Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/b366bb-7220-45f3-b46d-d63a5111fbf7/1/F9R7s92L2SKlc1SEQFStjawpSxU.roa
File:                     F9R7s92L2SKlc1SEQFStjawpSxU.roa (raw, json)
Hash identifier:          svQ48aW1QIe3ORuwnTQ3d5uKfz7nkaLnjYBs9I/+ZjI=
Subject key identifier:   17:D4:7B:B3:DD:8B:D9:22:A5:73:54:84:40:54:AD:8D:AC:29:4B:15
Certificate issuer:       /CN=02c4913823a319feba2270e1ba2ca09e435bd55b
Certificate serial:       037027F0
Authority key identifier: 02:C4:91:38:23:A3:19:FE:BA:22:70:E1:BA:2C:A0:9E:43:5B:D5:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AsSROCOjGf66InDhuiygnkNb1Vs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/b366bb-7220-45f3-b46d-d63a5111fbf7/1/F9R7s92L2SKlc1SEQFStjawpSxU.roa
Signing time:             Sat 01 Jan 2022 08:04:39 +0000
ROA not before:           Sat 01 Jan 2022 08:04:39 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     48904
IP address blocks:        185.204.8.0/23 maxlen: 23
                          185.204.10.0/23 maxlen: 23
                          217.72.16.0/21 maxlen: 21
                          217.72.24.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57681904 (0x37027f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02c4913823a319feba2270e1ba2ca09e435bd55b
        Validity
            Not Before: Jan  1 08:04:39 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=17d47bb3dd8bd922a57354844054ad8dac294b15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c8:e7:69:6b:80:f5:ab:19:04:06:06:93:93:
                    b8:44:00:5c:f5:7f:68:4b:cd:6f:d9:cc:61:a6:bc:
                    cb:49:0a:86:35:12:92:b5:65:4d:3f:ac:86:fb:a9:
                    3e:47:80:6c:96:39:c1:d6:19:73:bf:70:28:54:3f:
                    77:a0:f1:09:1e:ab:82:92:ea:1a:5f:f9:ff:60:c6:
                    4a:12:74:21:6f:7b:04:82:6d:1e:e5:77:96:a3:da:
                    6c:df:32:47:90:63:68:46:fd:5b:e1:36:51:cb:4f:
                    0c:ee:25:b8:40:82:b1:ae:40:a6:4d:d8:33:fe:50:
                    b3:66:7e:50:6f:f9:f6:87:dd:37:06:43:0d:f2:e8:
                    e7:8c:e3:39:21:26:17:1d:95:19:49:c4:97:8f:9e:
                    70:64:85:d8:70:7d:18:50:e3:67:b1:d7:0d:0f:ae:
                    0c:a2:12:70:21:a5:21:e6:17:67:ab:48:39:da:8a:
                    ef:4e:d5:b0:ad:fe:4c:37:86:66:7b:a3:24:7b:1c:
                    70:cf:b7:4e:24:8e:f8:e6:4c:ec:da:de:cf:3c:e8:
                    d6:75:46:5a:3e:81:8f:eb:ae:ea:f6:c8:22:9c:41:
                    e4:6d:3f:70:71:b3:3e:51:e2:dd:87:b0:22:2e:b8:
                    3a:da:ce:7d:28:b4:07:a8:8e:52:17:c6:31:65:c4:
                    14:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:D4:7B:B3:DD:8B:D9:22:A5:73:54:84:40:54:AD:8D:AC:29:4B:15
            X509v3 Authority Key Identifier:
                keyid:02:C4:91:38:23:A3:19:FE:BA:22:70:E1:BA:2C:A0:9E:43:5B:D5:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsSROCOjGf66InDhuiygnkNb1Vs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b366bb-7220-45f3-b46d-d63a5111fbf7/1/F9R7s92L2SKlc1SEQFStjawpSxU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b366bb-7220-45f3-b46d-d63a5111fbf7/1/AsSROCOjGf66InDhuiygnkNb1Vs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.204.8.0/22
                  217.72.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         56:cc:94:a9:cd:1d:c2:9e:7b:3d:8c:1e:51:14:15:2c:74:d4:
         36:75:d9:c1:76:5b:ff:39:94:cf:0d:53:21:f7:46:2e:7b:9c:
         ba:52:38:76:d4:cb:c5:cc:d5:a9:79:24:cc:80:dc:8f:bb:92:
         06:cc:6d:9f:f6:cf:22:2f:41:5e:31:9a:68:ec:41:ea:0d:a7:
         ea:14:3b:17:db:33:a8:90:69:b0:01:e5:81:02:ba:9c:34:9d:
         01:01:65:3e:6a:21:e9:58:d8:5c:63:6f:b6:f4:84:40:3a:b6:
         2f:31:08:4f:f1:76:e4:2f:35:c2:cf:d4:05:e2:19:c1:42:66:
         ff:bd:8c:12:db:a0:ec:e4:93:23:66:5c:fe:93:4b:14:6b:f5:
         a3:cd:8c:3b:91:62:47:32:a7:37:7b:60:fb:c6:46:d3:23:71:
         ee:ae:0e:fb:29:c5:2d:de:fa:df:e4:70:04:4d:0d:56:90:14:
         97:5b:71:ea:90:5e:26:76:05:a3:5b:bd:63:6f:71:88:a6:39:
         94:4d:6a:9f:ce:88:ef:16:3f:83:c4:a5:5d:6f:fd:0b:04:8c:
         bd:aa:16:82:b4:49:62:38:cd:32:e8:0a:d2:dd:54:35:40:91:
         a9:c6:5a:f3:4a:cd:a0:eb:a7:18:ec:c1:d2:d0:03:38:a4:39:
         3b:d3:48:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:03 2024 by rpki-client on console-ams.rpki-client.org