Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/1-LkiunHprmTl9nSNuHMRlIYwvbI.roa
File:                     1-LkiunHprmTl9nSNuHMRlIYwvbI.roa (raw, json)
Hash identifier:          WAhqVzrl5iebXAmlVs7pjTdFLiCXv7kc2+bctzXjhRE=
Subject key identifier:   F8:B9:22:BA:71:E9:AE:64:E5:F6:74:8D:B8:73:11:94:86:30:BD:B2
Certificate issuer:       /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial:       16E3587B
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/1-LkiunHprmTl9nSNuHMRlIYwvbI.roa
Signing time:             Sat 01 Jan 2022 12:01:39 +0000
ROA not before:           Sat 01 Jan 2022 12:01:39 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     201825
IP address blocks:        37.230.237.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 383998075 (0x16e3587b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
        Validity
            Not Before: Jan  1 12:01:39 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f8b922ba71e9ae64e5f6748db87311948630bdb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b9:8a:13:d5:2e:08:52:91:82:62:0e:1d:2a:
                    22:d1:8d:7c:fc:c4:c2:fd:24:71:f9:9f:a8:52:ab:
                    fc:3f:36:f4:4e:4f:17:8f:17:fa:54:0a:9a:fa:d2:
                    66:9d:63:b0:32:67:1d:48:1a:9e:ac:e9:91:48:cc:
                    27:5c:0a:6d:95:15:b1:a8:58:89:36:ec:6d:b3:f8:
                    75:6d:3a:a3:e3:19:a9:60:3a:36:5d:a1:c4:57:c2:
                    54:2e:8d:5c:7e:77:0a:f8:e1:01:bf:41:b1:9e:ef:
                    51:01:85:b0:c2:65:56:ff:c6:dd:2b:c4:0a:7d:bb:
                    e5:d4:47:62:6b:c8:bc:75:7b:1a:11:7c:1a:54:8e:
                    4d:74:60:2e:2e:18:0b:8b:01:d6:28:e7:24:4b:f1:
                    5e:56:76:1f:14:88:33:e9:81:b9:2f:ac:bc:d6:20:
                    37:9f:35:fb:18:e5:56:78:2e:77:94:5e:85:3c:c3:
                    66:b3:a5:5d:b0:8e:2f:bd:2a:bf:d5:db:9f:1a:62:
                    bd:ad:c2:0b:f0:64:1d:e9:19:77:e8:11:3f:5c:6b:
                    9c:bc:6d:00:98:1b:ff:b3:3c:63:38:16:91:b3:5d:
                    52:c0:db:02:d5:74:55:9e:51:1c:8f:8f:13:2d:24:
                    73:6d:4c:d6:ac:b6:07:28:67:2d:a0:f2:58:da:a8:
                    d1:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:B9:22:BA:71:E9:AE:64:E5:F6:74:8D:B8:73:11:94:86:30:BD:B2
            X509v3 Authority Key Identifier:
                keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/1-LkiunHprmTl9nSNuHMRlIYwvbI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.230.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:85:09:e9:e2:78:96:5e:83:3a:f9:ae:b7:35:2b:c6:ee:2b:
         8c:01:77:13:6f:b0:34:e2:29:a1:82:e8:c3:17:c1:8a:31:24:
         67:fc:a9:87:c8:5e:98:00:57:82:42:e0:8b:98:d8:26:a0:b2:
         be:dc:26:2d:32:3c:9c:c5:c8:5e:a9:91:61:76:06:e7:d0:28:
         7b:a0:de:c8:48:13:e0:22:51:c6:a2:bb:bc:bf:b0:27:2a:d8:
         f7:8d:a3:13:a2:5c:57:57:a1:08:8a:c1:81:34:75:ba:18:9d:
         c9:da:1a:8e:f8:43:7f:aa:9f:8e:39:56:d4:cf:a5:04:e3:09:
         cb:52:31:92:da:2d:ef:ed:70:28:50:66:74:c7:b3:32:9f:ef:
         cb:a4:68:60:a3:f7:10:47:de:9e:da:4e:be:dc:cd:a6:57:94:
         9f:86:d8:54:74:1b:70:f2:9a:ff:5e:45:63:f5:6e:01:60:f3:
         2c:c9:e5:32:8f:8d:2a:29:a6:8b:f7:8e:a7:4a:c9:78:92:a1:
         cd:9e:c1:f2:59:5f:eb:de:e3:e0:22:5e:4a:64:fb:bf:94:91:
         97:34:d0:94:ef:82:45:f5:b3:f6:59:98:27:70:01:6a:90:be:
         a9:6e:1c:bd:b6:a0:ca:5e:58:1e:ee:0c:3f:31:f5:af:25:76:
         fc:45:73:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:33 2024 by rpki-client on console-ams.rpki-client.org