Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/RuHjx5qkqiz_1wqtT9M9UXfsCDI.roa
File:                     RuHjx5qkqiz_1wqtT9M9UXfsCDI.roa (raw, json)
Hash identifier:          Yl8uz6eAB+CWtBVlEUl05guiob9NyI1IVl6T4GrK3mM=
Subject key identifier:   46:E1:E3:C7:9A:A4:AA:2C:FF:D7:0A:AD:4F:D3:3D:51:77:EC:08:32
Certificate issuer:       /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial:       17B43785
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/RuHjx5qkqiz_1wqtT9M9UXfsCDI.roa
Signing time:             Tue 22 Mar 2022 08:56:12 +0000
ROA not before:           Tue 22 Mar 2022 08:56:12 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     25513
IP address blocks:        37.230.157.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 397686661 (0x17b43785)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
        Validity
            Not Before: Mar 22 08:56:12 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=46e1e3c79aa4aa2cffd70aad4fd33d5177ec0832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b5:e8:a5:14:7a:2b:c2:ef:16:59:73:6b:44:
                    eb:dc:c1:1c:7b:2b:47:24:08:31:c7:c9:8a:f8:0a:
                    d9:25:59:fb:bb:10:c3:f3:e0:3c:c6:b1:70:90:2a:
                    cc:41:d5:a1:8b:24:f7:04:b7:29:ed:d4:99:1c:d3:
                    36:f7:32:4e:a0:52:8c:89:44:37:aa:15:8a:2b:fb:
                    a9:db:45:9a:ae:26:1e:cb:04:be:fd:31:df:c6:dd:
                    94:d8:3b:66:da:06:22:f9:3a:f0:ec:f7:22:f7:fe:
                    b2:33:92:6e:a7:5c:f9:f7:1c:f1:a8:86:bd:52:7e:
                    35:16:f4:64:0c:d2:7c:f5:ac:c5:c9:69:22:8b:12:
                    57:4d:64:ce:2c:5d:dc:cf:a5:d0:ad:03:67:54:54:
                    d3:27:f9:e5:9e:db:2c:84:fb:74:95:3d:8e:a4:b4:
                    7f:68:28:eb:54:2f:e5:06:60:23:22:f4:5a:81:12:
                    f9:f6:6b:9b:47:0d:b3:30:13:e9:66:c5:19:64:41:
                    4e:d1:98:47:3b:75:8c:81:d0:26:a8:cb:7f:1d:2d:
                    b9:bf:db:bb:a8:84:b3:2a:fe:7a:86:5b:71:f9:11:
                    dc:60:c9:d4:d1:08:c3:fe:11:ce:b1:8b:21:8c:bc:
                    e1:41:a4:7f:20:73:57:c9:c9:6f:22:2c:2d:a6:65:
                    2e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:E1:E3:C7:9A:A4:AA:2C:FF:D7:0A:AD:4F:D3:3D:51:77:EC:08:32
            X509v3 Authority Key Identifier:
                keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/RuHjx5qkqiz_1wqtT9M9UXfsCDI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.230.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c8:03:2e:84:47:55:8a:9a:db:2d:b1:ea:3f:b4:0a:92:db:93:
         3f:7c:47:be:72:7b:66:23:21:16:27:5c:d6:da:5d:f1:81:3b:
         09:eb:55:26:40:85:50:54:4d:5f:68:a0:b1:de:94:19:b1:49:
         99:48:25:58:47:8c:95:00:cc:a7:cf:9f:cb:4d:a5:1d:22:0a:
         69:d2:bb:7f:ca:20:f0:8c:26:3c:26:9e:fa:ac:1c:7f:df:99:
         b8:4b:ff:69:9a:16:40:77:64:62:75:6f:b4:a2:d7:23:94:36:
         d0:24:85:77:b5:14:3c:05:a0:f8:d0:82:a5:60:a8:15:ff:da:
         6c:55:d0:11:17:de:b8:72:07:38:94:4b:a4:a9:91:6e:90:87:
         40:34:0e:f8:d1:ce:6e:bd:bf:ce:74:48:1a:31:55:ea:35:09:
         dc:8c:6f:86:34:c2:50:11:4a:4c:95:91:0a:33:cb:a8:bf:27:
         70:8b:d8:bd:41:dd:b9:37:07:53:22:72:d0:80:b8:e7:4c:41:
         2b:11:9d:40:0d:ae:3a:3f:d6:1e:a1:f5:63:c1:a6:e2:1e:4f:
         53:11:c0:c6:46:d7:f1:03:0a:d1:ad:30:61:03:9c:cf:a6:54:
         89:3f:7a:d6:ab:14:b8:59:9e:00:2b:cf:3c:b9:11:60:59:9c:
         7a:3d:74:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:33 2024 by rpki-client on console-ams.rpki-client.org