Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BUvJriey6IgUuPojA1nRW6Ig7Ag.roa
File:                     BUvJriey6IgUuPojA1nRW6Ig7Ag.roa (raw, json)
Hash identifier:          7ZNA0jdkx0W5Me7yBV8sbwTgLrKQsIoGje2fKxTRLrw=
Subject key identifier:   05:4B:C9:AE:27:B2:E8:88:14:B8:FA:23:03:59:D1:5B:A2:20:EC:08
Certificate issuer:       /CN=04268ae40737536a464c28493eaf503db9a18f20
Certificate serial:       0563CA64
Authority key identifier: 04:26:8A:E4:07:37:53:6A:46:4C:28:49:3E:AF:50:3D:B9:A1:8F:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BUvJriey6IgUuPojA1nRW6Ig7Ag.roa
Signing time:             Sat 01 Jan 2022 15:05:30 +0000
ROA not before:           Sat 01 Jan 2022 15:05:30 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     14618
IP address blocks:        185.134.79.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90425956 (0x563ca64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04268ae40737536a464c28493eaf503db9a18f20
        Validity
            Not Before: Jan  1 15:05:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=054bc9ae27b2e88814b8fa230359d15ba220ec08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:fd:95:a8:96:3d:6a:a4:eb:aa:f9:ea:01:bc:
                    e4:15:db:d1:d4:5b:cc:46:04:35:15:87:0f:ab:2a:
                    d3:78:e6:36:6e:73:ca:dc:a9:7a:21:cb:f2:94:1f:
                    4f:54:d4:8c:cf:45:b6:f8:6c:db:5e:97:e1:c5:e6:
                    8e:1a:25:f6:81:f8:db:3d:cf:38:52:dc:38:7a:df:
                    ea:c5:03:67:00:7f:b3:b6:fa:81:8d:ee:0e:d0:29:
                    9c:48:6d:b3:bf:e5:64:18:7a:94:ae:42:34:a7:c5:
                    b0:f1:7f:d1:49:74:66:1e:5c:06:ef:cf:fb:bc:a3:
                    5f:e0:55:c9:bd:81:93:00:de:58:c9:c4:5c:36:fd:
                    a1:2a:bb:72:96:29:19:38:74:1b:60:da:ac:d4:31:
                    19:a1:af:b9:9f:9b:89:85:1d:67:bc:05:34:56:4c:
                    27:c4:2a:1c:7a:a3:93:07:ba:be:4a:1c:1c:cc:a3:
                    ed:ce:c6:36:03:2f:10:b3:3e:d3:20:aa:ad:e9:52:
                    38:52:13:7e:c2:23:21:26:fd:a9:eb:f0:17:cf:00:
                    db:10:45:d9:f6:ea:6b:1d:dc:0f:db:4f:41:72:2e:
                    39:4a:13:cd:83:0c:a2:64:fd:79:1b:ba:39:d0:32:
                    39:26:27:2a:57:3d:89:af:b5:00:a0:79:d6:42:01:
                    c7:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:4B:C9:AE:27:B2:E8:88:14:B8:FA:23:03:59:D1:5B:A2:20:EC:08
            X509v3 Authority Key Identifier:
                keyid:04:26:8A:E4:07:37:53:6A:46:4C:28:49:3E:AF:50:3D:B9:A1:8F:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BUvJriey6IgUuPojA1nRW6Ig7Ag.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.134.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:13:7a:27:92:c4:8e:be:f6:e4:ea:fa:5d:61:0f:43:3f:dc:
         d1:16:a0:02:ab:4a:b8:99:b6:87:7d:88:5c:38:67:07:b3:00:
         07:21:45:d2:f0:c9:fe:50:c0:a3:45:06:df:0c:f7:e5:a6:76:
         98:0c:93:68:15:28:e5:bf:a4:58:39:ed:ca:0e:80:83:94:16:
         77:ef:c1:1d:c4:35:46:ed:84:b7:24:3b:50:b5:59:23:fb:ee:
         4e:4b:57:81:ed:91:fc:6f:3a:3d:35:83:fe:9f:4a:d4:ad:c7:
         f9:bb:77:43:88:0f:52:7e:92:f7:44:c5:c0:5c:c5:ce:80:17:
         9f:df:8c:06:d9:bb:5f:a3:80:be:df:11:bf:af:2c:59:d2:99:
         ae:ea:03:6e:18:31:1d:43:f9:39:56:19:fd:24:d9:18:de:62:
         51:e1:57:55:dc:c2:d9:ee:ca:62:c8:6e:f1:68:3b:2d:74:c5:
         47:a5:09:1f:b7:dd:34:0e:bb:45:29:6b:0a:5b:49:7f:5f:d8:
         08:dd:8c:58:6d:8a:16:f2:f9:89:8f:08:e8:bd:9b:47:39:ee:
         66:89:c9:61:de:f2:5c:27:36:83:39:88:ed:ea:30:8f:3c:b5:
         ef:58:f7:d5:ec:5e:14:4a:1e:a2:2c:81:52:7f:d4:df:69:e2:
         a5:c4:f6:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:31 2024 by rpki-client on console-ams.rpki-client.org