Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/IIB_Os76ohPgRx2p6-Y9zu38cIM.roa
File:                     IIB_Os76ohPgRx2p6-Y9zu38cIM.roa (raw, json)
Hash identifier:          3zDFTBaseWXt/+4KsQN1TU5pHFXe9FN8scoVzd4/wks=
Subject key identifier:   20:80:7F:3A:CE:FA:A2:13:E0:47:1D:A9:EB:E6:3D:CE:ED:FC:70:83
Certificate issuer:       /CN=5dde4b3b82f209b701ae340cf53b974078f16a9f
Certificate serial:       0F7FD62B
Authority key identifier: 5D:DE:4B:3B:82:F2:09:B7:01:AE:34:0C:F5:3B:97:40:78:F1:6A:9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/IIB_Os76ohPgRx2p6-Y9zu38cIM.roa
Signing time:             Sat 01 Jan 2022 06:04:41 +0000
ROA not before:           Sat 01 Jan 2022 06:04:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     59432
IP address blocks:        185.143.241.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 260036139 (0xf7fd62b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dde4b3b82f209b701ae340cf53b974078f16a9f
        Validity
            Not Before: Jan  1 06:04:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=20807f3acefaa213e0471da9ebe63dceedfc7083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:35:4d:1a:04:ce:01:dc:4a:70:82:2e:7d:78:
                    f8:75:c3:fb:e3:43:25:cb:e0:4b:c5:c8:d4:32:d2:
                    22:85:9a:85:cc:07:b9:75:61:09:24:d7:6c:52:bf:
                    a7:55:f7:54:47:eb:f2:27:e5:fa:ee:29:3a:ef:94:
                    4d:e8:13:5e:10:93:22:d3:73:9b:9d:45:c8:29:c7:
                    a8:a9:d6:aa:0a:72:c7:32:80:b7:c8:37:c2:a5:aa:
                    08:52:39:7d:66:41:25:16:bd:00:a8:0d:46:c2:da:
                    6a:0e:e9:85:8b:38:1f:69:a8:82:03:47:29:e5:04:
                    92:f4:69:03:db:e6:99:dd:43:2c:cd:0f:65:1f:28:
                    5a:65:2b:34:1f:e3:7a:8c:ab:74:9f:a8:af:e2:d6:
                    a9:dc:26:81:55:77:ed:72:fa:17:7d:60:fb:4e:97:
                    92:30:7c:68:04:c8:82:9c:d3:ae:68:12:c8:36:b6:
                    86:ca:b8:78:ec:7c:a6:b9:e0:ba:5b:60:8e:91:fb:
                    a4:f4:7a:08:77:56:b0:c7:a8:3c:69:cd:e1:3a:44:
                    db:3f:75:e6:8d:a5:0d:4f:7a:45:3c:16:a5:15:99:
                    f0:f7:a8:78:d8:c7:d3:4b:0c:a9:ed:0b:81:36:91:
                    43:e7:6f:8c:aa:19:25:a6:27:c4:f7:6f:ea:e6:b1:
                    8f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:80:7F:3A:CE:FA:A2:13:E0:47:1D:A9:EB:E6:3D:CE:ED:FC:70:83
            X509v3 Authority Key Identifier:
                keyid:5D:DE:4B:3B:82:F2:09:B7:01:AE:34:0C:F5:3B:97:40:78:F1:6A:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/IIB_Os76ohPgRx2p6-Y9zu38cIM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.143.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:dd:d8:e3:54:4b:5c:2a:0a:a7:0f:72:e9:8a:eb:d8:86:a4:
         c5:70:1b:fa:33:d3:2b:6a:cb:e5:c0:4c:4a:fb:86:97:99:21:
         dc:ba:47:76:7a:b0:1e:7f:d1:77:d2:69:c0:53:70:52:3c:2e:
         f8:2f:e1:09:19:c7:51:83:e1:6a:08:03:be:01:fd:90:f4:65:
         20:a8:b7:93:4e:b7:f5:19:40:b8:3c:b4:ce:1a:bf:ad:0e:f4:
         b7:45:3c:e0:36:bb:d4:9b:09:85:75:b3:c9:e5:f3:3a:19:6f:
         29:6a:c0:ea:00:ec:45:37:20:6b:ab:67:6c:7e:84:d2:c4:84:
         c4:9e:08:2a:52:a0:0d:ad:ac:44:ff:8b:6c:35:5e:b5:0d:75:
         9b:fc:81:60:b2:28:a7:ba:3c:27:9d:b6:f5:4d:47:80:e3:1f:
         d9:05:b7:7a:8d:a8:7a:29:4d:d7:56:c0:7c:cc:c4:0a:a4:a3:
         4e:db:8d:a0:05:e0:a3:d0:9a:95:54:e7:8c:1b:99:d6:89:ce:
         2a:83:b3:5e:6f:7d:2c:80:8f:b2:6a:00:cd:cc:7f:fa:b3:88:
         33:81:86:fc:c3:06:21:cb:65:c8:01:a1:ed:43:2b:f8:9c:bc:
         ee:0c:22:14:02:0d:1d:74:da:ee:df:c1:9f:83:d4:8d:14:09:
         70:e2:9c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:29 2024 by rpki-client on console-ams.rpki-client.org