Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/zv8U4-6MUJ-OufrbJ5BQl7Ueaco.roa
File:                     zv8U4-6MUJ-OufrbJ5BQl7Ueaco.roa (raw, json)
Hash identifier:          AUGRhJDvWFOvy5ASazE6flkN3j1uGPvELJpWCm4SZB8=
Subject key identifier:   CE:FF:14:E3:EE:8C:50:9F:8E:B9:FA:DB:27:90:50:97:B5:1E:69:CA
Certificate issuer:       /CN=05f2748cb43862a104b56f8c6204b6209706558c
Certificate serial:       7DD0
Authority key identifier: 05:F2:74:8C:B4:38:62:A1:04:B5:6F:8C:62:04:B6:20:97:06:55:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/zv8U4-6MUJ-OufrbJ5BQl7Ueaco.roa
Signing time:             Tue 26 Apr 2022 09:12:06 +0000
ROA not before:           Tue 26 Apr 2022 09:12:06 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211098
IP address blocks:        185.184.217.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32208 (0x7dd0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05f2748cb43862a104b56f8c6204b6209706558c
        Validity
            Not Before: Apr 26 09:12:06 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ceff14e3ee8c509f8eb9fadb27905097b51e69ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:92:1f:0e:b6:36:e9:5e:b8:3e:d3:34:41:dd:
                    5a:dd:db:2a:14:d3:33:9f:4d:d5:cd:0d:83:79:37:
                    d9:cf:2c:45:8d:5d:64:e5:c4:64:2e:4e:5d:d1:09:
                    b8:b1:45:b7:da:a4:2f:de:9c:c8:86:d6:56:8a:89:
                    fd:b8:a1:50:94:c8:02:ab:84:6d:85:c7:96:d1:32:
                    d0:ac:70:b5:17:01:75:9c:c7:9a:0b:d4:e1:60:4c:
                    8a:50:eb:b1:f0:bc:5c:fa:3b:8c:e0:35:11:f2:fb:
                    36:a0:a0:40:17:92:b4:01:39:b8:32:46:b5:33:de:
                    92:f6:6e:01:43:1a:8f:96:43:d0:59:54:f7:4d:0c:
                    2f:69:2e:da:06:21:9e:7f:fe:f9:dc:93:66:57:22:
                    2a:ec:68:10:47:83:d9:a5:cc:fd:82:68:03:15:a9:
                    27:a1:6e:af:5a:7e:59:1a:52:3e:f6:5e:42:55:0c:
                    4b:75:18:25:c6:75:8d:c1:fe:09:59:50:38:c6:d8:
                    60:25:2a:a6:a1:8d:68:fe:fb:d6:c5:86:4a:f4:3d:
                    5f:d6:a2:6e:da:a1:cf:c9:ac:c6:f0:59:2f:3c:03:
                    28:49:bb:81:37:95:a9:1f:fc:91:26:37:e3:47:00:
                    2a:85:25:c6:c4:8c:27:12:36:0c:3a:00:b4:1f:40:
                    07:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:FF:14:E3:EE:8C:50:9F:8E:B9:FA:DB:27:90:50:97:B5:1E:69:CA
            X509v3 Authority Key Identifier:
                keyid:05:F2:74:8C:B4:38:62:A1:04:B5:6F:8C:62:04:B6:20:97:06:55:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/zv8U4-6MUJ-OufrbJ5BQl7Ueaco.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.184.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:0e:51:19:31:01:67:e0:a1:d4:e0:e6:59:a6:e2:da:dd:12:
         48:3f:f0:df:39:ea:52:88:62:03:d8:cb:13:9b:c4:69:19:b3:
         11:73:93:63:b8:cf:9d:a1:9c:a4:81:6f:a8:ad:28:3d:8f:3f:
         e6:21:63:89:ba:73:6f:86:f6:24:90:8c:93:7a:10:c0:b5:cf:
         53:28:17:a5:0c:64:2a:76:1a:de:25:70:3b:fa:d8:e2:03:5b:
         3b:77:d0:8b:61:0a:99:25:3d:3a:b7:d0:28:b5:3e:0d:a8:9a:
         7e:84:98:d0:ac:57:26:8f:73:d1:db:20:3b:5e:c9:2a:15:1d:
         c4:58:d3:d0:8b:61:95:6d:9a:68:78:49:04:1a:80:64:aa:0e:
         7d:79:2c:c6:89:4a:d7:60:46:97:cb:3f:46:48:05:89:44:5e:
         3b:21:ea:7e:a5:7a:3b:7f:c1:07:75:f6:0b:b4:fd:f6:21:e3:
         95:6e:42:28:2f:62:1b:45:8c:8e:2c:4d:2b:b8:5c:82:33:6f:
         71:28:45:04:1f:17:de:0f:36:89:3e:3f:4b:72:d6:27:21:3e:
         cd:71:3e:2d:73:62:90:d0:33:79:78:0f:a4:73:13:09:fb:5d:
         c8:1d:bb:4c:ad:a4:ba:1d:b5:9e:f8:89:c8:fd:f0:e3:fa:ae:
         24:e3:eb:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:04 2024 by rpki-client on console-ams.rpki-client.org