Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/CieTiSGgZtiCFJc13mYdkzuwJVw.roa
File:                     CieTiSGgZtiCFJc13mYdkzuwJVw.roa (raw, json)
Hash identifier:          obLx8zmYaRZHnf8e5DAkH+FOB5ZirZoQTtGUZggk6qg=
Subject key identifier:   0A:27:93:89:21:A0:66:D8:82:14:97:35:DE:66:1D:93:3B:B0:25:5C
Certificate issuer:       /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial:       012314DB
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/CieTiSGgZtiCFJc13mYdkzuwJVw.roa
Signing time:             Sat 02 Jul 2022 06:59:14 +0000
ROA not before:           Sat 02 Jul 2022 06:59:14 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3214
IP address blocks:        185.106.194.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19076315 (0x12314db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
        Validity
            Not Before: Jul  2 06:59:14 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0a27938921a066d882149735de661d933bb0255c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:92:0a:bd:3f:c7:24:83:21:ed:36:73:28:66:
                    4c:4f:5c:f3:d1:6d:4d:91:c8:61:60:07:1f:59:7f:
                    ac:72:c8:c2:0d:67:ec:f6:7f:7e:94:16:cd:00:1c:
                    83:e6:68:48:e5:a3:20:28:d3:54:31:c5:c6:53:aa:
                    cd:bc:1c:3b:cc:92:06:1d:a3:d3:77:35:32:45:a1:
                    3f:55:9e:e7:24:63:f0:77:4b:5c:1a:71:5b:1f:a5:
                    26:06:b7:a7:fe:84:8a:7d:3a:f4:88:24:f5:df:b7:
                    6e:22:8a:b2:fe:6c:3d:e4:e3:52:47:59:7a:d5:62:
                    15:46:bd:b3:2a:29:37:c3:15:66:89:ec:b1:f6:de:
                    0e:2d:db:e6:2a:5d:8d:9f:80:a1:87:97:71:44:64:
                    ce:3b:e3:42:9d:2c:86:05:5e:6e:e1:96:da:97:b3:
                    7a:89:06:96:d7:20:31:7b:4c:76:83:02:f0:9d:4d:
                    b5:64:5d:cf:e3:ac:7e:82:0a:d5:23:48:a1:58:4d:
                    6c:23:44:ce:4b:e6:51:a0:f2:1c:16:d4:cc:d1:f8:
                    61:74:0f:19:eb:0c:c9:cd:6d:76:d3:60:31:bd:70:
                    05:6f:2c:e1:40:5a:ae:78:27:61:b0:0b:24:15:26:
                    2e:c8:0b:e1:9f:da:de:9b:ae:9c:98:f2:7b:85:49:
                    52:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:27:93:89:21:A0:66:D8:82:14:97:35:DE:66:1D:93:3B:B0:25:5C
            X509v3 Authority Key Identifier:
                keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/CieTiSGgZtiCFJc13mYdkzuwJVw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.106.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4a:fb:44:5f:10:8f:5e:69:b3:ad:82:bf:3e:8e:06:6b:ab:70:
         96:5a:8b:1c:e5:cc:82:e4:c2:93:de:c4:73:59:75:a9:09:24:
         98:f9:e4:30:a6:60:70:5c:95:03:50:c2:ac:49:91:20:f4:d4:
         82:ad:e8:9a:e3:10:5a:ed:33:6f:42:0a:b1:b9:71:d8:b8:dc:
         d1:43:99:29:bc:9d:a5:ea:67:ec:77:4b:ad:ee:9c:63:f6:85:
         bd:19:62:08:1d:59:18:32:87:ec:db:21:c7:35:2d:3b:52:85:
         6e:44:43:42:6d:86:83:54:2a:db:cd:b4:62:9d:22:d2:a7:c5:
         70:ab:46:35:f2:ee:13:65:58:62:cd:b6:80:ae:c8:c4:97:ef:
         52:02:e7:ca:48:6c:d7:3b:35:81:28:9c:26:35:7d:91:fe:dd:
         39:98:05:5e:7e:ba:85:69:32:a8:f4:d4:cb:b6:17:1d:0b:58:
         68:d7:44:b0:0f:fd:2d:66:3a:8a:97:75:7b:94:0b:3c:e2:06:
         c3:6c:74:c4:02:9d:fd:a1:f5:e9:8d:b4:29:7e:81:54:71:14:
         d7:98:91:f4:b1:28:ce:b9:c6:03:79:31:29:55:e3:4e:c2:af:
         e0:ae:2a:41:f2:8f:d3:49:a2:1d:a8:6a:b1:79:01:66:f8:18:
         8e:17:b0:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:35 2024 by rpki-client on console-fra.rpki-client.org