Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/BiAWt-SlWSKoqwAh-5y7eQJ6DV4.roa
File:                     BiAWt-SlWSKoqwAh-5y7eQJ6DV4.roa (raw, json)
Hash identifier:          05R4T4mQNUODSZACHE39r9TaKaZq6EFJnr6iZsP2ia8=
Subject key identifier:   06:20:16:B7:E4:A5:59:22:A8:AB:00:21:FB:9C:BB:79:02:7A:0D:5E
Certificate issuer:       /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial:       17C73325
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/BiAWt-SlWSKoqwAh-5y7eQJ6DV4.roa
Signing time:             Mon 28 Mar 2022 11:40:36 +0000
ROA not before:           Mon 28 Mar 2022 11:40:36 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     56627
IP address blocks:        37.230.249.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 398930725 (0x17c73325)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
        Validity
            Not Before: Mar 28 11:40:36 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=062016b7e4a55922a8ab0021fb9cbb79027a0d5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6d:af:37:d1:9c:d6:92:0b:40:7d:e0:79:31:
                    33:98:e1:a7:de:d1:75:9b:78:de:aa:1b:88:4f:4e:
                    89:32:6f:8b:de:c4:6a:e1:df:49:56:38:a7:c5:02:
                    0b:05:4a:d5:13:89:31:28:61:c6:54:5d:b3:2d:58:
                    7b:ad:ca:54:6a:99:ea:c8:f6:80:2f:37:ab:77:bd:
                    46:09:d8:32:e4:cb:f7:05:b3:aa:b2:4a:2b:23:10:
                    f0:93:80:36:fc:65:f7:67:d0:86:40:44:08:5f:14:
                    b7:20:f7:27:8c:81:cc:9a:7e:66:22:9b:c5:4c:5a:
                    02:9e:1b:4d:1e:43:22:d9:49:b7:42:aa:d2:82:2c:
                    5a:fa:b4:9c:26:be:14:69:c8:44:73:81:cb:bd:6b:
                    57:92:46:ba:e6:7f:33:c0:59:3c:ea:b7:b6:2c:e0:
                    d9:8a:3b:dd:1b:c5:bf:c9:c5:6d:5c:ed:f6:13:eb:
                    13:82:b9:22:75:22:06:58:44:f2:64:fc:32:0e:9d:
                    2a:61:55:ac:ba:5f:1d:4b:b4:5b:e4:4c:01:5e:c5:
                    0a:84:ba:77:17:f7:82:98:16:a3:f9:c3:ae:aa:9f:
                    c1:f3:28:80:93:9e:57:8b:ec:61:b6:1c:df:b7:92:
                    74:a7:98:09:07:02:a0:6b:fd:0f:7b:d6:38:5a:2c:
                    b3:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:20:16:B7:E4:A5:59:22:A8:AB:00:21:FB:9C:BB:79:02:7A:0D:5E
            X509v3 Authority Key Identifier:
                keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/BiAWt-SlWSKoqwAh-5y7eQJ6DV4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.230.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:3d:82:3b:9a:b9:9e:ef:30:a9:c0:5b:15:3d:78:81:67:67:
         9d:c5:2a:b0:0e:00:95:7d:79:70:35:32:6a:fe:a2:f5:c7:3d:
         34:07:cc:b6:65:47:3c:db:76:b5:42:aa:55:81:c2:01:ef:96:
         c1:80:7c:68:49:c6:8f:b3:c6:5c:ac:8d:5e:fc:61:12:89:09:
         c4:a6:73:6f:9c:0d:5c:50:d1:a6:10:34:96:bc:16:4b:0b:a9:
         eb:e0:f6:b0:c0:a3:7d:b0:1b:8b:0b:93:92:ff:dc:0e:7b:a1:
         9a:19:99:e4:13:d8:86:6d:7a:0e:96:c5:c2:b4:42:ac:7c:05:
         fc:9d:17:67:5e:a4:d6:ab:ce:69:95:70:3a:c5:7b:cd:0c:81:
         cb:a0:28:75:fd:fe:03:3d:72:7b:37:d5:ad:88:4d:21:e2:cd:
         f3:3d:8e:75:59:b3:01:74:ee:db:15:78:30:a3:03:78:25:3c:
         29:16:4f:c8:fb:80:40:59:d6:20:64:65:e0:c5:df:8c:f1:72:
         e5:9d:98:1f:1a:1f:c0:7e:42:e7:5e:c5:bc:27:bf:8f:29:14:
         26:5a:f4:fb:07:6f:1b:76:56:0f:bf:db:af:d1:7c:79:6a:70:
         b1:54:8a:7f:c8:b5:27:73:d1:f6:9b:40:2f:ba:22:10:81:bf:
         04:0d:7c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:33 2024 by rpki-client on console-ams.rpki-client.org