Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/swcfL4m1S8RvzyOsH2VDxrBQVdM.roa
File:                     swcfL4m1S8RvzyOsH2VDxrBQVdM.roa (raw, json)
Hash identifier:          tYf1z6gsT7CQXnlaJIBNW9mM4Gk8AXaZwJpoSuVK4no=
Subject key identifier:   B3:07:1F:2F:89:B5:4B:C4:6F:CF:23:AC:1F:65:43:C6:B0:50:55:D3
Certificate issuer:       /CN=835d37408a225f1a8964f8d72bc99d9bbe533234
Certificate serial:       05B96F3A
Authority key identifier: 83:5D:37:40:8A:22:5F:1A:89:64:F8:D7:2B:C9:9D:9B:BE:53:32:34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g103QIoiXxqJZPjXK8mdm75TMjQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/swcfL4m1S8RvzyOsH2VDxrBQVdM.roa
Signing time:             Sat 01 Jan 2022 05:56:34 +0000
ROA not before:           Sat 01 Jan 2022 05:56:34 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203187
IP address blocks:        185.82.80.0/24 maxlen: 24
                          185.82.83.0/24 maxlen: 24
                          185.82.80.0/22 maxlen: 22
                          185.82.81.0/24 maxlen: 24
                          185.82.82.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96038714 (0x5b96f3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=835d37408a225f1a8964f8d72bc99d9bbe533234
        Validity
            Not Before: Jan  1 05:56:34 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b3071f2f89b54bc46fcf23ac1f6543c6b05055d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3d:93:7e:21:5e:6a:52:86:7a:c8:ec:67:be:
                    2f:c5:54:c7:df:82:40:13:8e:f9:38:c6:97:23:01:
                    49:ef:b9:c0:f6:26:d3:7c:b6:8d:85:d1:a0:d1:c4:
                    0d:37:fc:6f:2e:14:a3:9c:14:f0:35:a5:84:b5:b0:
                    4f:39:e3:39:6f:fe:e9:c9:c8:19:90:dd:a6:77:89:
                    1a:6a:03:ff:3d:da:ba:c5:d2:8b:11:8c:c8:cf:1f:
                    57:72:74:6d:f8:d0:e6:a9:68:70:99:40:bd:6c:81:
                    ed:b9:64:d6:d1:72:1d:92:fb:cc:4a:a5:e5:67:10:
                    2a:2c:8f:ca:9b:c7:81:d2:21:91:7f:87:7c:07:27:
                    f1:4e:3c:01:e2:e4:62:9b:c4:c9:9d:0b:cc:0f:39:
                    02:b6:c9:5d:6f:9d:6b:55:51:ac:a7:f3:41:d1:a6:
                    7d:f7:1b:f6:9e:e8:4b:d9:c1:ef:76:a0:0e:3c:cb:
                    3f:3a:46:9c:29:d9:3a:6c:c7:13:de:75:ac:12:e3:
                    98:e1:73:7f:af:a7:16:3f:c7:1f:e8:47:a6:90:b5:
                    5b:b3:80:ec:c9:12:d6:2f:6e:15:50:f5:73:41:14:
                    0e:ef:dd:3a:88:b5:8b:62:7e:92:ac:6c:65:41:0f:
                    3d:bd:9e:17:c9:76:e5:9e:de:46:82:97:62:28:5d:
                    54:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:07:1F:2F:89:B5:4B:C4:6F:CF:23:AC:1F:65:43:C6:B0:50:55:D3
            X509v3 Authority Key Identifier:
                keyid:83:5D:37:40:8A:22:5F:1A:89:64:F8:D7:2B:C9:9D:9B:BE:53:32:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g103QIoiXxqJZPjXK8mdm75TMjQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/swcfL4m1S8RvzyOsH2VDxrBQVdM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/g103QIoiXxqJZPjXK8mdm75TMjQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.82.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:6b:8f:ad:20:24:bb:de:55:67:f6:88:e4:2c:7e:6f:08:6c:
         f1:4b:af:b4:dc:3a:aa:28:e7:52:a5:c7:24:04:5f:4e:47:d1:
         44:d9:00:08:bb:5b:37:38:12:f7:06:4c:68:be:95:8e:7e:94:
         aa:b4:3a:45:6f:9f:61:29:40:29:91:8d:d4:95:e2:ab:e7:a4:
         a1:c2:57:2b:ff:b7:53:4d:2e:f1:f4:ba:6c:11:38:5e:82:35:
         54:93:d6:ef:af:ea:76:02:65:ee:95:22:30:d3:52:22:5e:46:
         fe:c6:09:ee:d7:e7:72:1d:b5:86:80:98:d8:2a:7c:63:5c:ca:
         88:73:b8:c2:4f:15:40:86:dd:01:40:b4:49:47:e9:e2:24:fd:
         a1:0b:f1:02:fe:71:ef:b9:78:af:a4:80:71:9f:d1:a8:4b:5a:
         fe:ae:41:a1:d8:71:30:53:f9:e7:52:2e:ba:37:0a:c2:43:3e:
         17:46:b2:0c:51:22:e8:1b:86:77:4a:c9:67:ea:0e:bd:5e:a5:
         c6:4f:97:ac:a6:76:b6:42:f9:9a:e2:91:ae:9d:63:53:c3:ca:
         f3:1d:60:81:f8:ff:ae:7c:2b:db:77:29:f0:dc:fb:91:97:c7:
         48:69:59:ca:61:65:e4:01:c7:9f:d1:02:e3:5b:f0:74:98:49:
         10:d6:29:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:00 2024 by rpki-client on console-ams.rpki-client.org