Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/wbGFKWlHqnji1vGLmF7fmd87veo.roa
File:                     wbGFKWlHqnji1vGLmF7fmd87veo.roa (raw, json)
Hash identifier:          /XnycwYOUomEybGHjfGcINQyzRgyx8W3CbL+8X0Dd4g=
Subject key identifier:   C1:B1:85:29:69:47:AA:78:E2:D6:F1:8B:98:5E:DF:99:DF:3B:BD:EA
Certificate issuer:       /CN=e29b9ac2ef631b92e82f595d73e4792c816ec6e6
Certificate serial:       015A45
Authority key identifier: E2:9B:9A:C2:EF:63:1B:92:E8:2F:59:5D:73:E4:79:2C:81:6E:C6:E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4puawu9jG5LoL1ldc-R5LIFuxuY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/wbGFKWlHqnji1vGLmF7fmd87veo.roa
Signing time:             Fri 06 May 2022 07:08:22 +0000
ROA not before:           Fri 06 May 2022 07:08:22 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     8374
IP address blocks:        185.4.212.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88645 (0x15a45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e29b9ac2ef631b92e82f595d73e4792c816ec6e6
        Validity
            Not Before: May  6 07:08:22 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c1b185296947aa78e2d6f18b985edf99df3bbdea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:48:15:1f:88:93:a8:98:87:08:f5:59:f2:d5:
                    e8:1e:ed:91:cc:de:88:9f:13:97:52:3d:47:e1:bc:
                    33:52:bd:e4:f2:fa:37:69:c0:b0:80:44:13:8b:21:
                    a8:a6:a6:a3:c2:03:f8:7a:80:2f:04:64:48:8b:d7:
                    29:5a:73:67:93:39:6c:e5:d9:fd:31:48:0c:f6:5d:
                    8b:0f:06:e1:fb:81:25:bd:42:80:71:8c:c3:6f:ec:
                    ba:6a:a2:f9:e6:3b:0a:fb:d9:1f:a1:b3:6a:7c:ff:
                    d9:48:0f:cf:a6:39:f3:06:c1:5c:e2:cf:af:6c:1d:
                    aa:75:a4:20:ca:65:90:d5:4d:c7:2d:d6:f8:2b:33:
                    d7:e8:4e:d2:77:a6:e3:a3:36:d8:a5:9c:ac:45:bd:
                    9b:44:67:3c:ba:90:1c:b6:d5:1d:52:47:f4:18:6c:
                    06:2b:64:48:5a:80:70:2e:07:ef:d3:a5:4c:89:19:
                    72:2f:26:e6:8f:f8:a7:58:86:4e:2b:b6:37:33:e9:
                    59:59:0b:f1:58:df:60:2f:42:57:e4:29:e1:c5:f4:
                    48:f0:c6:80:ac:6f:3b:14:fd:c9:58:c1:14:fd:6a:
                    2e:09:df:e3:5b:e5:4b:c6:e7:ce:18:56:4a:d7:bd:
                    f4:e0:00:ae:07:16:3c:27:cb:03:07:e2:f6:b3:7c:
                    f7:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:B1:85:29:69:47:AA:78:E2:D6:F1:8B:98:5E:DF:99:DF:3B:BD:EA
            X509v3 Authority Key Identifier:
                keyid:E2:9B:9A:C2:EF:63:1B:92:E8:2F:59:5D:73:E4:79:2C:81:6E:C6:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4puawu9jG5LoL1ldc-R5LIFuxuY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/wbGFKWlHqnji1vGLmF7fmd87veo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.4.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:53:b1:3d:58:a1:03:24:13:b6:9c:2f:4e:71:6a:d3:0d:ea:
         e4:98:0f:99:d7:f5:f5:07:d5:cd:5b:54:4a:18:9c:1e:0a:f2:
         19:b1:38:d2:ce:02:19:7a:eb:54:88:38:4f:00:a4:bf:7d:ba:
         6b:4d:3c:34:41:11:18:48:0d:e2:20:7b:2a:be:95:86:d8:ff:
         a1:28:61:33:63:d5:6a:e7:47:bc:46:3a:26:de:74:84:f2:5a:
         2d:4c:a6:ef:26:e0:fb:7d:29:92:06:b6:2b:38:6c:0a:64:b2:
         cf:57:9c:31:47:7b:6d:36:b7:6c:f1:70:00:27:0a:f9:56:75:
         b2:53:ce:48:81:d8:87:7b:8a:72:c3:e3:3e:f4:6e:a5:87:8c:
         38:82:76:9c:79:1c:ef:b7:5e:9f:ca:9e:03:1a:b1:59:5c:15:
         93:65:24:43:31:f2:a4:05:40:4a:93:f1:68:bd:bd:e3:f8:ff:
         67:75:1a:9c:28:0f:60:d0:82:ad:13:9c:f2:90:8b:f1:3a:a3:
         19:24:7c:75:93:bc:07:64:5f:c8:cc:91:96:0b:33:60:4d:e4:
         ea:af:8d:24:a2:6f:37:2a:cc:2f:5a:41:58:cc:58:1d:1a:50:
         7b:d7:f6:ce:96:aa:a1:67:48:25:b2:2f:ce:08:bb:bb:18:5e:
         65:69:f4:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:57 2024 by rpki-client on console-fra.rpki-client.org