Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/mmBPqkgDuEIHkgiwAtLUIAYZ1FI.roa
File:                     mmBPqkgDuEIHkgiwAtLUIAYZ1FI.roa (raw, json)
Hash identifier:          aRsjgrM2m176cI8cJkFnlRbe3o/pSQNHVxRz3+CjMJI=
Subject key identifier:   9A:60:4F:AA:48:03:B8:42:07:92:08:B0:02:D2:D4:20:06:19:D4:52
Certificate issuer:       /CN=de9ff6195096a098c19281548e4107b867c73aff
Certificate serial:       037D6D50
Authority key identifier: DE:9F:F6:19:50:96:A0:98:C1:92:81:54:8E:41:07:B8:67:C7:3A:FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3p_2GVCWoJjBkoFUjkEHuGfHOv8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/mmBPqkgDuEIHkgiwAtLUIAYZ1FI.roa
Signing time:             Sat 01 Jan 2022 05:52:01 +0000
ROA not before:           Sat 01 Jan 2022 05:52:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212269
IP address blocks:        185.179.100.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58551632 (0x37d6d50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de9ff6195096a098c19281548e4107b867c73aff
        Validity
            Not Before: Jan  1 05:52:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9a604faa4803b842079208b002d2d4200619d452
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:7b:3a:86:7b:8d:53:38:82:ee:db:2c:07:9a:
                    d6:4f:c6:e7:64:34:96:a5:b7:74:ac:8d:9e:03:26:
                    20:8c:46:bd:d6:a9:39:97:73:41:85:c3:43:2b:d8:
                    7d:2c:2a:57:7c:6f:32:0f:21:8c:9a:04:e6:0b:20:
                    e8:7d:66:1b:a7:40:aa:b9:1e:cf:b3:0b:61:94:aa:
                    77:51:7c:ac:e9:24:40:c9:92:df:71:be:81:16:e0:
                    ef:69:d1:c3:72:76:93:ac:eb:0e:2e:db:0f:5f:03:
                    4f:32:06:8d:30:59:61:a4:24:c6:33:3d:49:50:13:
                    a2:6e:19:b4:34:ca:90:ec:58:03:e4:19:48:1a:14:
                    48:60:0a:b6:65:91:34:68:3d:e8:1a:67:70:af:d5:
                    11:45:9d:13:09:21:38:76:da:2a:66:67:21:19:1c:
                    57:75:15:9f:b2:37:96:c2:85:8f:93:bf:eb:1d:72:
                    e6:20:a8:59:26:da:ff:63:a7:71:48:6b:f2:9b:e5:
                    a3:3f:93:a5:bf:06:48:36:59:a2:29:53:be:59:02:
                    a3:a0:70:c8:de:10:c7:26:24:fa:24:ec:ad:7c:f1:
                    9f:db:99:f0:64:c7:23:b3:37:a3:d1:d5:f6:d3:5f:
                    6a:8e:0f:30:f0:ad:04:0e:e3:6d:b9:ba:57:be:c8:
                    42:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:60:4F:AA:48:03:B8:42:07:92:08:B0:02:D2:D4:20:06:19:D4:52
            X509v3 Authority Key Identifier:
                keyid:DE:9F:F6:19:50:96:A0:98:C1:92:81:54:8E:41:07:B8:67:C7:3A:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3p_2GVCWoJjBkoFUjkEHuGfHOv8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/mmBPqkgDuEIHkgiwAtLUIAYZ1FI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.179.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:80:ae:1e:51:12:59:c3:9f:a2:5b:ed:76:df:22:2c:8d:d6:
         93:16:f1:29:a1:60:76:88:6d:2d:57:89:63:b3:1c:4e:95:e1:
         29:c0:34:1d:2f:77:34:f4:a4:8a:9d:89:ce:ce:8b:22:df:9b:
         19:6e:4d:75:3f:16:f2:d7:aa:16:9b:16:9b:a3:34:7b:3e:07:
         f9:db:8c:b1:22:f2:b6:a2:16:6a:71:ac:1a:e5:b2:8c:6d:27:
         8a:94:18:ae:18:92:43:7f:5c:ca:d0:97:38:c0:40:f7:53:b0:
         07:d1:5b:0a:30:df:c4:a2:7c:bd:f0:ec:c1:bf:4b:42:a9:8e:
         93:cc:3d:85:ac:70:c2:44:94:13:ed:bb:d5:c7:d1:ec:80:95:
         8d:9c:c2:d1:6a:56:2d:e4:6f:d6:19:ff:26:10:29:1b:35:54:
         54:e3:e1:62:89:ec:d1:0c:8a:ef:24:93:33:14:e3:78:e7:c2:
         bc:18:23:76:00:48:8d:84:1b:de:54:75:51:b7:da:82:13:ba:
         8e:b6:00:5c:ee:da:e2:ea:ee:f3:45:90:bc:80:f4:21:eb:f6:
         98:8b:d7:d8:a7:09:4c:ff:0c:15:4d:16:ef:f6:6a:3c:b4:46:
         4d:9b:a7:3d:33:59:90:3d:c8:1a:2a:01:ed:68:92:26:72:81:
         e4:8f:b3:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:50 2024 by rpki-client on console-fra.rpki-client.org