Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/gV-mTmy-6pmMCg6nT3xnKcq5Gww.roa
File:                     gV-mTmy-6pmMCg6nT3xnKcq5Gww.roa (raw, json)
Hash identifier:          syLujnG5gMsszWt/jZlDD+i0TplXKN8DU6YRS97uvxU=
Subject key identifier:   81:5F:A6:4E:6C:BE:EA:99:8C:0A:0E:A7:4F:7C:67:29:CA:B9:1B:0C
Certificate issuer:       /CN=b7ac780eb2042c8c57001b65ef156e6f5931239b
Certificate serial:       F1850E
Authority key identifier: B7:AC:78:0E:B2:04:2C:8C:57:00:1B:65:EF:15:6E:6F:59:31:23:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t6x4DrIELIxXABtl7xVub1kxI5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/gV-mTmy-6pmMCg6nT3xnKcq5Gww.roa
Signing time:             Wed 09 Feb 2022 07:56:24 +0000
ROA not before:           Wed 09 Feb 2022 07:56:24 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     198622
IP address blocks:        185.167.164.0/22 maxlen: 24
                          2a0b:7e00::/36 maxlen: 48
                          2a0b:7e00:1000::/36 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15828238 (0xf1850e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7ac780eb2042c8c57001b65ef156e6f5931239b
        Validity
            Not Before: Feb  9 07:56:24 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=815fa64e6cbeea998c0a0ea74f7c6729cab91b0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c5:cb:ba:c9:68:0f:d7:8f:17:f5:91:c4:43:
                    02:a7:83:dd:ab:83:8c:1d:52:18:a2:0f:2d:33:8b:
                    af:3f:0f:fa:7d:a9:11:38:51:5d:fb:13:f5:5a:28:
                    2b:88:80:14:9e:e4:0c:0b:40:d7:fb:bd:2c:98:d8:
                    d1:b8:95:2c:40:df:df:05:86:9c:58:9d:98:dd:b1:
                    57:96:ef:7d:fc:58:2b:ee:97:a6:b4:42:43:6d:7d:
                    8e:01:6d:bd:b2:da:95:42:9d:d0:7c:29:4f:aa:a1:
                    36:10:dd:78:8b:4c:34:4c:71:89:75:58:cf:0c:fa:
                    ab:91:fc:a2:8f:33:73:cb:46:43:c7:01:6a:38:c0:
                    7e:a4:ba:a0:6a:14:64:fd:ca:01:b9:60:03:5e:2c:
                    4e:b7:bb:c3:78:a6:6b:22:90:f6:2d:d7:c4:5b:be:
                    f0:6d:5d:a9:f4:19:cf:2d:ef:94:a3:79:5d:61:bf:
                    02:11:7d:ec:0d:ac:eb:74:2d:1c:1a:db:e9:f5:c7:
                    2d:89:2c:32:71:8d:da:72:fa:70:13:54:c9:32:4c:
                    a5:5e:a4:b9:85:f1:23:51:1a:ca:fa:bd:55:f6:fe:
                    5b:f0:73:f0:9f:16:9c:86:66:6b:86:02:9a:29:15:
                    9e:fb:de:df:db:94:60:58:fb:7a:04:ea:66:ce:22:
                    89:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:5F:A6:4E:6C:BE:EA:99:8C:0A:0E:A7:4F:7C:67:29:CA:B9:1B:0C
            X509v3 Authority Key Identifier:
                keyid:B7:AC:78:0E:B2:04:2C:8C:57:00:1B:65:EF:15:6E:6F:59:31:23:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6x4DrIELIxXABtl7xVub1kxI5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/gV-mTmy-6pmMCg6nT3xnKcq5Gww.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.167.164.0/22
                IPv6:
                  2a0b:7e00::/35

    Signature Algorithm: sha256WithRSAEncryption
         7a:92:b4:87:90:92:b9:d0:af:be:5c:ef:22:be:2c:27:4e:25:
         74:82:1e:82:84:5e:5e:41:13:0e:d5:3c:a9:f7:90:42:3e:49:
         8c:c7:19:d3:a4:d1:82:89:f8:38:28:c4:ff:79:c0:05:e9:8e:
         95:8d:ae:3d:f4:3b:c3:ae:33:c5:e7:5b:9c:cb:38:ae:26:ed:
         97:97:29:27:6a:3f:82:cb:c2:06:d2:0e:30:2b:d1:33:a6:f8:
         01:9c:29:b2:54:bc:43:e4:47:4f:7a:44:5c:5b:06:03:65:d0:
         e2:f7:fd:84:dc:90:5b:38:8b:ce:79:c1:5d:ec:49:60:73:a4:
         ff:da:f2:65:01:16:de:26:5f:36:67:6b:fd:cd:10:2b:3c:b9:
         2d:5e:6a:8e:0b:41:41:ff:51:8a:9f:e9:b3:3b:b2:63:37:bb:
         5f:18:94:ee:5f:82:ce:4d:50:dd:f0:df:96:ee:19:9f:e9:b9:
         70:db:6d:03:ba:66:30:4b:03:c5:69:ba:52:7f:67:09:e0:8a:
         7d:7b:4e:58:82:5d:da:65:6a:dc:53:e6:62:bd:c4:90:c4:20:
         0b:24:ef:67:db:db:69:06:16:95:0d:a5:2b:26:be:ad:16:00:
         e8:8e:9d:66:7c:92:8c:f7:a3:f7:29:bb:79:dc:10:33:3e:29:
         a8:17:dc:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:05 2024 by rpki-client on console-fra.rpki-client.org