Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/830OqmXcUUxucJPhmnfJyDbwT7Y.roa
File:                     830OqmXcUUxucJPhmnfJyDbwT7Y.roa (raw, json)
Hash identifier:          Xbc7o9/j+QL46s91nv2jFWbyAFnMI888bVK0HAEMMEI=
Subject key identifier:   F3:7D:0E:AA:65:DC:51:4C:6E:70:93:E1:9A:77:C9:C8:36:F0:4F:B6
Certificate issuer:       /CN=84bfc451fc4f2411addd00a9fbb17346ad6e8996
Certificate serial:       04C1E777
Authority key identifier: 84:BF:C4:51:FC:4F:24:11:AD:DD:00:A9:FB:B1:73:46:AD:6E:89:96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hL_EUfxPJBGt3QCp-7FzRq1uiZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/830OqmXcUUxucJPhmnfJyDbwT7Y.roa
Signing time:             Wed 19 Jan 2022 06:31:34 +0000
ROA not before:           Wed 19 Jan 2022 06:31:34 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     39647
IP address blocks:        193.164.216.0/23 maxlen: 23
                          185.160.74.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79816567 (0x4c1e777)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84bfc451fc4f2411addd00a9fbb17346ad6e8996
        Validity
            Not Before: Jan 19 06:31:34 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f37d0eaa65dc514c6e7093e19a77c9c836f04fb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:73:c1:14:36:6f:25:e9:7f:3c:1d:9a:d2:b9:
                    26:b9:dc:07:49:b3:64:90:2f:a1:de:eb:a3:b5:86:
                    e1:aa:54:46:58:59:c6:09:50:08:4f:fc:f9:49:36:
                    a3:86:4a:d7:3b:0d:4e:8a:55:b6:06:6f:7f:20:19:
                    97:8b:18:41:f8:ff:cd:32:e8:f0:27:de:86:f4:8d:
                    bb:ca:78:88:50:1c:d6:f4:47:a3:2f:ee:be:ae:2f:
                    6d:86:e9:30:f3:dc:da:5a:75:b3:60:e2:2c:30:10:
                    1f:12:1c:58:81:e6:1a:54:a6:eb:d6:52:30:07:35:
                    bc:00:6e:c8:8c:ec:c5:60:6d:5b:a4:a1:9a:9d:17:
                    78:dc:b8:cc:3a:f0:4e:ad:03:bf:9b:2f:08:d7:1b:
                    cf:9f:7b:78:1c:53:ef:22:f7:3f:27:d4:fd:ad:07:
                    2c:39:9b:10:0c:eb:29:cb:a9:7f:b5:ac:5a:dd:f4:
                    4e:ea:9b:00:c0:36:5e:e6:cb:10:d5:44:7e:6f:f4:
                    46:29:5f:32:52:ea:5c:1d:16:20:a7:02:e3:e3:7c:
                    66:c2:9e:5b:41:74:e2:7f:2d:f1:2e:3b:08:e5:9f:
                    9b:43:08:35:1a:4b:78:76:81:4d:f2:c0:9c:15:9b:
                    3e:72:b6:77:c5:8c:c6:88:4d:06:d9:f2:da:0f:c3:
                    71:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:7D:0E:AA:65:DC:51:4C:6E:70:93:E1:9A:77:C9:C8:36:F0:4F:B6
            X509v3 Authority Key Identifier:
                keyid:84:BF:C4:51:FC:4F:24:11:AD:DD:00:A9:FB:B1:73:46:AD:6E:89:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hL_EUfxPJBGt3QCp-7FzRq1uiZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/830OqmXcUUxucJPhmnfJyDbwT7Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.160.74.0/23
                  193.164.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7b:e4:00:c8:be:1f:62:24:53:f2:34:25:c9:d0:66:40:a4:38:
         7a:6c:a1:4c:f0:aa:4c:44:da:0e:c3:47:51:d0:53:f2:c0:0c:
         2d:32:1e:7a:b0:db:25:eb:a4:fb:f6:22:87:f3:ad:46:32:d1:
         03:e7:fc:fc:8d:7e:28:9c:b4:fe:77:c3:07:92:d7:69:48:26:
         54:d3:e7:83:b2:4e:30:e6:38:56:64:83:f8:71:2a:47:1c:ca:
         c9:a5:06:03:b0:c5:e9:3b:8e:05:a9:64:f1:9d:fd:23:6d:57:
         44:b9:8a:c2:20:4d:49:9e:33:59:fa:75:97:bc:d5:2a:d7:9b:
         9b:3b:e0:51:28:a3:7e:64:86:e9:c6:a8:f1:44:70:ed:54:5b:
         f1:31:74:8e:6d:01:5f:4d:9a:01:a6:84:03:07:b8:dd:39:16:
         12:00:2b:19:1e:d3:1b:d5:c4:de:57:17:b1:ef:c4:0e:59:af:
         3d:68:76:de:d2:8a:98:c1:ac:aa:b0:5d:46:f3:fa:bf:ce:b0:
         2e:2d:77:95:be:72:7d:6f:0b:24:b5:3a:ae:5e:9b:ec:2e:63:
         bc:90:ff:25:18:f2:7a:2d:10:d2:38:d5:7c:47:ed:c6:f3:92:
         da:20:aa:2e:09:5b:43:f9:9c:ac:22:6a:eb:14:77:b9:00:01:
         9d:12:87:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:30 2024 by rpki-client on console-fra.rpki-client.org