Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/OI4p6Sh0sf93uj3aeWKO_wcdGSA.roa
File:                     OI4p6Sh0sf93uj3aeWKO_wcdGSA.roa (raw, json)
Hash identifier:          y2r4oacg5xQ1jLGtxXktjAmlO6NWG3Qsv5me7+2p3m8=
Subject key identifier:   38:8E:29:E9:28:74:B1:FF:77:BA:3D:DA:79:62:8E:FF:07:1D:19:20
Certificate issuer:       /CN=3ef46116a11f11f51fc9a1d225a0bfcefdbed786
Certificate serial:       0ACB86AB
Authority key identifier: 3E:F4:61:16:A1:1F:11:F5:1F:C9:A1:D2:25:A0:BF:CE:FD:BE:D7:86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PvRhFqEfEfUfyaHSJaC_zv2-14Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/OI4p6Sh0sf93uj3aeWKO_wcdGSA.roa
Signing time:             Thu 10 Feb 2022 09:46:35 +0000
ROA not before:           Thu 10 Feb 2022 09:46:35 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     4755
IP address blocks:        185.132.148.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 181110443 (0xacb86ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ef46116a11f11f51fc9a1d225a0bfcefdbed786
        Validity
            Not Before: Feb 10 09:46:35 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=388e29e92874b1ff77ba3dda79628eff071d1920
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:af:79:30:dc:1e:22:63:3c:1d:88:2d:34:51:
                    31:de:7d:1f:31:1e:5e:cb:50:9a:03:e2:4b:3d:8d:
                    f2:52:f3:98:bc:97:ed:0b:26:4d:6f:40:6b:a3:be:
                    97:09:cd:9f:14:47:47:7c:6a:48:58:eb:c0:96:09:
                    1b:f7:6d:f0:2d:57:ce:1a:0f:8d:bb:7e:9f:f8:39:
                    aa:75:f6:30:bc:73:ad:a8:cf:03:07:de:a3:ac:a6:
                    a1:26:24:ab:03:1d:a7:7f:a3:7f:bc:f8:43:36:88:
                    31:80:b6:3b:cb:ed:bb:ae:47:5f:78:bb:b5:78:83:
                    ee:3d:8e:4f:08:4d:05:af:78:31:85:af:95:95:7d:
                    ef:3b:98:4c:4e:c5:7f:aa:fe:8d:a9:7a:cd:ea:d4:
                    6b:3c:84:6c:b3:5d:c7:fb:65:87:b1:55:b6:90:14:
                    b3:2f:7b:ae:74:ba:78:ca:fc:b0:1d:55:16:4c:f8:
                    4f:50:50:46:f9:79:eb:93:3a:14:e1:e8:d7:9f:bf:
                    9b:4d:41:95:d4:f2:75:0b:dc:89:94:c5:e8:c8:c6:
                    9c:78:37:c2:fe:e2:6e:b8:b0:b1:a5:35:eb:6c:c9:
                    d3:14:b5:b7:14:e9:e5:ac:c7:47:8a:17:7e:0f:3a:
                    5f:57:2b:68:e1:4a:64:3c:d8:57:9a:84:00:a2:4f:
                    ca:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:8E:29:E9:28:74:B1:FF:77:BA:3D:DA:79:62:8E:FF:07:1D:19:20
            X509v3 Authority Key Identifier:
                keyid:3E:F4:61:16:A1:1F:11:F5:1F:C9:A1:D2:25:A0:BF:CE:FD:BE:D7:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PvRhFqEfEfUfyaHSJaC_zv2-14Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/OI4p6Sh0sf93uj3aeWKO_wcdGSA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/PvRhFqEfEfUfyaHSJaC_zv2-14Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.132.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:30:a4:d1:74:16:a5:e4:ca:8e:2a:e0:af:d1:78:7a:79:ec:
         45:e4:e3:0b:a3:d7:d2:32:71:cd:03:53:de:3c:41:2f:ce:d2:
         54:d3:af:2b:55:82:48:4c:8d:1b:1e:8f:82:80:97:5f:89:93:
         35:6d:df:d0:af:d2:b0:2e:b3:52:c8:d0:19:5a:4b:f6:1d:d0:
         07:69:11:00:66:a7:85:0f:10:39:76:b4:ad:86:d7:c0:11:05:
         09:e7:d0:4f:ac:36:ca:0d:39:1f:87:b0:b3:6b:1d:16:81:05:
         7a:85:50:75:53:9e:b9:bc:c4:ca:85:09:92:1c:97:c6:5a:2a:
         3f:ff:90:5f:5a:3c:dd:71:3a:ba:f2:0a:a5:c4:53:ef:80:8c:
         50:0a:55:b8:ca:93:ae:dd:e8:6e:51:ba:38:03:f0:f1:d1:80:
         00:ae:91:7d:74:9a:18:72:d2:39:1f:82:93:54:eb:26:4b:b9:
         5a:0c:2f:96:b6:20:5c:90:71:26:fa:e1:ea:62:9d:f3:98:8f:
         e1:4a:c0:12:ec:37:51:84:2a:48:55:ca:20:d2:7b:e0:ce:46:
         e9:84:6e:24:eb:e0:07:e9:de:ce:5e:9f:ca:22:31:29:e6:cf:
         4d:0f:ac:f4:b8:3c:a8:2f:7c:4c:61:26:04:66:43:9d:56:7f:
         60:4f:6e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:06 2024 by rpki-client on console-ams.rpki-client.org