Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/N6L9oyh6UB8T4KDeW7buePE-Eqc.roa
File:                     N6L9oyh6UB8T4KDeW7buePE-Eqc.roa (raw, json)
Hash identifier:          hBDRlFag72wlxTBNgco3ZqNG2IsNaAoMVnKsWLDzFis=
Subject key identifier:   37:A2:FD:A3:28:7A:50:1F:13:E0:A0:DE:5B:B6:EE:78:F1:3E:12:A7
Certificate issuer:       /CN=fd538aae4ec4d0a2f3c0a65f89f48746b515e57b
Certificate serial:       13F674
Authority key identifier: FD:53:8A:AE:4E:C4:D0:A2:F3:C0:A6:5F:89:F4:87:46:B5:15:E5:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_VOKrk7E0KLzwKZfifSHRrUV5Xs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/N6L9oyh6UB8T4KDeW7buePE-Eqc.roa
Signing time:             Mon 30 May 2022 05:49:13 +0000
ROA not before:           Mon 30 May 2022 05:49:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     205604
IP address blocks:        185.212.64.0/24 maxlen: 24
                          185.212.65.0/24 maxlen: 24
                          185.212.66.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1308276 (0x13f674)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd538aae4ec4d0a2f3c0a65f89f48746b515e57b
        Validity
            Not Before: May 30 05:49:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=37a2fda3287a501f13e0a0de5bb6ee78f13e12a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:b2:5d:e4:25:29:b5:2d:fa:95:e2:f0:41:ee:
                    ca:07:c8:09:f3:ef:7c:48:83:aa:a2:59:a9:3c:1b:
                    45:91:84:7a:37:99:40:85:75:f9:f7:13:73:65:65:
                    9e:b7:08:ed:f4:dc:9b:e8:bb:68:cc:dd:d8:7f:f8:
                    36:f8:cd:3f:86:1f:01:d9:2f:44:37:06:77:45:31:
                    19:84:f0:62:15:cd:25:53:b1:b0:79:c6:a5:49:b7:
                    01:91:e7:30:4c:e6:aa:40:f7:e6:62:e3:54:04:63:
                    05:d1:bc:fd:19:ad:92:33:7d:f0:7e:57:05:7a:fa:
                    eb:a9:f1:fe:08:1f:76:1a:e0:67:f2:3e:80:5e:87:
                    ed:a3:2b:6f:c8:8e:75:46:c2:ac:ba:85:f1:9a:98:
                    fd:8b:96:55:42:6f:c7:00:3f:07:11:50:42:15:c9:
                    13:2a:2b:a8:33:53:ea:a8:3b:f1:50:b5:c5:6e:cb:
                    24:54:30:93:7d:87:b3:ae:96:a3:23:1b:8e:09:d1:
                    99:bb:b4:65:be:f9:31:b1:86:c1:b9:a8:2a:5a:1e:
                    f9:19:e9:4e:86:36:01:b1:16:a0:95:c2:d9:94:79:
                    24:b2:4d:5f:47:aa:ea:d5:c6:e3:05:60:90:b5:31:
                    b5:81:ab:b2:96:2a:ab:4d:9b:04:da:ea:09:ae:ac:
                    8f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:A2:FD:A3:28:7A:50:1F:13:E0:A0:DE:5B:B6:EE:78:F1:3E:12:A7
            X509v3 Authority Key Identifier:
                keyid:FD:53:8A:AE:4E:C4:D0:A2:F3:C0:A6:5F:89:F4:87:46:B5:15:E5:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_VOKrk7E0KLzwKZfifSHRrUV5Xs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/N6L9oyh6UB8T4KDeW7buePE-Eqc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/_VOKrk7E0KLzwKZfifSHRrUV5Xs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.212.64.0-185.212.66.255

    Signature Algorithm: sha256WithRSAEncryption
         a6:2d:5b:c9:82:53:4f:b7:29:5b:88:15:71:24:c8:12:e6:df:
         08:0b:c8:77:b2:15:45:ef:df:24:9f:82:23:71:c6:f9:24:3a:
         76:1d:17:42:fc:f1:eb:10:53:a0:d1:14:c9:19:a3:0c:d2:58:
         e8:03:1d:22:77:df:92:0c:87:5d:50:ea:dd:0a:b6:15:85:11:
         96:39:80:a1:48:59:a5:f6:d0:64:6e:40:b8:ef:bc:39:42:50:
         7f:33:a4:f9:cb:7b:6f:b2:b7:0c:41:8d:83:2d:71:94:36:d2:
         89:a1:c7:6b:60:cd:31:03:55:47:da:e1:64:76:fa:42:4e:68:
         44:ab:ea:0d:f4:cf:e3:27:d2:ec:d8:3d:56:2f:b6:7f:72:b8:
         fd:44:89:4f:5f:f8:d7:be:a7:0b:c5:43:38:38:46:97:d1:38:
         37:be:7a:16:ef:4b:e4:90:79:ed:fa:8e:92:de:23:cc:b4:14:
         7a:c0:04:2b:07:29:f6:bd:2a:53:ef:e4:8c:6a:18:4c:f7:6a:
         8f:d3:ec:85:89:c0:5e:1f:76:37:7b:50:25:09:24:15:1e:2e:
         ad:50:44:a5:bd:18:fd:3b:19:14:00:12:ed:1f:75:26:5c:f9:
         b4:dc:41:aa:d9:6f:2a:0f:0a:41:ce:9b:05:a1:93:b1:ae:57:
         1c:7c:f3:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:36 2024 by rpki-client on console-ams.rpki-client.org