Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6e74e6-2603-4711-ace1-75ae1e6d9c31/1/AmLJ8lxp7qcUo6GxSGnsNzQiCNQ.roa
File:                     AmLJ8lxp7qcUo6GxSGnsNzQiCNQ.roa (raw, json)
Hash identifier:          OU/gAJm7xx1LLws6BRRpcdlpzv72ACZvwcN0ieprVfI=
Subject key identifier:   02:62:C9:F2:5C:69:EE:A7:14:A3:A1:B1:48:69:EC:37:34:22:08:D4
Certificate issuer:       /CN=c3ab8f44fc356096b8e656fc8739871ec00d1f12
Certificate serial:       0E86359D
Authority key identifier: C3:AB:8F:44:FC:35:60:96:B8:E6:56:FC:87:39:87:1E:C0:0D:1F:12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w6uPRPw1YJa45lb8hzmHHsANHxI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/6e74e6-2603-4711-ace1-75ae1e6d9c31/1/AmLJ8lxp7qcUo6GxSGnsNzQiCNQ.roa
Signing time:             Sat 01 Jan 2022 08:55:39 +0000
ROA not before:           Sat 01 Jan 2022 08:55:39 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207099
IP address blocks:        185.155.65.0/24 maxlen: 24
                          185.155.66.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 243676573 (0xe86359d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3ab8f44fc356096b8e656fc8739871ec00d1f12
        Validity
            Not Before: Jan  1 08:55:39 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0262c9f25c69eea714a3a1b14869ec37342208d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1e:0a:7f:26:9a:2b:cc:ff:46:f7:42:f4:09:
                    88:f6:24:65:7b:de:3b:89:96:5c:c8:a5:8f:64:3b:
                    26:15:b5:a2:39:f0:43:46:d3:96:7f:4a:4b:e0:41:
                    07:76:be:87:c1:91:ad:e1:93:a5:21:34:0e:82:4f:
                    4b:48:78:52:58:67:c8:d7:b3:f9:70:e0:02:63:1f:
                    41:7e:ef:49:b3:16:45:0a:71:c5:f4:52:79:8e:ef:
                    c3:e0:e9:3c:15:5c:b9:ad:c8:87:b3:89:f9:01:9f:
                    3c:fd:a3:b4:6b:5c:22:b1:67:f2:e3:82:63:d3:98:
                    4c:ef:eb:eb:17:33:bb:6c:a0:c6:ba:65:13:9c:be:
                    f4:51:c5:41:90:cc:3d:e6:12:93:a4:a1:52:2b:3e:
                    36:fd:98:c1:1b:02:1c:48:8e:6f:c1:2b:70:46:bb:
                    40:58:83:03:08:1c:83:dc:09:a5:1d:26:38:23:72:
                    b9:34:20:cf:cd:a8:6a:6b:b5:96:8b:52:24:6e:c2:
                    7f:63:2a:e6:ed:5a:46:4c:37:7c:03:07:ec:6d:ce:
                    5f:d8:38:bf:6b:c0:26:1a:f7:51:7c:8a:4d:1b:5c:
                    d6:7c:1a:50:bc:39:e5:67:5f:d2:88:33:2d:c6:91:
                    47:66:a0:2d:00:ec:93:42:3a:35:ba:84:7c:c2:f4:
                    69:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:62:C9:F2:5C:69:EE:A7:14:A3:A1:B1:48:69:EC:37:34:22:08:D4
            X509v3 Authority Key Identifier:
                keyid:C3:AB:8F:44:FC:35:60:96:B8:E6:56:FC:87:39:87:1E:C0:0D:1F:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6uPRPw1YJa45lb8hzmHHsANHxI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6e74e6-2603-4711-ace1-75ae1e6d9c31/1/AmLJ8lxp7qcUo6GxSGnsNzQiCNQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6e74e6-2603-4711-ace1-75ae1e6d9c31/1/w6uPRPw1YJa45lb8hzmHHsANHxI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.155.65.0-185.155.66.255

    Signature Algorithm: sha256WithRSAEncryption
         06:04:ba:4b:e6:b8:e1:5c:60:66:d9:9c:61:c7:c6:a4:cb:fa:
         74:7c:4a:79:33:3b:90:79:39:fa:0a:29:c0:c4:4e:ff:fe:ef:
         2c:43:d8:24:df:78:76:b2:4d:d2:c1:db:af:bc:44:0f:80:3c:
         21:53:18:8e:fb:51:0c:49:33:53:7f:bf:23:30:00:5c:42:4a:
         f1:a2:6d:b7:2d:1c:75:39:51:bb:eb:46:a7:60:58:76:48:8a:
         5b:e9:4a:f6:21:bd:08:fb:3f:21:d9:1e:35:2a:1e:67:b8:81:
         83:89:ba:1e:10:2d:f9:de:f8:5d:d5:09:7e:28:1f:94:0c:6a:
         43:43:0c:5a:38:7f:a3:0b:23:fa:e1:6f:10:47:42:15:f4:f1:
         7c:d9:12:7a:06:7d:ca:6a:c1:2f:5e:d7:89:08:25:bd:b2:0e:
         70:ce:b0:57:08:65:bf:29:91:08:60:6a:1a:b7:37:d1:88:24:
         38:14:3c:c8:9d:b4:f6:c9:45:29:1b:4d:10:d2:72:a9:ee:c5:
         c6:45:2f:3a:f2:ff:2e:4c:37:bd:f3:72:49:7f:ad:34:83:c2:
         f3:59:3b:38:98:da:6f:04:4e:eb:5b:df:e5:18:dc:7d:33:91:
         f9:b9:55:4a:63:fd:af:a1:30:5a:e0:4e:93:35:9e:ae:5a:ae:
         4b:f6:3d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:39 2024 by rpki-client on console-fra.rpki-client.org