Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/GMyLgIuacXFqGFNCDCw3eCYW8Sg.roa
File:                     GMyLgIuacXFqGFNCDCw3eCYW8Sg.roa (raw, json)
Hash identifier:          yuWAfO9tRmftshgER+ifPtDv757sBvfataxlxfaoXEI=
Subject key identifier:   18:CC:8B:80:8B:9A:71:71:6A:18:53:42:0C:2C:37:78:26:16:F1:28
Certificate issuer:       /CN=0cd27fea3baa3ef680e8f7a07a5f194ac49892a5
Certificate serial:       96688E
Authority key identifier: 0C:D2:7F:EA:3B:AA:3E:F6:80:E8:F7:A0:7A:5F:19:4A:C4:98:92:A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DNJ_6juqPvaA6Pegel8ZSsSYkqU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/GMyLgIuacXFqGFNCDCw3eCYW8Sg.roa
Signing time:             Sat 01 Jan 2022 00:56:42 +0000
ROA not before:           Sat 01 Jan 2022 00:56:42 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     25491
IP address blocks:        185.104.244.0/24 maxlen: 24
                          185.104.245.0/24 maxlen: 24
                          185.104.246.0/24 maxlen: 24
                          185.104.247.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9857166 (0x96688e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cd27fea3baa3ef680e8f7a07a5f194ac49892a5
        Validity
            Not Before: Jan  1 00:56:42 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=18cc8b808b9a71716a1853420c2c37782616f128
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b3:57:4a:10:1b:57:53:8d:ad:ae:c7:2f:a2:
                    f2:c3:6f:7e:94:5f:27:0a:13:72:91:37:50:64:50:
                    34:6d:83:cf:ba:43:8c:82:62:3f:79:aa:55:2e:05:
                    1e:5a:f2:d1:87:47:43:3e:7c:a0:cf:af:64:1f:56:
                    c6:07:2a:3f:57:18:a4:fc:b7:c7:84:45:fe:21:aa:
                    a7:e7:cf:f0:ce:b8:8f:4d:9a:14:00:98:6b:2e:7a:
                    e9:1c:c5:84:33:dd:58:ec:31:2b:e2:1f:de:d8:37:
                    ff:ff:2b:86:d8:8b:e8:81:c7:e8:ea:4e:5f:14:44:
                    fb:84:68:c5:ac:aa:e0:ca:17:b6:17:c5:6c:ee:a1:
                    22:5d:f0:35:b9:c9:3b:6d:90:48:fe:45:3e:0e:bb:
                    2d:66:66:35:a1:f3:e5:d1:bc:44:d2:f2:06:db:d4:
                    b2:b0:e9:40:13:b5:50:3c:63:78:08:1d:37:7f:3d:
                    fc:bd:6e:32:de:b2:e0:21:c9:82:70:ea:82:db:b3:
                    aa:b2:bc:4f:5f:5f:ab:9d:00:50:e2:7d:5e:1f:53:
                    e9:1e:d2:0d:b8:63:af:c4:34:0d:06:ea:fb:35:6d:
                    e1:db:10:6f:97:fa:1d:e1:8f:08:93:f5:0e:03:bd:
                    2f:ab:bf:52:27:04:2a:e2:db:11:e7:a7:c0:0c:f0:
                    88:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:CC:8B:80:8B:9A:71:71:6A:18:53:42:0C:2C:37:78:26:16:F1:28
            X509v3 Authority Key Identifier:
                keyid:0C:D2:7F:EA:3B:AA:3E:F6:80:E8:F7:A0:7A:5F:19:4A:C4:98:92:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNJ_6juqPvaA6Pegel8ZSsSYkqU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/GMyLgIuacXFqGFNCDCw3eCYW8Sg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.104.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:d0:4d:48:0d:bf:1b:64:4f:46:5f:bd:d1:57:5d:cd:09:a3:
         34:9f:15:d5:fd:96:19:85:24:b7:41:09:82:10:66:69:d7:55:
         c1:17:7a:58:f5:3d:28:e2:2d:81:e8:b1:f4:c7:58:83:2c:d2:
         82:6b:79:c8:3a:d8:36:f0:90:2b:9c:fb:3f:a7:29:04:ef:7c:
         87:a1:06:84:00:95:1f:91:c4:9a:0d:a2:28:40:f3:4b:e7:48:
         d0:8d:42:25:78:30:c0:ee:2d:37:6c:e9:bc:15:80:dd:95:50:
         2f:ec:2f:1c:ee:1b:15:c9:12:5a:be:04:19:96:36:55:56:73:
         eb:7a:76:8f:0d:7e:67:02:1f:e2:45:87:69:d6:e0:e7:0c:8c:
         21:c2:cb:ce:fd:db:74:3c:cd:d4:ad:fd:76:31:f0:14:02:57:
         66:95:ea:eb:d8:f9:da:f5:40:dd:11:4b:24:7d:53:4c:b1:67:
         aa:13:27:75:6c:e7:b2:aa:03:85:12:60:00:c4:b4:45:6d:64:
         e9:bd:0e:b6:05:5a:7e:e4:c5:a2:e5:5e:2b:d7:8a:e8:4b:42:
         4f:74:51:d3:6e:73:c4:a5:dc:2e:3d:73:3e:1f:50:0b:ca:8e:
         0c:e4:e8:db:20:33:75:cc:8a:71:1b:0c:94:e2:11:4c:c4:af:
         71:3a:ce:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:37 2024 by rpki-client on console-ams.rpki-client.org