Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/be4a4c-f8c6-485d-a328-a3ce99643947/1/lp_sgb55CRVmd6mjpvKQz2HF5dg.roa
File:                     lp_sgb55CRVmd6mjpvKQz2HF5dg.roa (raw, json)
Hash identifier:          eoXcaPVvKBLNDeUH1IwLy15CUVzHhY/btkmgEm6xGUg=
Subject key identifier:   96:9F:EC:81:BE:79:09:15:66:77:A9:A3:A6:F2:90:CF:61:C5:E5:D8
Certificate issuer:       /CN=e60bbe0be77c4e2f05791786eadcc8276b261b8c
Certificate serial:       0183A3470F016A7194993DD0AB9185459340
Authority key identifier: E6:0B:BE:0B:E7:7C:4E:2F:05:79:17:86:EA:DC:C8:27:6B:26:1B:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5gu-C-d8Ti8FeReG6tzIJ2smG4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/be4a4c-f8c6-485d-a328-a3ce99643947/1/lp_sgb55CRVmd6mjpvKQz2HF5dg.roa
Signing time:             Tue 04 Oct 2022 13:54:46 +0000
ROA not before:           Tue 04 Oct 2022 13:54:46 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     202005
IP address blocks:        185.26.136.0/24 maxlen: 24
                          185.26.137.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:a3:47:0f:01:6a:71:94:99:3d:d0:ab:91:85:45:93:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e60bbe0be77c4e2f05791786eadcc8276b261b8c
        Validity
            Not Before: Oct  4 13:54:46 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=969fec81be7909156677a9a3a6f290cf61c5e5d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:5e:21:28:f5:7e:65:ac:2f:b3:eb:66:a7:f6:
                    22:44:80:f0:ef:15:1a:c9:40:9b:c2:7a:7a:82:10:
                    eb:ca:38:11:86:e8:9e:1d:60:34:0b:26:47:2b:aa:
                    4a:51:d4:47:84:33:58:08:88:b0:6d:71:ef:af:7e:
                    89:94:8b:7e:01:99:49:d3:60:da:5d:4c:97:d9:f2:
                    da:c3:61:29:93:5c:a7:6a:7c:d0:0d:c0:28:7e:25:
                    47:d6:29:7e:4a:62:df:02:a5:61:7f:25:b1:76:53:
                    90:66:66:96:8b:27:c1:f1:4d:a4:34:6d:73:89:82:
                    09:f5:60:47:6d:7f:31:83:68:b1:dc:60:d0:48:67:
                    4a:4d:a0:b2:18:7f:77:61:ad:df:a0:44:07:c6:9c:
                    ad:9f:95:e7:54:f4:10:ec:85:90:23:58:3d:16:12:
                    6e:cc:a1:ab:81:47:a9:3a:a8:7a:08:15:6a:df:2f:
                    b2:cc:73:cb:da:90:1d:57:9b:26:ba:82:86:f5:98:
                    b7:8d:1c:77:29:6a:f9:96:73:e4:62:ae:6f:f8:7d:
                    c1:25:2f:8c:30:06:99:c4:7c:b1:96:71:37:c8:b3:
                    f2:a0:08:f2:35:f1:ca:da:8b:82:a5:3b:8a:40:d7:
                    6f:04:5d:70:d8:af:13:b8:c7:6b:cc:a8:59:a4:ac:
                    c3:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:9F:EC:81:BE:79:09:15:66:77:A9:A3:A6:F2:90:CF:61:C5:E5:D8
            X509v3 Authority Key Identifier:
                keyid:E6:0B:BE:0B:E7:7C:4E:2F:05:79:17:86:EA:DC:C8:27:6B:26:1B:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gu-C-d8Ti8FeReG6tzIJ2smG4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/be4a4c-f8c6-485d-a328-a3ce99643947/1/lp_sgb55CRVmd6mjpvKQz2HF5dg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/be4a4c-f8c6-485d-a328-a3ce99643947/1/5gu-C-d8Ti8FeReG6tzIJ2smG4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.26.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:53:4c:4b:82:78:44:3c:4c:d7:8f:ce:96:20:2a:d1:ac:8c:
         c7:c2:ee:a9:2c:a9:3d:29:60:72:ad:a2:99:24:3b:c6:43:56:
         a9:0f:77:9f:bf:a7:d4:b6:93:d3:be:e2:78:13:05:3f:ab:18:
         25:46:fd:6b:d1:0b:af:75:d1:80:12:da:d4:e0:1e:a1:26:c0:
         1f:bc:b4:4a:55:02:99:41:8a:82:61:03:a0:fe:f9:23:c4:c1:
         2f:9f:00:db:eb:a1:c4:b6:39:46:95:f7:1d:98:8d:93:9f:08:
         67:8c:33:c2:3f:4d:60:6b:11:e6:1f:05:ca:c0:80:f7:47:6d:
         f3:be:bb:73:e7:58:a9:55:1f:72:f1:f1:3d:a6:30:5e:63:fa:
         11:a5:a7:54:25:c6:2e:21:b9:72:4b:3b:5d:06:ac:a4:75:be:
         56:4f:bb:24:e9:e5:57:4f:50:98:58:a9:ed:53:8d:7d:66:21:
         d4:4d:2e:1e:1a:e8:4b:26:5d:b9:aa:67:dc:fd:bc:d5:fc:e6:
         b6:f3:ba:6c:9c:2d:c4:c8:5e:1d:33:8e:89:72:30:6c:7d:4e:
         53:81:19:80:bc:67:cc:5e:f6:b3:67:5e:b6:4a:20:ee:46:18:
         bf:6c:ca:5f:8d:f3:0e:a5:d5:a9:49:71:41:09:28:10:5b:96:
         66:16:95:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:15 2023 by rpki-client on console-ams.rpki-client.org