Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/SbEO47jtbG8kfo-cLVGwAmEum4U.roa
File:                     SbEO47jtbG8kfo-cLVGwAmEum4U.roa (raw, json)
Hash identifier:          /T7Am8IrsjJBNzYjUKNgAzUl6ip7BdE2N/QWmVRIBBI=
Subject key identifier:   49:B1:0E:E3:B8:ED:6C:6F:24:7E:8F:9C:2D:51:B0:02:61:2E:9B:85
Certificate issuer:       /CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Certificate serial:       0205810A
Authority key identifier: EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/SbEO47jtbG8kfo-cLVGwAmEum4U.roa
Signing time:             Fri 25 Feb 2022 15:27:26 +0000
ROA not before:           Fri 25 Feb 2022 15:27:26 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61317
IP address blocks:        185.22.56.0/22 maxlen: 24
                          195.14.105.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33915146 (0x205810a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
        Validity
            Not Before: Feb 25 15:27:26 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=49b10ee3b8ed6c6f247e8f9c2d51b002612e9b85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:98:89:f4:b2:53:96:44:e0:7a:84:78:af:af:
                    1d:ed:e5:7d:97:ca:6e:6e:73:f7:7f:69:a1:bd:ca:
                    eb:76:7c:b7:85:cb:cf:54:91:e0:a4:06:97:00:6e:
                    db:9a:a9:8f:fd:ca:8d:26:47:8b:c4:ff:37:56:ae:
                    f4:4a:2b:69:e9:fa:68:9c:ea:91:31:d1:d6:83:28:
                    4c:f6:e5:66:07:42:6d:93:0c:a3:f9:17:ba:67:f0:
                    db:fa:fa:d3:06:04:e4:8c:fd:c5:74:28:05:28:cc:
                    c6:c2:9e:f2:30:24:6c:b6:3f:9c:0c:d7:3c:65:08:
                    9a:38:a2:fb:d2:1a:21:07:31:b5:dd:3c:73:7d:30:
                    86:4a:32:1f:12:08:ef:97:1a:89:99:a6:a2:5a:42:
                    fc:c5:55:99:4c:ce:15:c2:17:48:65:0d:d0:9c:80:
                    fd:1b:e4:4f:61:c0:9b:ba:d3:a4:f9:1c:e5:c1:f8:
                    07:f6:89:68:db:43:7a:b1:c9:95:46:1b:ca:71:59:
                    d6:f2:20:41:a3:4f:bc:b0:16:54:46:2a:94:60:03:
                    59:1f:61:c4:d1:55:31:24:58:7b:1b:76:b1:ca:e8:
                    88:8b:ee:8b:2b:dc:09:7c:d8:05:95:c2:99:a7:21:
                    3a:c2:bb:3a:aa:1b:17:28:a7:e9:e5:4d:b1:dd:0d:
                    09:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:B1:0E:E3:B8:ED:6C:6F:24:7E:8F:9C:2D:51:B0:02:61:2E:9B:85
            X509v3 Authority Key Identifier:
                keyid:EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/SbEO47jtbG8kfo-cLVGwAmEum4U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.22.56.0/22
                  195.14.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:d8:a4:fe:89:ef:6a:d7:0e:ab:1e:11:d6:24:55:31:67:c4:
         87:f4:8b:ba:98:92:34:55:83:a7:35:d9:aa:b1:59:c0:bc:43:
         e1:72:70:09:14:46:bd:5b:93:62:d0:c0:b8:4d:c0:93:84:83:
         ac:f7:45:fe:47:57:a6:2d:b7:3e:c9:be:ba:6d:0b:98:1c:c9:
         c5:87:84:3e:15:49:b8:f7:cd:63:be:d5:1f:84:e0:49:fc:a3:
         94:04:b4:9e:c2:18:87:d8:6b:e2:02:9f:4e:eb:5a:5c:83:42:
         51:04:a3:33:63:a1:8b:40:20:dd:f7:f1:2b:55:95:89:b5:d4:
         9f:0f:14:b2:3a:a1:67:ec:af:e9:b8:16:6c:7e:e0:f8:12:a5:
         b5:81:cb:d5:60:c5:b3:74:63:83:e3:93:22:ba:aa:bc:97:a7:
         2b:29:e6:f4:c8:5c:bf:03:bf:46:71:77:e0:0c:9e:bc:43:92:
         43:89:da:1d:eb:db:36:01:1d:72:d8:48:58:fa:38:85:5a:30:
         a4:fe:6a:6b:55:4c:d3:37:1a:9e:7c:13:8b:45:37:63:ba:24:
         42:36:73:18:0f:6d:f9:da:cf:2e:9b:9b:e5:cb:7f:45:d3:95:
         31:10:ba:1a:32:b2:f0:be:c5:7e:d5:90:db:f7:b1:fc:49:48:
         eb:f7:85:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:30 2023 by rpki-client on console-ams.rpki-client.org