Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/262b26-dca1-495e-a7a2-abc9886d96f2/1/EVDL5jAxEpk83Vz9jA9OTYL6VCU.roa
File:                     EVDL5jAxEpk83Vz9jA9OTYL6VCU.roa (raw, json)
Hash identifier:          e/5JUTh7Bba5aLLJsCK3QBZ27YK87o4dLeEmlhtEmW4=
Subject key identifier:   11:50:CB:E6:30:31:12:99:3C:DD:5C:FD:8C:0F:4E:4D:82:FA:54:25
Certificate issuer:       /CN=b5c2ccf27b3b5824ede2ffc977229987b9b1694c
Certificate serial:       07C2FD5E
Authority key identifier: B5:C2:CC:F2:7B:3B:58:24:ED:E2:FF:C9:77:22:99:87:B9:B1:69:4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tcLM8ns7WCTt4v_JdyKZh7mxaUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/262b26-dca1-495e-a7a2-abc9886d96f2/1/EVDL5jAxEpk83Vz9jA9OTYL6VCU.roa
Signing time:             Sat 01 Jan 2022 08:58:13 +0000
ROA not before:           Sat 01 Jan 2022 08:58:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209080
IP address blocks:        185.239.112.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 130219358 (0x7c2fd5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5c2ccf27b3b5824ede2ffc977229987b9b1694c
        Validity
            Not Before: Jan  1 08:58:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1150cbe6303112993cdd5cfd8c0f4e4d82fa5425
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d5:e2:f8:20:b7:ba:8f:07:41:dd:3a:6f:b5:
                    99:61:ac:c3:a7:cd:73:fb:8a:c7:61:08:2a:22:7d:
                    f4:c6:22:2b:1f:82:71:e6:52:ba:4b:3f:54:12:4c:
                    a0:ef:7d:5e:81:e8:55:d8:a5:44:6c:c8:25:cd:b9:
                    28:ae:6a:68:8e:ec:cb:07:6c:b6:8f:b4:4b:74:33:
                    ef:f4:22:42:a2:f2:14:a6:1b:4c:22:20:5a:8f:f3:
                    fa:b9:94:dc:3b:96:26:a7:92:67:a9:51:90:3e:34:
                    6c:12:a3:32:6e:a7:6b:15:a2:80:63:97:bb:72:80:
                    54:4e:76:1e:2b:e7:2c:15:b4:3f:fc:f1:8e:bb:3d:
                    6c:08:70:69:f0:2b:ea:94:66:bf:d6:15:90:8f:07:
                    72:3b:35:50:a6:c5:db:30:fd:b0:79:c2:41:7f:ba:
                    dc:d9:80:c8:22:80:5e:91:6a:4f:15:3f:9b:18:e3:
                    5b:12:b6:18:5e:8e:18:37:6d:50:1e:b9:32:01:db:
                    43:fb:ba:0d:cb:23:f7:18:f5:6f:d4:2b:21:16:d9:
                    28:9f:1a:88:8e:cd:c1:93:a9:68:ad:a9:58:71:e5:
                    5b:c4:d3:4c:7e:cc:65:6c:96:34:d8:c0:14:e2:5c:
                    71:4c:88:d0:12:5e:01:bc:e9:24:f9:92:e4:0d:e4:
                    c4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:50:CB:E6:30:31:12:99:3C:DD:5C:FD:8C:0F:4E:4D:82:FA:54:25
            X509v3 Authority Key Identifier:
                keyid:B5:C2:CC:F2:7B:3B:58:24:ED:E2:FF:C9:77:22:99:87:B9:B1:69:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcLM8ns7WCTt4v_JdyKZh7mxaUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/262b26-dca1-495e-a7a2-abc9886d96f2/1/EVDL5jAxEpk83Vz9jA9OTYL6VCU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/262b26-dca1-495e-a7a2-abc9886d96f2/1/tcLM8ns7WCTt4v_JdyKZh7mxaUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.239.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:ef:e9:72:01:fa:b5:80:ea:a8:39:b8:2e:41:41:1f:0e:50:
         be:33:9c:ff:6f:1e:2d:d2:9c:07:27:ae:7f:f4:bc:c1:16:5b:
         b9:6d:85:4a:cb:a0:61:eb:aa:49:0a:e0:2c:47:95:9d:a1:57:
         3f:f6:db:46:46:92:38:17:58:29:42:aa:3d:d8:9e:c7:91:39:
         a9:65:fa:33:68:6e:b0:52:6f:5b:d2:d7:80:d2:52:4c:b4:a4:
         19:e4:c1:ba:fc:73:78:07:34:f0:03:3f:0a:6e:29:a2:7b:dc:
         ba:84:a0:e7:4f:0b:8c:5c:d7:b2:e2:e6:20:2a:2f:34:8f:69:
         95:82:0d:67:e2:ca:8c:af:f3:82:8e:2b:9b:d6:2a:1b:6f:89:
         91:0d:6d:66:29:e5:2b:48:64:69:d7:34:70:d2:35:10:da:4d:
         e1:21:b2:71:56:72:ca:bf:90:30:25:34:19:13:50:4e:41:45:
         40:16:13:49:7d:b5:d5:27:29:3a:f4:03:a6:91:96:31:44:75:
         f5:23:ec:f2:b1:37:5e:4b:f0:c7:5c:c7:71:6c:12:b5:ae:8a:
         46:70:96:74:a0:87:33:7b:8b:3a:de:d2:a5:5f:df:fe:66:46:
         b4:73:d8:21:5d:93:90:ac:4a:12:97:13:1a:c2:f9:7c:98:f1:
         05:64:c5:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:18 2024 by rpki-client on console-ams.rpki-client.org