Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/cbcac6-abeb-4a38-8ccc-b5972709bb02/1/_j_O7Dh29gkRdaPMgIZOSrTurmI.roa
File:                     _j_O7Dh29gkRdaPMgIZOSrTurmI.roa (raw, json)
Hash identifier:          V9DgOgDA+D6jDf1RZZVIVVonJKMUal9G8HdXkoRnON8=
Subject key identifier:   FE:3F:CE:EC:38:76:F6:09:11:75:A3:CC:80:86:4E:4A:B4:EE:AE:62
Certificate issuer:       /CN=5eba57e1707e43b2fa97fceb078a5d460e56c1bf
Certificate serial:       052C34BD
Authority key identifier: 5E:BA:57:E1:70:7E:43:B2:FA:97:FC:EB:07:8A:5D:46:0E:56:C1:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/cbcac6-abeb-4a38-8ccc-b5972709bb02/1/_j_O7Dh29gkRdaPMgIZOSrTurmI.roa
Signing time:             Sat 01 Jan 2022 00:50:38 +0000
ROA not before:           Sat 01 Jan 2022 00:50:38 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200854
IP address blocks:        185.93.179.0/24 maxlen: 24
                          185.93.178.0/24 maxlen: 24
                          185.93.177.0/24 maxlen: 24
                          185.93.176.0/22 maxlen: 22
                          185.93.176.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86783165 (0x52c34bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5eba57e1707e43b2fa97fceb078a5d460e56c1bf
        Validity
            Not Before: Jan  1 00:50:38 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fe3fceec3876f6091175a3cc80864e4ab4eeae62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6d:94:1c:e1:ba:0b:51:58:b0:cb:6e:3e:d2:
                    ca:96:f3:4e:bd:6c:92:55:52:1d:ad:a5:6e:c2:87:
                    cf:b5:4a:96:93:d0:c7:26:d0:ed:1f:a4:7a:5b:ed:
                    df:da:53:30:a5:37:67:e9:6b:94:e5:74:96:26:b6:
                    41:72:41:77:51:03:96:4d:18:d3:81:f8:2f:bf:73:
                    56:93:17:7f:88:2e:b1:d1:02:f5:ae:a3:46:85:d2:
                    c4:33:6d:7e:a2:d1:ca:69:18:5d:e6:a9:60:46:25:
                    61:4d:24:98:cf:d3:5c:ae:6e:19:18:6a:16:a2:70:
                    2c:33:55:67:bb:7d:fe:1e:d7:97:56:14:c6:23:fc:
                    0c:bf:a1:67:0f:c4:a3:a1:d2:5e:6a:18:ce:14:02:
                    ed:33:3e:51:87:81:c6:0a:f7:5d:9f:59:b5:b7:b0:
                    ec:30:b5:28:c4:8d:b5:85:98:40:31:eb:5a:63:e4:
                    03:0f:10:5e:51:a4:75:8b:7e:e3:4f:e9:7e:ae:b0:
                    dd:66:d6:fa:ef:21:f6:0d:38:85:96:ad:84:56:06:
                    33:9c:d4:d2:80:07:c7:64:c1:63:f9:d6:e4:19:66:
                    c1:33:de:d1:6c:39:2b:22:86:72:0e:8f:5b:f0:fc:
                    63:21:51:b0:a8:81:72:43:23:78:a2:c9:08:73:a0:
                    c9:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:3F:CE:EC:38:76:F6:09:11:75:A3:CC:80:86:4E:4A:B4:EE:AE:62
            X509v3 Authority Key Identifier:
                keyid:5E:BA:57:E1:70:7E:43:B2:FA:97:FC:EB:07:8A:5D:46:0E:56:C1:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/cbcac6-abeb-4a38-8ccc-b5972709bb02/1/_j_O7Dh29gkRdaPMgIZOSrTurmI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/cbcac6-abeb-4a38-8ccc-b5972709bb02/1/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.93.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:cd:e7:f0:4c:85:1d:2e:0a:24:bf:e1:08:d5:74:13:40:ac:
         3d:37:b7:d8:f1:c2:3c:85:83:7b:19:9e:50:9b:25:ef:80:ee:
         40:56:0b:3c:6c:bb:4b:a1:e2:25:7a:7d:e0:eb:eb:da:a2:c3:
         b3:c6:32:3c:11:f2:b2:3c:0f:da:be:cc:c4:7f:e0:44:e7:f5:
         3f:49:51:c3:7d:3f:0f:10:2e:17:25:6f:5a:60:9e:36:b8:8c:
         8c:5e:98:d1:59:e2:f1:a8:f3:b8:b0:50:e9:50:0b:f1:12:6a:
         bd:d3:38:fe:78:86:cf:6b:7b:38:98:f7:cd:03:a0:6c:34:da:
         b8:4e:42:3c:2a:80:8f:b5:e6:34:59:38:0c:76:a0:03:70:a3:
         7f:79:14:91:32:29:85:bc:96:56:5f:c8:be:42:a7:91:03:ca:
         b8:1a:7a:2e:05:9a:6a:6f:d8:d5:0c:21:46:6b:84:06:c1:97:
         ae:3f:45:66:85:1d:c7:f0:69:09:11:af:ae:b9:97:62:8e:63:
         b1:75:fc:94:16:15:e5:1a:9f:fc:91:95:5a:bb:b3:30:21:ec:
         ad:4f:3b:e2:9e:55:7e:a3:ce:86:2b:1f:ff:94:18:57:b8:a2:
         7b:97:f6:14:f6:ad:84:4a:73:4d:be:66:f8:a1:fe:b0:73:f0:
         19:65:9f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:33 2024 by rpki-client on console-ams.rpki-client.org