Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/6Wn08jlAq18K0D0YkdNKvsP4jUY.roa
File:                     6Wn08jlAq18K0D0YkdNKvsP4jUY.roa (raw, json)
Hash identifier:          v06nKDjo1tTVFpWT+ncFZnFL42XM4OhJQ/A/6QOMm5Q=
Subject key identifier:   E9:69:F4:F2:39:40:AB:5F:0A:D0:3D:18:91:D3:4A:BE:C3:F8:8D:46
Certificate issuer:       /CN=e4767b51e6b482b9e7a7483662a5dbee1b8d85a0
Certificate serial:       0726FE01
Authority key identifier: E4:76:7B:51:E6:B4:82:B9:E7:A7:48:36:62:A5:DB:EE:1B:8D:85:A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5HZ7Uea0grnnp0g2YqXb7huNhaA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/6Wn08jlAq18K0D0YkdNKvsP4jUY.roa
Signing time:             Sat 01 Jan 2022 07:56:22 +0000
ROA not before:           Sat 01 Jan 2022 07:56:22 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200813
IP address blocks:        185.94.161.0/24 maxlen: 24
                          185.94.160.0/22 maxlen: 22
                          185.94.160.0/24 maxlen: 24
                          185.94.163.0/24 maxlen: 24
                          185.94.162.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119995905 (0x726fe01)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4767b51e6b482b9e7a7483662a5dbee1b8d85a0
        Validity
            Not Before: Jan  1 07:56:22 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e969f4f23940ab5f0ad03d1891d34abec3f88d46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:cf:ab:8c:20:d3:33:27:20:d2:f2:93:3d:00:
                    74:df:43:34:5a:a2:e1:8b:c4:7a:e1:03:08:c2:6b:
                    60:ea:6e:43:5f:53:09:32:56:a1:0e:b6:19:da:3d:
                    fe:3e:b8:a4:98:50:1b:74:b6:a8:de:58:ee:8d:55:
                    bf:82:1f:0b:18:de:72:c8:0f:de:31:9c:24:af:7e:
                    bf:eb:24:0d:a0:29:4b:ab:6c:0e:1b:38:46:56:e5:
                    02:04:cb:28:a1:b5:40:c6:e6:af:e3:7f:c7:de:e9:
                    43:35:1f:b1:ca:f6:75:bb:9d:6b:4a:bf:e0:69:56:
                    0e:55:3b:07:5b:a1:64:de:58:b6:03:6c:a5:02:e8:
                    22:bd:c1:ab:a8:15:b4:a4:de:38:77:fe:76:5e:7e:
                    ea:09:75:80:bb:fb:f2:0e:85:8c:f9:be:dd:ef:17:
                    33:35:f9:e4:97:18:88:09:8d:82:96:07:29:54:7b:
                    7d:a9:0c:78:f3:e8:68:06:9c:96:75:a1:c9:ba:55:
                    90:64:76:cf:98:24:ae:9c:ba:63:bd:b5:f9:d2:6d:
                    0a:9b:83:c8:a3:af:8f:3b:26:dc:d5:69:c7:68:7f:
                    5f:3d:73:fb:54:08:95:79:e2:e9:57:6f:bc:4a:a6:
                    be:6c:62:0f:f2:80:df:2a:2c:ea:b1:88:15:90:6d:
                    ad:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:69:F4:F2:39:40:AB:5F:0A:D0:3D:18:91:D3:4A:BE:C3:F8:8D:46
            X509v3 Authority Key Identifier:
                keyid:E4:76:7B:51:E6:B4:82:B9:E7:A7:48:36:62:A5:DB:EE:1B:8D:85:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5HZ7Uea0grnnp0g2YqXb7huNhaA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/6Wn08jlAq18K0D0YkdNKvsP4jUY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/5HZ7Uea0grnnp0g2YqXb7huNhaA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.94.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:4b:23:2f:2b:3a:9b:63:7d:df:d8:4b:cc:6b:e9:49:8a:07:
         b0:67:bd:c4:a8:85:86:2c:1c:cc:c8:49:53:30:d1:e8:fc:01:
         83:06:c9:02:c7:bf:0a:82:d8:5a:93:a7:aa:c1:00:c0:8a:d5:
         b5:cc:47:47:64:ba:49:9f:bd:27:f9:13:ff:2e:76:b4:80:cb:
         3a:50:34:d5:3e:f5:41:7e:cc:16:42:6b:a9:15:f7:43:04:83:
         3c:78:3c:0f:d9:a4:cb:8a:cc:51:c9:ce:d0:94:37:fd:b6:4d:
         6d:03:f1:4a:68:74:c1:1c:fe:cc:35:b0:00:b1:03:95:d0:34:
         98:28:05:85:4c:7a:e6:50:db:58:c5:a1:7f:e9:49:d5:d0:38:
         11:ec:69:b9:b1:7d:c6:7d:68:4e:c1:1d:01:8f:4f:0c:18:67:
         6d:6d:ce:73:1a:65:c9:45:dd:63:1d:80:b4:08:21:1f:58:fd:
         51:4b:97:4c:3c:0a:dc:27:b5:df:4b:e8:b1:d7:35:91:42:52:
         b2:22:a7:56:72:d9:95:b3:d3:88:93:8d:80:6e:6f:5e:37:20:
         f8:2b:ac:c8:4b:70:e5:f0:07:44:8e:a6:fb:87:fe:d3:35:74:
         91:19:82:85:40:ee:07:88:50:57:e4:ed:f7:71:37:c5:5b:76:
         0d:36:4b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:31 2024 by rpki-client on console-ams.rpki-client.org