Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/dUAVIX9A8M02-jxf329BcjIEGiY.roa
File:                     dUAVIX9A8M02-jxf329BcjIEGiY.roa (raw, json)
Hash identifier:          kwghtjvAwgAxlRWE6uog1+tEqdz6iwhZWaRF/IWbZjU=
Subject key identifier:   75:40:15:21:7F:40:F0:CD:36:FA:3C:5F:DF:6F:41:72:32:04:1A:26
Certificate issuer:       /CN=5806da5a59251275ceb18694e17415352aedd6aa
Certificate serial:       03BFDAE3
Authority key identifier: 58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/dUAVIX9A8M02-jxf329BcjIEGiY.roa
Signing time:             Sat 01 Jan 2022 05:55:53 +0000
ROA not before:           Sat 01 Jan 2022 05:55:53 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     58119
IP address blocks:        185.220.144.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62905059 (0x3bfdae3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5806da5a59251275ceb18694e17415352aedd6aa
        Validity
            Not Before: Jan  1 05:55:53 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=754015217f40f0cd36fa3c5fdf6f417232041a26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:52:78:78:bc:94:fa:35:33:0e:13:65:aa:6f:
                    3b:d5:af:07:c4:19:2c:d1:02:1a:f5:70:16:b5:e9:
                    3e:bc:f8:5a:aa:d3:a9:d0:54:a2:cb:53:cd:4c:99:
                    dc:fa:ff:89:f6:4e:de:5e:a4:7e:76:6b:5b:cf:34:
                    89:da:5b:67:9e:02:35:b3:b7:31:01:c0:0c:20:d4:
                    ec:0e:ed:ee:5a:6b:c8:c5:54:26:0a:4b:d8:cd:74:
                    e4:b3:35:ac:c7:cd:a9:86:81:8a:f9:41:28:09:0a:
                    9d:36:7c:11:25:6b:ee:4c:70:f1:83:85:99:5d:2e:
                    ce:05:3c:5d:a4:5c:97:b6:5d:84:39:6c:5a:46:e2:
                    e3:3d:5e:42:9f:f1:89:62:dd:39:3d:19:be:7a:81:
                    c1:bf:c0:48:f4:d6:26:56:56:eb:13:55:14:33:67:
                    c3:c6:6e:b3:f4:5b:6f:1a:2f:cb:f5:30:30:bb:53:
                    1b:7f:a2:c4:78:b6:c7:f8:89:88:68:46:be:ab:e9:
                    e2:65:2a:63:70:9c:2a:41:85:ab:4b:83:0e:f9:be:
                    02:b8:fe:5b:bd:53:44:12:8e:79:bc:a0:50:23:2d:
                    61:69:7a:3e:77:cc:0c:95:0f:28:5a:dd:1d:2b:30:
                    e1:3c:ad:41:b9:17:f9:17:cb:44:78:51:7c:22:19:
                    32:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:40:15:21:7F:40:F0:CD:36:FA:3C:5F:DF:6F:41:72:32:04:1A:26
            X509v3 Authority Key Identifier:
                keyid:58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/dUAVIX9A8M02-jxf329BcjIEGiY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.220.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:c0:c4:9a:3c:7b:9b:4e:65:96:ee:e5:4f:6d:74:ee:a4:d4:
         81:44:fa:a6:54:87:c1:c2:5e:2b:76:f2:72:74:a7:0d:9b:36:
         b8:85:94:93:59:af:d8:60:ea:be:99:b1:98:d2:ef:b6:4c:1b:
         be:06:6e:bd:32:47:76:b4:ab:67:df:79:ec:7b:28:ca:0d:d5:
         e2:db:d0:90:98:cd:86:4d:57:f7:b3:36:92:1a:1b:f2:71:75:
         a7:ee:f8:9c:ca:a6:aa:e8:b1:22:f2:12:65:fa:e3:a7:a5:63:
         da:bb:51:d8:e0:16:cf:49:45:ca:1b:c3:96:0b:5d:a2:b9:ab:
         12:a4:5e:5a:4d:c7:9c:ff:45:5d:9b:16:4c:ab:c4:0e:88:d0:
         ae:d5:a8:db:7c:1c:c4:7a:39:b6:b1:c8:da:e7:01:7e:6f:06:
         32:2f:ef:13:ec:33:1d:87:3d:b3:ed:17:7d:8a:b7:3e:21:6a:
         b6:95:e4:2b:e1:2f:19:ca:00:c5:10:38:98:2b:80:35:74:6f:
         36:ab:3b:97:6d:df:b2:4f:0d:02:1e:eb:b6:40:9c:32:c9:fc:
         71:9d:da:cf:76:54:33:15:8a:75:90:bb:e9:01:a1:7f:9a:38:
         08:4c:92:c4:1f:23:d5:3b:b1:ab:ab:8f:7c:44:4d:e0:c8:7e:
         74:a7:dd:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:58 2024 by rpki-client on console-ams.rpki-client.org