a:
                    a8:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:EF:55:96:2A:D2:FC:67:1A:F5:4D:BB:C0:C9:E1:E6:F6:B8:4B:A2
            X509v3 Authority Key Identifier:
                keyid:C2:E2:4A:9D:A6:BE:07:54:ED:DC:14:78:D6:94:E6:DA:9E:15:A2:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wuJKnaa-B1Tt3BR41pTm2p4Volg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4e59f2-be7a-42d9-9e60-50e2533fcd4e/1/V-9VlirS_Gca9U27wMnh5va4S6I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4e59f2-be7a-42d9-9e60-50e2533fcd4e/1/wuJKnaa-B1Tt3BR41pTm2p4Volg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.181.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:be:4f:f8:57:90:2d:12:13:6c:cd:d4:3d:44:51:6b:91:8e:
         07:6e:7f:47:65:33:31:ea:d5:7a:a4:0b:8c:b9:a0:e4:90:02:
         c4:44:ec:15:5c:f0:19:a4:64:a8:0c:8d:fc:1b:5b:b1:f5:6b:
         9a:ab:e3:31:93:68:19:27:b5:13:00:e4:22:5f:a3:63:64:a7:
         5d:86:51:f4:5e:c0:93:a9:9d:6c:d8:0e:f5:7d:21:8f:66:01:
         56:e6:6c:64:ba:c9:0b:7a:cf:79:54:ef:31:e2:13:07:8b:db:
         bb:e3:a4:aa:43:ad:5d:93:d2:5f:2b:18:17:e4:c3:55:4d:4c:
         5a:c1:c9:57:e5:8e:c4:97:4c:2a:1e:99:d4:ca:3b:3d:3b:eb:
         b3:4e:0f:4e:3e:b5:50:37:09:b5:bc:6b:45:56:fd:13:4c:c8:
         95:31:1a:c1:ef:13:85:48:98:3a:b0:9f:69:e3:c4:37:5b:2d:
         59:5d:1a:67:43:03:a3:68:9b:ff:af:da:37:05:d5:06:63:0f:
         70:26:0c:ed:99:74:2c:53:f1:bd:75:49:b3:da:6f:36:a9:f4:
         9b:60:10:8d:f2:2e:a5:03:06:2f:93:ce:52:1b:4d:94:1a:f7:
         82:72:44:35:ed:92:87:c1:cd:e9:0e:bd:7d:ce:31:f8:a7:ec:
         d9:9e:e8:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:18 2024 by rpki-client on console-fra.rpki-client.org