Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/f2d0cb-c3d4-49be-b0f2-305fb09556c9/1/KI6-ybABdHa7EjJWFzOnmj3d_zc.roa
File:                     KI6-ybABdHa7EjJWFzOnmj3d_zc.roa (raw, json)
Hash identifier:          cqY3p4aaMuqwQocwRNicja3JS7f/TKGMFFxS3UIWSj4=
Subject key identifier:   28:8E:BE:C9:B0:01:74:76:BB:12:32:56:17:33:A7:9A:3D:DD:FF:37
Certificate issuer:       /CN=897378126f55d96519553daa48e02e3282121644
Certificate serial:       1DEE93
Authority key identifier: 89:73:78:12:6F:55:D9:65:19:55:3D:AA:48:E0:2E:32:82:12:16:44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iXN4Em9V2WUZVT2qSOAuMoISFkQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/f2d0cb-c3d4-49be-b0f2-305fb09556c9/1/KI6-ybABdHa7EjJWFzOnmj3d_zc.roa
Signing time:             Sat 01 Jan 2022 03:01:52 +0000
ROA not before:           Sat 01 Jan 2022 03:01:52 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     29479
IP address blocks:        185.83.0.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1961619 (0x1dee93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=897378126f55d96519553daa48e02e3282121644
        Validity
            Not Before: Jan  1 03:01:52 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=288ebec9b0017476bb1232561733a79a3dddff37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0e:56:b2:96:0f:f3:70:dd:37:ec:e7:fe:aa:
                    44:2b:cd:1e:0f:dc:9c:6f:8f:69:25:a0:84:0e:46:
                    52:f6:74:51:c1:c7:c5:d6:cb:ba:1a:f8:44:d7:27:
                    f4:e0:0f:ca:13:b1:6e:65:15:1b:3c:09:4b:9d:34:
                    2a:5e:28:2c:f2:10:ff:03:5e:d9:72:9f:99:b6:25:
                    8d:fd:a4:72:f1:ff:64:cf:50:86:19:e0:67:e2:ad:
                    30:34:c6:ab:45:38:cc:09:11:42:36:70:f8:dd:57:
                    25:13:3f:49:1e:e0:de:01:18:75:1e:b6:28:0e:62:
                    64:1c:5b:cd:36:53:03:df:88:c5:43:41:7a:49:19:
                    09:b0:17:c5:b6:4a:9c:42:7f:d0:2a:40:2b:07:70:
                    f0:ce:0f:e5:33:f0:ff:86:b7:85:56:45:fc:3b:29:
                    7a:69:31:f4:81:d4:05:1b:af:76:47:22:55:49:6c:
                    8a:36:49:2f:b7:27:6e:46:b9:9c:9f:2d:71:ea:5b:
                    da:df:01:30:7d:6a:40:e0:4a:33:e6:19:2e:72:01:
                    5d:4c:b3:38:10:1f:7f:c9:3c:16:73:96:23:3a:e0:
                    3c:b1:68:41:51:03:cf:1e:0e:c2:9a:8b:9e:bd:d6:
                    72:6a:f8:d7:92:55:4c:b2:71:f9:b6:e6:75:a8:25:
                    10:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:8E:BE:C9:B0:01:74:76:BB:12:32:56:17:33:A7:9A:3D:DD:FF:37
            X509v3 Authority Key Identifier:
                keyid:89:73:78:12:6F:55:D9:65:19:55:3D:AA:48:E0:2E:32:82:12:16:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXN4Em9V2WUZVT2qSOAuMoISFkQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f2d0cb-c3d4-49be-b0f2-305fb09556c9/1/KI6-ybABdHa7EjJWFzOnmj3d_zc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f2d0cb-c3d4-49be-b0f2-305fb09556c9/1/iXN4Em9V2WUZVT2qSOAuMoISFkQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.83.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         de:6b:d6:5a:c4:8a:15:23:7a:93:c6:84:98:96:6a:46:f9:aa:
         41:29:73:e1:0e:cc:5a:db:34:47:ea:58:37:33:a8:a0:59:98:
         53:aa:ec:70:c7:d9:08:25:f5:65:ca:0a:45:68:31:ad:60:9b:
         94:f8:f6:02:1a:84:61:0f:a2:f0:a6:c3:eb:46:8f:4f:11:f0:
         30:60:48:11:a1:57:15:74:e1:64:67:f3:63:d7:33:23:24:69:
         71:6c:65:a9:30:05:dd:c0:2e:c5:8d:3b:d9:8e:bb:18:96:fc:
         8e:33:07:8d:07:7d:7c:95:1d:ec:a4:1f:3d:20:1e:2b:e8:a2:
         c4:06:b2:ab:71:bf:35:f5:39:ca:e3:47:c6:53:8b:37:da:40:
         a1:b1:34:d9:5c:15:99:60:54:b2:69:bb:49:bd:21:64:ec:92:
         5f:89:fb:87:74:43:47:1f:e0:40:88:9a:0f:c2:2d:66:00:5c:
         fc:9d:ac:27:1c:ac:6c:8a:cf:d1:48:d2:0e:b5:6d:f3:d9:e8:
         9f:18:4b:eb:aa:fe:62:47:55:f8:34:dc:50:e3:e2:46:99:ab:
         24:a6:80:5c:f6:68:60:92:11:6b:68:b2:a9:42:50:e7:90:c4:
         aa:5b:b9:5d:a4:0e:ee:84:fd:a9:15:47:bd:21:d2:e9:ba:47:
         49:79:76:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:01 2024 by rpki-client on console-ams.rpki-client.org