Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/de1e7c-7d74-4ccc-9c6c-d163b5499e68/1/AY6B0u6K8_s2vkG0rLvswJP1LLY.roa
File:                     AY6B0u6K8_s2vkG0rLvswJP1LLY.roa (raw, json)
Hash identifier:          SHmo9nqMeL8Q+5w3gBS4+0618rJiRXnDch8rF6Ph984=
Subject key identifier:   01:8E:81:D2:EE:8A:F3:FB:36:BE:41:B4:AC:BB:EC:C0:93:F5:2C:B6
Certificate issuer:       /CN=7ba289ebe93351236a5580eb5b70102cf3f11dfc
Certificate serial:       01820C233495BA9B4634426CD6DD1BE3761F
Authority key identifier: 7B:A2:89:EB:E9:33:51:23:6A:55:80:EB:5B:70:10:2C:F3:F1:1D:FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e6KJ6-kzUSNqVYDrW3AQLPPxHfw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/de1e7c-7d74-4ccc-9c6c-d163b5499e68/1/AY6B0u6K8_s2vkG0rLvswJP1LLY.roa
Signing time:             Sun 17 Jul 2022 12:30:09 +0000
ROA not before:           Sun 17 Jul 2022 12:30:09 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60800
IP address blocks:        185.181.116.0/22 maxlen: 22
                          91.197.228.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:0c:23:34:95:ba:9b:46:34:42:6c:d6:dd:1b:e3:76:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba289ebe93351236a5580eb5b70102cf3f11dfc
        Validity
            Not Before: Jul 17 12:30:09 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=018e81d2ee8af3fb36be41b4acbbecc093f52cb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:aa:e9:f0:b4:5a:6e:f9:65:5b:dc:85:0d:f3:
                    51:aa:6f:58:68:7d:a5:6e:8c:9c:89:63:fc:fe:1b:
                    cb:c0:9e:39:61:d6:c1:bd:60:66:a2:bb:a8:94:1b:
                    63:17:a7:9b:e1:af:81:14:76:02:6a:70:e3:9e:d2:
                    ac:84:e4:3b:13:27:5f:83:f9:a5:0c:e5:29:84:ef:
                    c8:9f:bb:a7:c5:69:1d:a1:d7:7f:53:12:a4:5c:e6:
                    e9:4a:c3:a0:eb:e8:18:38:78:f5:b6:56:b4:5c:8b:
                    4c:35:84:70:6e:84:3d:b0:e3:09:a8:9a:34:74:26:
                    bb:0c:54:1e:9e:99:ae:e4:dd:e9:24:bb:9c:ee:8d:
                    f6:06:39:42:41:e8:13:98:ad:21:c5:05:43:19:05:
                    2e:3c:5a:4f:1a:30:f8:b3:a5:c0:18:c7:ff:89:1b:
                    8e:cd:2b:09:c3:5b:c8:8b:ae:96:44:de:83:85:b2:
                    f3:aa:0a:48:37:e0:b6:af:85:c6:f0:1f:31:3d:3b:
                    06:00:ac:55:23:29:1b:23:2c:12:d4:97:48:d2:8e:
                    ff:4d:4f:89:e3:d9:3a:2e:94:96:4e:43:a0:a6:47:
                    86:ed:ca:7d:6e:c2:09:28:0f:ec:28:0a:0e:8f:76:
                    77:82:fb:d8:c5:ae:ea:a4:2d:8d:13:c0:10:3f:15:
                    c4:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:8E:81:D2:EE:8A:F3:FB:36:BE:41:B4:AC:BB:EC:C0:93:F5:2C:B6
            X509v3 Authority Key Identifier:
                keyid:7B:A2:89:EB:E9:33:51:23:6A:55:80:EB:5B:70:10:2C:F3:F1:1D:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6KJ6-kzUSNqVYDrW3AQLPPxHfw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/de1e7c-7d74-4ccc-9c6c-d163b5499e68/1/AY6B0u6K8_s2vkG0rLvswJP1LLY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/de1e7c-7d74-4ccc-9c6c-d163b5499e68/1/e6KJ6-kzUSNqVYDrW3AQLPPxHfw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.197.228.0/22
                  185.181.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:94:bd:89:c3:83:16:94:c4:6c:96:3d:04:87:65:e2:72:e3:
         73:85:a8:20:a3:c3:4d:88:60:64:ea:63:91:82:31:69:4c:5b:
         27:71:b7:9d:f7:9d:77:cb:2b:ca:c5:c5:55:69:65:b3:52:34:
         42:f4:25:73:16:3e:d1:52:bd:78:5d:54:12:96:a2:03:10:2d:
         8d:11:21:2b:07:fe:53:01:dc:b5:74:34:76:0f:71:71:24:dc:
         9b:9f:1a:8f:d1:9d:d8:f9:19:3f:28:62:d0:eb:23:d3:e6:61:
         2a:aa:e1:d5:ea:56:a2:e0:62:69:e0:79:2e:9a:5d:43:57:1e:
         73:88:3c:0a:bb:f8:54:5f:76:97:c4:e0:14:07:4e:44:8e:5e:
         0d:2a:82:72:29:e7:57:0f:ef:4d:2f:a0:b5:52:cf:88:16:2a:
         c9:9a:f6:6d:e6:91:ad:70:34:d7:87:30:47:5e:b5:c2:c6:94:
         ad:0c:b6:0c:a9:81:ad:be:6f:5f:83:2c:4b:ad:24:d2:24:dc:
         64:38:58:45:96:c4:78:8f:ed:69:c2:0e:35:31:6d:03:45:e2:
         5b:48:04:38:56:dd:6f:c3:4b:ed:c3:f1:c9:7f:e2:2b:aa:07:
         17:cd:35:8f:92:8f:cb:cf:2c:a8:2a:85:a0:9a:42:62:e0:a0:
         ed:e3:5e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:40 2024 by rpki-client on console-fra.rpki-client.org