Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/SBCFNgwjRazkzY7rqJVVrt7ZVxM.roa
File:                     SBCFNgwjRazkzY7rqJVVrt7ZVxM.roa (raw, json)
Hash identifier:          ZCQGeb9MG+c51Y2OFoiJBD1WBngKcjEsaaEq8Y8QHfw=
Subject key identifier:   48:10:85:36:0C:23:45:AC:E4:CD:8E:EB:A8:95:55:AE:DE:D9:57:13
Certificate issuer:       /CN=b8d5b3d379d21162e2b522c43801fb9603988245
Certificate serial:       65D4
Authority key identifier: B8:D5:B3:D3:79:D2:11:62:E2:B5:22:C4:38:01:FB:96:03:98:82:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uNWz03nSEWLitSLEOAH7lgOYgkU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/SBCFNgwjRazkzY7rqJVVrt7ZVxM.roa
Signing time:             Thu 31 Mar 2022 09:21:29 +0000
ROA not before:           Thu 31 Mar 2022 09:21:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211732
IP address blocks:        185.243.128.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26068 (0x65d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8d5b3d379d21162e2b522c43801fb9603988245
        Validity
            Not Before: Mar 31 09:21:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=481085360c2345ace4cd8eeba89555aeded95713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:80:9c:a8:4e:77:9c:01:bf:14:f2:30:3e:6c:
                    09:4d:14:7d:79:40:64:c5:8c:5a:34:bc:0d:6a:3b:
                    88:05:f7:01:3c:0d:8e:87:b5:32:4a:e4:64:c7:ab:
                    c7:75:08:b8:b1:cc:83:a8:5e:d6:e7:7f:1c:25:23:
                    c0:c6:db:69:fd:9a:30:49:c7:86:bc:97:2d:d4:cd:
                    e7:69:aa:e8:ee:25:b7:18:1a:21:bd:8d:a3:5b:b3:
                    89:80:e8:89:f9:80:e1:e0:58:a3:2d:9c:cf:27:79:
                    ce:c1:7e:35:97:ac:6c:ca:ca:26:29:6c:49:98:ff:
                    e3:fd:bc:6e:6d:05:22:41:01:0f:2a:fc:44:db:42:
                    bc:80:15:96:e3:81:03:d5:08:60:22:5d:e6:77:af:
                    bf:f6:e4:54:9f:7f:34:64:57:d6:23:8a:a3:4a:db:
                    a3:06:e4:61:78:bf:1a:8d:f0:3f:93:35:8d:93:40:
                    e9:de:b5:89:23:0c:cf:fc:5a:88:c2:59:ac:fd:c1:
                    9b:9c:94:da:89:3d:c6:7a:db:b3:cf:9b:2d:31:cd:
                    7f:c5:e5:cd:76:76:15:3e:96:7f:9e:67:f3:43:be:
                    99:64:4e:ee:2a:89:7d:76:cd:5e:b0:fd:4e:22:c9:
                    01:d7:9a:b6:df:e7:23:e0:06:e6:0a:89:57:43:fd:
                    6c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:10:85:36:0C:23:45:AC:E4:CD:8E:EB:A8:95:55:AE:DE:D9:57:13
            X509v3 Authority Key Identifier:
                keyid:B8:D5:B3:D3:79:D2:11:62:E2:B5:22:C4:38:01:FB:96:03:98:82:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNWz03nSEWLitSLEOAH7lgOYgkU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/SBCFNgwjRazkzY7rqJVVrt7ZVxM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.243.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:b1:1c:87:60:ee:cc:34:d1:19:fe:9f:37:70:35:8d:77:2b:
         37:e8:4f:de:25:42:32:ac:07:91:63:dd:16:c1:0b:9e:d1:7a:
         73:18:72:bc:25:0b:04:bf:a2:38:0b:bc:f1:69:9e:33:5d:79:
         b8:13:a3:44:cd:7d:0d:ca:bb:34:a1:ee:79:48:bb:fa:f1:e5:
         6d:34:e2:32:76:e9:88:35:e0:66:c2:23:b9:1d:99:d6:66:06:
         8d:82:90:74:0f:56:8e:68:bd:4f:69:41:92:a6:dd:e2:ef:93:
         9c:8c:e4:c3:76:09:ae:1a:ba:6b:31:c7:c1:c2:86:9a:f0:95:
         a6:7d:8f:88:05:02:be:06:a8:c1:a1:ef:1b:f9:e0:8d:89:39:
         ae:37:e2:14:aa:25:75:4a:61:b8:e8:6c:07:80:83:7b:72:44:
         fd:39:15:d9:24:68:f9:ac:4c:d6:23:2c:35:4b:dd:84:01:d2:
         49:bb:8d:ab:10:90:c0:58:89:c4:69:af:70:06:7b:e6:6e:43:
         1e:59:55:8d:67:d2:9d:7b:22:81:de:e6:39:58:00:6b:bb:f1:
         b0:08:39:e0:15:cf:97:c1:bb:87:2d:77:5b:de:9c:a1:1f:e4:
         52:9b:ae:01:9b:49:01:60:be:ed:ed:b4:9c:3c:ca:7f:7d:0c:
         35:5c:80:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:11 2024 by rpki-client on console-fra.rpki-client.org