Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/8ksDPHwaZFk_mC7_zs3Cm6d_aBA.roa
File:                     8ksDPHwaZFk_mC7_zs3Cm6d_aBA.roa (raw, json)
Hash identifier:          fQa9HaHNxWlaa9B/W4YRG6+1sncLF3WPK+6c4cYgch4=
Subject key identifier:   F2:4B:03:3C:7C:1A:64:59:3F:98:2E:FF:CE:CD:C2:9B:A7:7F:68:10
Certificate issuer:       /CN=5f99fde0d63b11b5c2dd816c0f93c2ea58350336
Certificate serial:       090B1CAD
Authority key identifier: 5F:99:FD:E0:D6:3B:11:B5:C2:DD:81:6C:0F:93:C2:EA:58:35:03:36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X5n94NY7EbXC3YFsD5PC6lg1AzY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/8ksDPHwaZFk_mC7_zs3Cm6d_aBA.roa
Signing time:             Sat 01 Jan 2022 02:54:59 +0000
ROA not before:           Sat 01 Jan 2022 02:54:59 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     25400
IP address blocks:        185.81.14.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 151723181 (0x90b1cad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f99fde0d63b11b5c2dd816c0f93c2ea58350336
        Validity
            Not Before: Jan  1 02:54:59 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f24b033c7c1a64593f982effcecdc29ba77f6810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:6f:59:c5:c7:c3:9c:78:b1:ae:d1:24:2f:1f:
                    09:9e:5f:a0:ae:8b:72:31:c1:4f:f4:ac:76:65:b5:
                    fc:f4:ec:49:1a:0d:f5:9e:cb:84:e1:33:e1:a0:ca:
                    af:99:38:71:39:3c:76:55:40:bb:7c:6a:69:0e:2f:
                    a4:6d:b9:f9:00:12:71:0a:4c:df:86:97:3b:e4:57:
                    d6:57:94:b6:48:31:73:3c:10:a9:b9:52:9a:cc:89:
                    50:25:37:d5:1e:21:e4:a5:cf:ba:d2:07:90:3a:c8:
                    ad:ce:a7:e6:8d:96:b7:4e:87:18:11:c5:cf:64:41:
                    8f:08:60:06:1a:cc:ac:9e:b3:e2:42:dc:c9:d0:43:
                    ba:86:51:e9:d6:24:62:07:0f:48:13:82:78:2f:1f:
                    14:df:fe:3b:03:d8:2a:67:f4:61:08:c0:4e:fa:ca:
                    64:94:f5:69:9f:25:38:26:49:4b:ba:57:09:1f:e6:
                    08:98:6b:d8:6b:78:68:f7:fa:75:c1:33:63:47:7b:
                    4f:20:48:d7:e6:23:31:bd:fe:f8:f4:7f:6a:36:fb:
                    2e:8e:f1:d3:82:ad:ae:81:97:60:15:06:e2:68:69:
                    f2:6d:9c:85:39:6a:35:84:73:73:42:fc:ca:18:72:
                    6d:df:9e:b6:69:64:2c:fe:e3:61:23:03:4d:83:3f:
                    75:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:4B:03:3C:7C:1A:64:59:3F:98:2E:FF:CE:CD:C2:9B:A7:7F:68:10
            X509v3 Authority Key Identifier:
                keyid:5F:99:FD:E0:D6:3B:11:B5:C2:DD:81:6C:0F:93:C2:EA:58:35:03:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5n94NY7EbXC3YFsD5PC6lg1AzY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/8ksDPHwaZFk_mC7_zs3Cm6d_aBA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.81.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         36:38:cc:29:aa:0f:a0:30:6d:4c:83:32:0b:4e:1c:63:ec:c6:
         6d:61:a8:03:e0:c0:d7:05:c7:45:81:47:00:c8:92:a3:a0:da:
         4f:9d:de:ef:70:01:ae:5e:26:27:52:80:8a:f4:6d:17:75:4c:
         41:a3:01:85:84:8d:02:d9:9a:43:83:53:e1:da:77:eb:a8:1c:
         21:57:ad:76:ef:ec:93:6d:44:ce:92:a8:65:34:b0:00:11:54:
         7d:e8:d0:99:f4:6c:dc:fa:23:0b:7a:07:c9:fc:4f:86:d4:e1:
         7a:f3:19:19:99:32:20:0b:b6:d0:d3:af:93:9e:a0:13:00:b0:
         84:47:dd:d5:dd:ef:4e:39:62:a1:39:53:0d:6b:5b:1c:7e:bc:
         56:42:fe:ea:d4:95:59:b6:83:84:54:53:2a:95:e0:e8:0d:1d:
         7f:d9:16:6b:69:ef:01:97:6c:af:6b:f2:1e:fd:b6:fb:11:39:
         f1:62:40:f8:0b:4b:5f:f2:a0:fa:c3:fc:db:2c:a3:e3:83:2e:
         fd:59:a4:c8:8a:8c:ff:b3:75:f4:53:6b:2b:3c:48:c4:84:49:
         0c:4e:7e:68:31:29:3c:c0:53:a1:48:0a:7b:9a:31:fc:4d:d8:
         9d:d1:05:84:28:34:71:13:8b:f5:87:31:1b:7e:80:f1:bb:0a:
         1b:3e:dc:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:23 2024 by rpki-client on console-ams.rpki-client.org