Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/HmFyI9eRuyzdIzvzIv-Tysm_Nhw.roa
File:                     HmFyI9eRuyzdIzvzIv-Tysm_Nhw.roa (raw, json)
Hash identifier:          hATLZj9Ti3Hpr3SBwIEhJGJQcUxjJpufGO7vNS42X2I=
Subject key identifier:   1E:61:72:23:D7:91:BB:2C:DD:23:3B:F3:22:FF:93:CA:C9:BF:36:1C
Certificate issuer:       /CN=2bbc002a2b359b1aa8879e1c4d70455b3192efac
Certificate serial:       0D970B0E
Authority key identifier: 2B:BC:00:2A:2B:35:9B:1A:A8:87:9E:1C:4D:70:45:5B:31:92:EF:AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K7wAKis1mxqoh54cTXBFWzGS76w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/HmFyI9eRuyzdIzvzIv-Tysm_Nhw.roa
Signing time:             Sat 01 Jan 2022 06:54:30 +0000
ROA not before:           Sat 01 Jan 2022 06:54:30 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     31331
IP address blocks:        83.150.160.0/20 maxlen: 20
                          83.150.184.0/21 maxlen: 21
                          83.150.128.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 228002574 (0xd970b0e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bbc002a2b359b1aa8879e1c4d70455b3192efac
        Validity
            Not Before: Jan  1 06:54:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1e617223d791bb2cdd233bf322ff93cac9bf361c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:60:ff:59:9e:1b:3a:0c:8a:8f:33:9c:c5:60:
                    ee:1a:6a:15:3f:c9:9a:8b:13:24:48:ef:43:ca:ac:
                    ae:00:57:26:7b:40:93:1d:7f:70:66:01:19:40:48:
                    2c:fe:84:9d:df:3e:9b:22:2c:8d:3e:09:29:71:2e:
                    b1:0a:7c:59:5d:e0:81:3d:28:56:66:a2:66:24:2f:
                    ec:60:de:6c:2d:0b:a8:05:84:99:11:1c:d0:72:f7:
                    93:f5:3e:bc:7a:e7:49:a4:cb:70:57:f3:e6:3a:c3:
                    e1:53:f8:5d:e6:1b:a2:9e:ae:29:c1:01:e5:aa:fb:
                    5e:26:a8:5b:ed:7a:2c:ec:1f:a7:61:4e:3d:1d:9a:
                    65:06:2b:78:ea:e0:58:3e:d2:2a:a2:fa:08:ac:0c:
                    a4:44:07:21:b5:11:6e:68:ac:0a:76:b8:28:26:29:
                    ea:c2:38:7d:f8:fb:85:10:ab:68:7c:6c:52:9f:36:
                    fc:4e:58:06:f8:ef:0f:09:65:41:af:7b:2f:48:e9:
                    f9:b6:fd:91:3c:cb:db:14:21:91:f1:96:4a:da:97:
                    7f:ea:59:c7:2d:f7:cd:40:77:7d:c2:6e:7c:fa:14:
                    39:65:6d:a5:8c:87:2e:33:ed:2b:d6:47:9e:9c:0e:
                    99:78:3a:ce:68:2e:fc:b3:9c:bb:ff:4f:03:b5:d8:
                    85:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:61:72:23:D7:91:BB:2C:DD:23:3B:F3:22:FF:93:CA:C9:BF:36:1C
            X509v3 Authority Key Identifier:
                keyid:2B:BC:00:2A:2B:35:9B:1A:A8:87:9E:1C:4D:70:45:5B:31:92:EF:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K7wAKis1mxqoh54cTXBFWzGS76w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/HmFyI9eRuyzdIzvzIv-Tysm_Nhw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.150.128.0-83.150.175.255
                  83.150.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4d:65:8d:75:61:7e:7c:af:af:85:37:b3:5d:26:78:e3:0c:cf:
         4b:6b:86:dc:b1:54:77:5c:74:8c:55:b8:39:ff:4d:0f:fc:d9:
         a2:ac:71:d3:f2:d5:6d:3b:a3:1c:4b:36:81:82:1b:01:a9:a8:
         1e:13:ff:c3:3e:c3:2d:1e:49:85:1b:09:58:5f:f4:8f:5a:ba:
         94:91:7a:b3:3c:f6:24:82:d2:5d:83:85:2d:bc:3d:e0:b9:75:
         8c:6f:10:30:07:a0:90:a1:00:62:c0:d5:28:da:b5:a2:4e:7d:
         48:3c:05:88:2a:3a:a1:f8:6e:be:d7:89:7f:9c:96:43:4d:10:
         29:38:1b:4e:c5:29:c5:a1:bd:38:b4:5b:45:d0:53:7a:27:5f:
         bb:62:5e:38:ff:4a:9b:c4:bf:58:91:af:07:a3:b4:60:a6:c9:
         c4:18:fd:b6:50:ba:e7:a6:5d:01:37:6f:ac:97:8c:2b:4b:8d:
         20:55:d8:fb:19:36:b8:7f:4e:e3:69:84:2c:5b:25:b5:59:68:
         04:63:1e:23:8e:43:b1:94:77:30:b3:cf:86:ba:2a:7a:67:32:
         11:5e:87:5a:08:06:c7:75:e3:b9:01:e1:e3:c4:37:1f:25:b5:
         ad:69:43:df:94:3d:a3:a9:98:ee:a8:82:f1:3c:9f:ad:33:a8:
         41:58:1c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:21 2024 by rpki-client on console-ams.rpki-client.org