Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/sjkA8BXAzs-hT2s6AwO8HLqcd98.roa
File:                     sjkA8BXAzs-hT2s6AwO8HLqcd98.roa (raw, json)
Hash identifier:          kv3Wm2CvbvMinYWi4xO2mvC0Ks7GuV+oDX/w8Kk2u8c=
Subject key identifier:   B2:39:00:F0:15:C0:CE:CF:A1:4F:6B:3A:03:03:BC:1C:BA:9C:77:DF
Certificate issuer:       /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial:       058C08B2
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/sjkA8BXAzs-hT2s6AwO8HLqcd98.roa
Signing time:             Sat 01 Jan 2022 05:01:24 +0000
ROA not before:           Sat 01 Jan 2022 05:01:24 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     201814
IP address blocks:        185.244.30.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93063346 (0x58c08b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
        Validity
            Not Before: Jan  1 05:01:24 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b23900f015c0cecfa14f6b3a0303bc1cba9c77df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:9d:d5:19:20:d1:01:cd:81:d9:0b:2d:8d:76:
                    0f:5f:25:54:d9:94:91:19:0f:de:1a:1b:cd:01:84:
                    c5:16:01:14:23:81:29:3f:f9:86:5e:b6:9b:c9:fd:
                    07:24:02:68:f2:50:ae:7b:ad:56:19:08:ab:af:6e:
                    b0:9e:d0:75:65:4f:70:69:71:97:de:7b:37:5a:82:
                    83:6f:ab:a4:9b:79:32:58:4d:17:8f:7a:40:df:9c:
                    03:8d:d3:ea:cb:d0:1e:84:b3:dd:1a:6e:6b:de:ad:
                    42:7e:81:0c:dc:a2:e2:7b:30:ce:9b:32:ba:ef:09:
                    a7:86:22:87:d6:b9:a4:e5:dc:73:d9:0e:69:51:9f:
                    d6:3c:5e:1b:3a:62:fe:29:0a:9e:ee:48:01:56:e6:
                    24:70:e6:50:79:52:e4:f1:62:53:cb:1f:ad:c4:48:
                    9a:af:0f:c2:5a:41:14:13:7a:0b:4e:5f:b1:be:c1:
                    d7:19:f5:14:1d:c8:00:c2:e7:40:d1:fb:4e:85:9b:
                    0d:23:32:da:13:4b:3b:3f:ce:49:c3:fc:52:3c:19:
                    54:69:c0:91:6f:60:13:49:9c:35:0b:b6:ec:bb:3d:
                    fb:a8:cd:b9:18:96:36:15:c0:f3:c1:c6:0e:04:42:
                    07:da:b8:ea:cb:de:b1:c5:51:43:23:e9:c8:c8:59:
                    70:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:39:00:F0:15:C0:CE:CF:A1:4F:6B:3A:03:03:BC:1C:BA:9C:77:DF
            X509v3 Authority Key Identifier:
                keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/sjkA8BXAzs-hT2s6AwO8HLqcd98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.244.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:8a:47:95:16:da:77:13:93:fb:26:23:37:89:ce:1e:a1:6d:
         21:94:0a:80:b0:ed:d2:7e:26:7d:e6:bf:2b:1f:f6:44:40:2d:
         be:69:2a:57:58:7d:d9:9a:76:4d:59:06:2e:03:bf:36:12:87:
         db:6a:31:6f:d5:c2:28:b6:90:8f:ae:e4:53:b4:89:6e:5e:15:
         86:52:fb:ad:fe:b6:31:df:31:d0:68:15:40:b3:f6:62:b5:98:
         2b:a6:a5:39:3f:c4:46:f6:48:a4:56:1e:96:41:d8:54:81:76:
         0a:a6:84:aa:2b:8e:42:0a:78:89:25:55:d3:cc:d1:33:a9:0e:
         ac:5e:ae:f2:8b:20:ed:1d:a8:1a:c5:ff:c1:83:3a:14:39:a9:
         86:20:46:46:03:2c:2c:3e:bd:81:ab:79:4b:8b:35:e7:41:6a:
         6b:e4:79:3a:18:77:84:8d:0f:ed:81:a5:9c:19:cd:dc:5f:5e:
         c5:d7:ee:53:6d:bc:83:51:a4:10:1b:62:b6:34:56:5e:88:e6:
         40:2b:52:59:61:81:83:48:12:a0:cb:e2:87:07:b1:42:f5:58:
         b1:42:5e:20:ee:08:25:0c:96:8a:6b:82:76:60:00:57:a9:d3:
         1a:71:1a:2d:64:d9:74:40:8c:9d:09:6c:13:5a:60:f5:66:ee:
         04:fc:5a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:48 2024 by rpki-client on console-ams.rpki-client.org