Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/2f830f-af4d-4d33-a300-b98df544bc20/1/x6Ft4_c3shFr45-hsFdA5MFccqA.roa
File:                     x6Ft4_c3shFr45-hsFdA5MFccqA.roa (raw, json)
Hash identifier:          8FhY9OsSxb8tNj2UyF1eOdF1PAiz8T1fWOrTTN1qzAM=
Subject key identifier:   C7:A1:6D:E3:F7:37:B2:11:6B:E3:9F:A1:B0:57:40:E4:C1:5C:72:A0
Certificate issuer:       /CN=261b941dbe59651fafbba9724a12775e07edb635
Certificate serial:       01824437D29F15D2FA438107EA4FE78C9C82
Authority key identifier: 26:1B:94:1D:BE:59:65:1F:AF:BB:A9:72:4A:12:77:5E:07:ED:B6:35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JhuUHb5ZZR-vu6lyShJ3XgfttjU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/2f830f-af4d-4d33-a300-b98df544bc20/1/x6Ft4_c3shFr45-hsFdA5MFccqA.roa
Signing time:             Thu 28 Jul 2022 09:51:25 +0000
ROA not before:           Thu 28 Jul 2022 09:51:25 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     14618
IP address blocks:        185.172.152.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:44:37:d2:9f:15:d2:fa:43:81:07:ea:4f:e7:8c:9c:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=261b941dbe59651fafbba9724a12775e07edb635
        Validity
            Not Before: Jul 28 09:51:25 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c7a16de3f737b2116be39fa1b05740e4c15c72a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7a:a1:97:a6:61:4d:9e:aa:db:47:bf:f6:d4:
                    74:63:e8:39:fc:4f:23:21:00:b9:a4:78:0b:ea:95:
                    4f:4f:3a:9b:94:ba:ea:b9:b3:8c:49:24:91:ca:93:
                    46:64:23:2f:87:c9:1d:78:84:23:23:15:2f:8d:07:
                    45:4a:32:45:af:36:da:3f:4a:7c:a6:e9:00:0c:ef:
                    d6:25:39:3e:92:b7:b9:f1:27:92:c6:45:88:ff:c0:
                    81:3e:61:a2:36:e8:00:fb:2b:49:03:46:1c:e8:93:
                    78:09:77:68:f9:36:90:d0:70:ff:4a:9c:79:e8:a1:
                    41:26:49:e9:35:07:81:09:7c:03:90:e0:59:cc:de:
                    ca:f7:c3:27:f3:a6:b5:53:98:76:ea:8f:60:bb:57:
                    d5:73:21:29:7a:5e:e3:43:b3:eb:4f:b6:d7:37:29:
                    d1:4f:4b:fa:5b:d6:fc:c1:16:47:9f:9a:36:cf:be:
                    ac:66:b7:47:4d:14:60:4c:29:5d:34:07:c9:d0:49:
                    66:18:41:0e:26:7f:3f:3f:30:49:2c:e3:84:2b:ad:
                    2e:2c:b0:ec:a7:d9:fe:07:9c:02:06:72:4b:20:73:
                    be:e3:d9:c9:44:a5:f3:f5:24:c1:08:43:74:b9:93:
                    b5:1b:1d:d8:1a:76:d4:7c:30:ca:02:2a:9f:63:29:
                    a5:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:A1:6D:E3:F7:37:B2:11:6B:E3:9F:A1:B0:57:40:E4:C1:5C:72:A0
            X509v3 Authority Key Identifier:
                keyid:26:1B:94:1D:BE:59:65:1F:AF:BB:A9:72:4A:12:77:5E:07:ED:B6:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JhuUHb5ZZR-vu6lyShJ3XgfttjU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/2f830f-af4d-4d33-a300-b98df544bc20/1/x6Ft4_c3shFr45-hsFdA5MFccqA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/2f830f-af4d-4d33-a300-b98df544bc20/1/JhuUHb5ZZR-vu6lyShJ3XgfttjU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.172.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         95:93:5e:96:d6:47:5b:3b:80:56:ee:94:fc:2a:3b:05:8d:08:
         b5:3b:84:52:20:74:73:87:16:81:20:1a:c7:81:f4:cd:17:bf:
         89:4a:ea:b3:b6:9b:3d:12:ac:86:f5:07:87:eb:53:1c:74:e2:
         42:e2:a3:1c:b5:c9:77:38:02:6e:b4:91:c3:18:14:d0:13:c4:
         0c:14:6d:0e:08:e8:83:fd:b5:7c:71:e6:91:b1:3a:5c:88:81:
         dd:52:0e:2d:fa:eb:63:09:ea:87:c2:95:ae:a1:c7:ed:5e:d9:
         59:9e:d1:f0:3e:6f:35:71:82:da:c0:15:ae:6f:55:1f:3b:07:
         7c:d6:ed:83:0a:53:3d:c4:55:11:9c:bc:64:ac:2b:cd:08:6e:
         65:9b:e9:33:17:28:4a:6d:2c:47:80:f3:48:08:ef:8f:59:b0:
         9a:55:d5:c1:43:65:bf:43:9f:46:da:ba:06:73:f4:2c:09:a9:
         f9:86:33:02:64:81:43:da:2a:80:d1:4c:24:9b:19:4a:92:37:
         83:6e:de:9c:d4:8c:12:02:5c:40:5d:3c:44:27:dd:7d:c2:f2:
         1e:e1:83:86:bd:99:bd:79:a9:c0:91:dc:9c:80:61:1d:75:3a:
         95:c6:e4:9f:7a:18:92:2e:8b:5d:bc:24:2d:c4:bb:ef:d9:24:
         68:f1:cf:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:57 2024 by rpki-client on console-fra.rpki-client.org