Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/4f3f08-986b-48e4-85dd-34ffdb442113/1/akMV0VC7NeZGg8QpSrzlKw83eG4.roa
File:                     akMV0VC7NeZGg8QpSrzlKw83eG4.roa (raw, json)
Hash identifier:          2ZwpMz2dCs5sg0bDoPZVViAWFIQ66Yfv8bfAK5YUBQ4=
Subject key identifier:   6A:43:15:D1:50:BB:35:E6:46:83:C4:29:4A:BC:E5:2B:0F:37:78:6E
Certificate issuer:       /CN=50399d4435bb85fae910abe38e68533204dfd60b
Certificate serial:       0BCA8341
Authority key identifier: 50:39:9D:44:35:BB:85:FA:E9:10:AB:E3:8E:68:53:32:04:DF:D6:0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UDmdRDW7hfrpEKvjjmhTMgTf1gs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/4f3f08-986b-48e4-85dd-34ffdb442113/1/akMV0VC7NeZGg8QpSrzlKw83eG4.roa
Signing time:             Sat 01 Jan 2022 01:51:26 +0000
ROA not before:           Sat 01 Jan 2022 01:51:26 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     9714
IP address blocks:        185.167.191.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 197821249 (0xbca8341)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50399d4435bb85fae910abe38e68533204dfd60b
        Validity
            Not Before: Jan  1 01:51:26 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6a4315d150bb35e64683c4294abce52b0f37786e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:cc:b4:94:55:bb:23:0e:21:b7:f4:af:90:f8:
                    88:fe:b5:58:85:47:57:15:12:38:10:f8:68:28:ee:
                    7b:a3:33:31:f7:93:1e:99:84:81:d4:2b:87:f1:f2:
                    7e:bc:02:4e:47:0f:99:51:f6:3d:c7:1c:e4:9b:83:
                    62:ff:de:ce:e0:d3:07:e4:75:d3:1d:f1:99:24:c7:
                    43:f1:07:ea:fa:52:f0:d8:75:a8:53:d2:c1:a7:fd:
                    0b:a0:4d:dd:ee:15:ec:11:2a:6b:7b:b2:0e:8b:b2:
                    9f:de:f5:56:17:f6:11:45:70:a2:b2:67:0e:98:31:
                    27:af:6a:d9:ac:e2:aa:f1:a4:bb:31:ae:6f:56:a6:
                    34:7d:0d:1e:97:de:4b:06:15:fd:2b:7e:6c:65:89:
                    51:ff:1b:c1:34:b2:63:48:7c:e5:4a:98:fe:58:cd:
                    b3:b2:7b:ec:7c:0e:a2:2c:a9:cf:74:93:fa:7c:1d:
                    7f:56:81:b0:d7:d2:38:f6:b2:a3:43:3c:ca:c8:95:
                    fc:67:a9:7c:00:23:64:ce:f3:9b:84:d6:70:bc:f6:
                    b3:98:e9:71:b7:ad:cf:a9:df:7b:75:24:4a:46:7b:
                    1e:12:7c:51:f5:a5:4e:9c:50:74:23:e2:40:3f:a1:
                    58:5e:2c:38:2e:e2:93:36:e8:0d:0f:bf:f9:f4:fd:
                    4e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:43:15:D1:50:BB:35:E6:46:83:C4:29:4A:BC:E5:2B:0F:37:78:6E
            X509v3 Authority Key Identifier:
                keyid:50:39:9D:44:35:BB:85:FA:E9:10:AB:E3:8E:68:53:32:04:DF:D6:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UDmdRDW7hfrpEKvjjmhTMgTf1gs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4f3f08-986b-48e4-85dd-34ffdb442113/1/akMV0VC7NeZGg8QpSrzlKw83eG4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4f3f08-986b-48e4-85dd-34ffdb442113/1/UDmdRDW7hfrpEKvjjmhTMgTf1gs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.167.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:af:b2:74:b2:49:db:51:c8:d2:0d:cc:17:8b:cc:1d:5d:d7:
         33:a6:82:6d:59:cc:1d:f4:99:c7:82:3b:88:8a:48:95:a4:ff:
         a8:35:fd:dd:3e:2d:54:85:b5:35:e8:b2:8a:fd:99:77:05:56:
         a9:e5:5a:73:69:81:69:f2:8f:3b:5e:d3:62:bc:52:39:7d:e3:
         7e:f6:3d:e0:d7:c9:9d:8d:a9:22:27:09:b7:ee:ef:85:46:a6:
         64:ed:98:57:96:68:4f:a6:3b:14:d6:a0:4a:e2:17:d5:3a:13:
         d7:43:eb:e1:ec:c9:68:9a:67:df:60:de:47:e2:75:30:42:bf:
         ea:b2:34:b4:3d:a2:af:c1:1a:6d:62:b8:56:44:19:be:42:dd:
         15:8a:94:ae:2e:9a:72:9f:30:bd:cf:40:f8:78:9c:d0:50:13:
         1c:ef:d8:e9:6f:85:a0:e3:46:d2:0f:70:58:83:c3:a5:79:ef:
         c6:5f:28:7e:26:31:ff:be:1a:62:7d:bd:d0:c5:11:4e:53:a9:
         6c:80:48:d7:b2:1f:0a:f1:e6:40:24:87:7e:c4:a7:08:c9:97:
         7c:60:c5:aa:c1:21:5e:6d:54:5c:85:0a:1d:b7:7f:5d:59:4d:
         81:89:53:89:f6:c5:ac:84:ec:05:22:c1:d5:df:94:c0:b3:30:
         f8:40:f6:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:28 2024 by rpki-client on console-fra.rpki-client.org