Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/9jwJ6CZcu11NOGa6MeZMjiqmUD0.roa
File:                     9jwJ6CZcu11NOGa6MeZMjiqmUD0.roa (raw, json)
Hash identifier:          u0r5VyqlZRC+0FnY2J1pAVTkQv/c39nDyHQ28Cds8SI=
Subject key identifier:   F6:3C:09:E8:26:5C:BB:5D:4D:38:66:BA:31:E6:4C:8E:2A:A6:50:3D
Certificate issuer:       /CN=44e888a76e99851b01fb86cec537d4d8e610de16
Certificate serial:       0776D577
Authority key identifier: 44:E8:88:A7:6E:99:85:1B:01:FB:86:CE:C5:37:D4:D8:E6:10:DE:16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/9jwJ6CZcu11NOGa6MeZMjiqmUD0.roa
Signing time:             Fri 27 May 2022 04:59:13 +0000
ROA not before:           Fri 27 May 2022 04:59:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61204
IP address blocks:        185.245.244.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125228407 (0x776d577)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44e888a76e99851b01fb86cec537d4d8e610de16
        Validity
            Not Before: May 27 04:59:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f63c09e8265cbb5d4d3866ba31e64c8e2aa6503d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:01:15:0e:9d:68:de:34:0f:05:d4:4f:1e:25:
                    88:2b:17:0d:d6:39:f0:2d:ee:7e:e9:6c:32:da:76:
                    ff:a4:01:60:30:2d:89:b1:9a:21:2c:29:67:89:71:
                    0f:46:72:59:31:ed:e8:f0:78:f4:ab:d5:f0:ca:fc:
                    bf:4f:f0:53:8c:d8:98:b5:b2:d8:f5:04:2d:e3:f3:
                    b6:d3:36:ca:84:9c:67:8b:6c:2e:0e:11:39:14:87:
                    16:c1:6f:f6:cc:cc:1b:b2:3c:78:ae:c0:cf:84:41:
                    90:8f:60:fc:ce:b1:3b:78:17:bf:95:1e:ca:37:1b:
                    32:4b:b4:2b:70:6f:ce:d1:fd:bf:3e:10:be:cb:9e:
                    f3:a4:dc:ae:b6:16:60:72:64:07:06:d6:68:ae:be:
                    62:b4:92:cb:0d:e8:5d:21:4e:63:47:97:6b:bb:a2:
                    82:07:30:4d:4f:ea:81:51:e4:c2:75:a0:b6:62:91:
                    6d:2e:fe:f9:7e:2f:07:58:d3:8d:59:ad:5f:62:78:
                    e8:d7:ba:c2:d7:09:4a:54:bb:05:6f:c6:6a:91:db:
                    04:ae:f3:02:83:7b:87:38:67:d5:6a:76:e9:26:75:
                    9a:5d:13:44:26:60:e0:d0:69:b0:c9:30:fc:da:5c:
                    72:08:a7:90:26:c2:3d:5f:0c:a8:a5:6a:1a:41:91:
                    1a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:3C:09:E8:26:5C:BB:5D:4D:38:66:BA:31:E6:4C:8E:2A:A6:50:3D
            X509v3 Authority Key Identifier:
                keyid:44:E8:88:A7:6E:99:85:1B:01:FB:86:CE:C5:37:D4:D8:E6:10:DE:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/9jwJ6CZcu11NOGa6MeZMjiqmUD0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.245.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:44:13:d0:9d:6c:10:39:ae:22:6e:db:3a:75:ef:c7:98:46:
         f8:2d:90:11:4c:42:f6:44:7c:48:e8:7b:ad:a3:5c:81:74:b2:
         22:09:8e:5f:a4:73:f7:4a:b6:41:fd:a5:33:ff:fb:bc:97:67:
         ff:86:98:8f:a1:97:99:72:05:0e:0d:77:22:53:b1:66:4f:f6:
         ea:af:86:d0:55:fc:05:4b:9b:a5:ae:24:7e:7c:97:eb:70:be:
         ea:5a:c8:c3:73:80:f2:2e:86:71:49:79:05:89:17:58:af:4b:
         2a:3c:bc:9d:6a:7e:fa:fa:3a:10:38:56:36:b0:3f:36:7f:ec:
         38:e3:78:56:44:bb:74:2b:de:f9:4c:1d:4a:c8:99:d8:e1:6d:
         28:bf:e0:a1:29:41:55:77:ea:5b:31:18:d8:29:da:80:c7:a5:
         ad:63:a6:d8:11:63:a5:d6:6c:5f:5f:e1:0e:e2:21:4a:e3:8b:
         aa:46:98:6d:7d:17:fb:b8:21:3e:71:d7:4f:86:75:1d:f5:eb:
         5b:68:44:0c:53:ec:3d:87:3c:0a:f6:b8:05:52:32:11:c8:5b:
         bd:fa:b8:3e:e5:40:eb:a3:75:d6:08:25:93:aa:db:af:cc:45:
         e1:c5:da:9a:1a:e9:70:ff:7b:cd:1d:c2:f5:f5:5d:c4:f2:5b:
         ac:2d:5e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:34 2024 by rpki-client on console-fra.rpki-client.org