Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/xDrxouA5X2c2KppWmSE9HRobPgo.roa
File:                     xDrxouA5X2c2KppWmSE9HRobPgo.roa (raw, json)
Hash identifier:          c8w8J8u8Zdaba6r+hQfXfo1dbZ7jEVNQ9EtW60wSYFY=
Subject key identifier:   C4:3A:F1:A2:E0:39:5F:67:36:2A:9A:56:99:21:3D:1D:1A:1B:3E:0A
Certificate issuer:       /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial:       17B940DE
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/xDrxouA5X2c2KppWmSE9HRobPgo.roa
Signing time:             Tue 22 Mar 2022 08:57:58 +0000
ROA not before:           Tue 22 Mar 2022 08:57:58 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206448
IP address blocks:        37.230.163.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 398016734 (0x17b940de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
        Validity
            Not Before: Mar 22 08:57:58 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c43af1a2e0395f67362a9a5699213d1d1a1b3e0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f7:78:15:39:69:4a:50:a3:24:b9:22:09:48:
                    1a:79:a7:ae:8c:32:70:76:76:75:08:23:a2:f4:6f:
                    d7:d1:68:de:46:ed:10:db:6c:a2:be:53:06:29:42:
                    5f:ba:e7:62:b2:65:9d:01:5d:29:0d:c2:b9:bc:f7:
                    1d:91:0f:94:33:2e:e4:23:c8:15:ed:77:7b:ff:fc:
                    92:21:28:5d:64:5b:51:f8:68:95:57:f1:dd:0b:f0:
                    46:89:79:c4:90:49:be:f9:63:5a:a6:76:05:f6:9d:
                    98:e3:10:1e:19:27:2a:2a:fa:58:47:40:9e:b6:4f:
                    78:97:1e:65:c4:c5:2b:83:db:bb:ff:c7:fa:67:1d:
                    6c:d8:d8:69:a8:0d:d7:04:76:e3:09:db:b6:bd:94:
                    15:41:bb:69:81:78:49:0a:8e:46:54:c4:34:4b:97:
                    b1:4a:9d:52:77:26:aa:10:44:25:14:3d:ab:67:f3:
                    5b:43:a2:ab:4f:1c:7a:ac:5d:ae:7e:6b:1b:bd:ae:
                    d0:71:b1:18:81:92:9f:07:ef:e3:a6:90:b6:d3:80:
                    3d:3e:9e:e3:a5:c4:30:01:ad:86:36:22:10:b5:9a:
                    82:c8:7c:41:cd:4e:04:95:19:cd:cc:f8:81:3b:06:
                    33:70:d5:fa:6b:5e:d5:50:03:88:37:bd:90:a4:f3:
                    49:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:3A:F1:A2:E0:39:5F:67:36:2A:9A:56:99:21:3D:1D:1A:1B:3E:0A
            X509v3 Authority Key Identifier:
                keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/xDrxouA5X2c2KppWmSE9HRobPgo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.230.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:94:64:a7:ce:4e:68:8c:86:cf:fc:72:40:f0:53:90:db:ac:
         56:df:c4:49:76:a7:29:98:98:49:30:10:e8:de:5e:aa:53:e5:
         39:b1:c3:ad:7f:04:1e:de:cb:c6:ee:e9:9f:1f:d3:2d:4e:11:
         a8:54:b7:08:c3:0a:d9:9c:80:44:ad:47:2c:bc:9d:96:50:79:
         a7:16:48:e9:33:eb:ba:b7:41:92:d8:38:42:1c:34:58:21:2c:
         03:6e:c9:ad:a3:b8:af:e6:dd:79:06:6c:94:c8:25:50:e8:fa:
         c7:84:85:5a:46:a7:6d:e7:5c:42:de:ee:1f:c8:37:3a:84:5a:
         22:42:bd:bd:ae:df:c7:c4:32:1f:a5:4d:8e:0a:c0:42:87:a0:
         db:e4:21:d3:be:12:54:16:15:f1:12:aa:c3:69:95:16:55:d8:
         8a:00:85:87:66:03:7a:79:6b:46:d5:92:ac:10:49:fd:38:65:
         34:e9:97:3f:c5:75:c2:3e:59:91:c5:77:c0:78:1c:ec:03:85:
         21:57:c2:b5:75:01:45:4b:e8:60:4d:d8:d9:14:37:a5:17:f0:
         cb:f5:a9:6e:22:8b:e5:6b:eb:0f:d3:99:0b:77:06:65:c0:1d:
         d5:73:49:7b:5a:76:56:36:13:e1:7f:65:5b:04:6f:1c:dd:cd:
         48:89:2a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:38 2024 by rpki-client on console-fra.rpki-client.org