Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/ZoFnorQwkfJu0bsFbJqjoO8Wg2Q.roa
File:                     ZoFnorQwkfJu0bsFbJqjoO8Wg2Q.roa (raw, json)
Hash identifier:          jMG1iUtgT7QMdA7Yg2TechuWmg852yHGzX9/jQYkl1s=
Subject key identifier:   66:81:67:A2:B4:30:91:F2:6E:D1:BB:05:6C:9A:A3:A0:EF:16:83:64
Certificate issuer:       /CN=5806da5a59251275ceb18694e17415352aedd6aa
Certificate serial:       04F7ABA6
Authority key identifier: 58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/ZoFnorQwkfJu0bsFbJqjoO8Wg2Q.roa
Signing time:             Wed 18 May 2022 14:00:27 +0000
ROA not before:           Wed 18 May 2022 14:00:27 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     58061
IP address blocks:        185.220.146.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83340198 (0x4f7aba6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5806da5a59251275ceb18694e17415352aedd6aa
        Validity
            Not Before: May 18 14:00:27 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=668167a2b43091f26ed1bb056c9aa3a0ef168364
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:bd:66:34:cb:84:bb:59:c2:d1:d2:f8:b6:ba:
                    b1:8e:c8:a2:92:24:50:bc:4a:2c:76:fe:87:c1:f3:
                    a4:68:1d:8a:9e:46:77:a6:fd:21:5d:26:e5:15:2f:
                    9f:80:10:b8:ee:ef:4b:96:d8:48:d8:ca:59:d7:87:
                    00:7c:28:54:2d:fd:4b:1b:00:e0:6a:c5:82:08:79:
                    37:63:8c:8c:c4:c5:67:13:52:63:3a:f6:cc:52:38:
                    8c:21:7c:3b:77:b9:ac:25:c8:b9:39:41:4e:f4:5e:
                    49:be:53:9b:74:42:7f:18:6f:3d:56:31:cf:0d:e2:
                    93:97:78:ca:57:e9:a0:e1:a8:0d:b2:51:3b:c5:2f:
                    f2:48:b2:ab:eb:d7:19:1a:f1:79:9e:a4:cc:0a:8c:
                    5f:9f:02:37:21:3d:c5:c4:1e:12:7e:2e:17:46:6e:
                    63:e7:4c:3f:00:9c:fc:f9:a1:47:08:bf:c1:4d:c9:
                    fd:a8:c0:f4:88:02:38:66:6e:dd:e5:c7:6b:8b:90:
                    36:23:7a:3c:7d:be:f6:97:ae:51:05:6f:f6:1a:3c:
                    81:27:da:25:66:bf:e3:5b:f3:80:b0:11:eb:5f:bf:
                    c7:f3:73:56:11:1b:d4:06:84:46:58:bf:2c:f5:8d:
                    5c:72:b7:a2:1b:b7:18:c1:df:33:d3:4f:b0:3c:14:
                    c6:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:81:67:A2:B4:30:91:F2:6E:D1:BB:05:6C:9A:A3:A0:EF:16:83:64
            X509v3 Authority Key Identifier:
                keyid:58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/ZoFnorQwkfJu0bsFbJqjoO8Wg2Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.220.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         50:31:8f:14:73:98:8c:7f:76:69:ca:4e:a4:4e:0c:a2:7e:ae:
         e6:85:04:85:f0:32:b4:48:41:8f:c9:c8:ac:33:e9:b3:d9:51:
         75:c9:19:84:44:e7:94:e0:23:4b:02:6b:4e:3d:c0:94:77:1d:
         86:a1:b9:d3:da:d0:11:d9:c2:4d:95:49:21:1c:12:dd:49:9a:
         0e:f8:c5:71:e9:fd:a9:37:e9:3d:ee:53:64:11:3a:f0:59:f8:
         ba:43:22:6e:5b:b4:47:ea:b3:9c:91:a5:cb:1f:59:83:e1:06:
         d6:95:69:79:f4:61:8b:08:c2:71:72:e9:e7:5d:42:99:2d:3a:
         e4:a7:2d:f9:4a:22:37:56:0c:ab:88:58:44:47:db:f5:f1:8e:
         d2:15:16:0e:78:91:90:f6:74:40:d4:c3:52:d4:8a:cc:6d:09:
         7a:88:ed:9d:34:33:3f:47:9e:26:47:63:2e:23:2b:31:c0:71:
         3e:4e:32:fa:d0:ac:b2:33:44:d9:b9:dd:b5:ad:bd:44:8e:27:
         28:87:53:d4:5e:cb:2e:e3:c2:22:63:7c:5e:4a:0b:8b:0c:d1:
         ed:2f:2f:22:6b:a6:53:3f:d4:0d:35:f2:0c:17:ee:a6:ed:6c:
         50:ad:20:e1:45:86:63:07:ec:b5:b7:34:19:59:0a:7a:04:5c:
         a5:4e:1a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:58 2024 by rpki-client on console-ams.rpki-client.org