Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/e1043c-7c75-4ffc-b494-bb5f8b809b0c/1/J1STmuHjhB3BTkgbdC5yEHOjICo.roa
File:                     J1STmuHjhB3BTkgbdC5yEHOjICo.roa (raw, json)
Hash identifier:          BmoNmmU3ani6vk6rTIwIrFLz7SJ1RqRzNgWHJINzd+w=
Subject key identifier:   27:54:93:9A:E1:E3:84:1D:C1:4E:48:1B:74:2E:72:10:73:A3:20:2A
Certificate issuer:       /CN=bd4abd784bf0c0249c0139d610ff90a9ae0b7124
Certificate serial:       F4F6F8
Authority key identifier: BD:4A:BD:78:4B:F0:C0:24:9C:01:39:D6:10:FF:90:A9:AE:0B:71:24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vUq9eEvwwCScATnWEP-Qqa4LcSQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/e1043c-7c75-4ffc-b494-bb5f8b809b0c/1/J1STmuHjhB3BTkgbdC5yEHOjICo.roa
Signing time:             Sat 01 Jan 2022 07:01:15 +0000
ROA not before:           Sat 01 Jan 2022 07:01:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211068
IP address blocks:        185.183.140.0/22 maxlen: 22
                          185.183.140.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16054008 (0xf4f6f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd4abd784bf0c0249c0139d610ff90a9ae0b7124
        Validity
            Not Before: Jan  1 07:01:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2754939ae1e3841dc14e481b742e721073a3202a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a3:ae:a2:43:a5:bd:6a:6c:05:41:8c:79:e0:
                    fe:20:dc:e7:75:9a:71:fc:7d:90:95:1f:9c:38:fb:
                    03:e7:a8:e4:d1:4d:bf:28:bd:87:0c:7a:72:0c:39:
                    b1:6f:9c:b6:33:44:45:1c:c6:dc:b1:2b:38:06:83:
                    30:37:d4:af:6a:59:3a:91:5e:df:5b:93:d7:d4:60:
                    7c:f3:d9:92:5d:30:fc:e3:63:23:c7:06:19:2d:f9:
                    41:59:a8:68:00:d2:cd:d7:37:28:db:20:89:2c:46:
                    81:bb:34:dd:b6:59:fe:43:e8:5a:68:39:4a:ab:d0:
                    1b:c8:40:0e:7b:da:d3:17:ac:23:8d:b7:04:d9:ea:
                    80:99:98:8b:d5:93:7d:f5:21:26:6a:88:26:16:56:
                    bc:79:b7:21:7c:57:b9:21:78:81:e7:fe:e8:93:07:
                    f7:e9:99:05:be:e6:a0:1a:94:21:7e:66:cb:df:4d:
                    3e:1b:e8:4c:f6:14:62:90:ce:e8:41:d2:bb:98:c8:
                    b1:30:6c:7a:b5:c6:55:2f:98:f6:01:5f:7a:0a:8b:
                    73:21:36:f5:03:6a:87:22:a0:70:b3:d0:b3:8f:ee:
                    d3:9f:2f:e2:ac:a4:37:0d:a7:08:21:e7:53:d4:49:
                    3c:c8:11:88:0a:32:0d:22:0e:04:e0:da:b2:8e:c9:
                    25:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:54:93:9A:E1:E3:84:1D:C1:4E:48:1B:74:2E:72:10:73:A3:20:2A
            X509v3 Authority Key Identifier:
                keyid:BD:4A:BD:78:4B:F0:C0:24:9C:01:39:D6:10:FF:90:A9:AE:0B:71:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vUq9eEvwwCScATnWEP-Qqa4LcSQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/e1043c-7c75-4ffc-b494-bb5f8b809b0c/1/J1STmuHjhB3BTkgbdC5yEHOjICo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/e1043c-7c75-4ffc-b494-bb5f8b809b0c/1/vUq9eEvwwCScATnWEP-Qqa4LcSQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.183.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:fe:0f:0f:57:48:83:d5:10:15:ea:08:2d:76:80:d2:ab:6e:
         76:b9:68:0f:cd:70:b7:78:55:94:f2:a2:0f:16:b6:c3:57:53:
         3c:a8:1f:df:39:6c:17:3d:0d:82:bc:18:c4:52:59:40:b5:6f:
         e8:fe:7a:89:30:88:7e:a5:8f:d2:95:41:4b:de:24:7c:96:aa:
         2c:ab:99:f4:31:94:8e:96:e8:72:d6:e1:88:30:84:e5:51:3f:
         67:29:b0:6a:69:ca:c5:ea:88:37:ed:e8:d7:ff:c2:cf:92:b1:
         b6:27:6b:ee:71:0a:e0:ce:7a:49:8f:4a:bd:35:53:71:52:e5:
         d6:92:09:a0:1b:c1:97:30:f6:11:67:8d:01:15:d5:90:5a:85:
         e8:2a:31:28:96:51:00:09:17:4c:85:12:65:b9:32:0d:fc:38:
         4f:38:a2:eb:ec:fd:f2:9e:df:74:b7:a2:48:e8:11:52:fe:4a:
         92:36:53:07:f1:d3:f6:cd:45:fe:e7:7e:ce:fb:04:ec:86:ab:
         30:9a:08:f7:10:2e:bb:44:ad:95:4a:0d:36:84:4d:59:b6:37:
         45:ac:9a:7a:48:11:35:5a:58:2c:31:a8:a1:5b:f6:6a:6b:1f:
         9e:65:0a:3b:fd:ba:ba:a6:2c:11:32:5b:dd:a6:0b:ed:94:e0:
         9f:5b:fc:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:18 2024 by rpki-client on console-fra.rpki-client.org