Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/SPyHS2Ele0to_KGWKA7218y4Zn8.roa
File:                     SPyHS2Ele0to_KGWKA7218y4Zn8.roa (raw, json)
Hash identifier:          kSSr5b6U6rmL/RugKvyqlJAFSivbVUHrGnAwlMSvxpw=
Subject key identifier:   48:FC:87:4B:61:25:7B:4B:68:FC:A1:96:28:0E:F6:D7:CC:B8:66:7F
Certificate issuer:       /CN=46649b57b817ec143ddcb7d7712c22bb1f28ac75
Certificate serial:       05DFD04E
Authority key identifier: 46:64:9B:57:B8:17:EC:14:3D:DC:B7:D7:71:2C:22:BB:1F:28:AC:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RmSbV7gX7BQ93LfXcSwiux8orHU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/SPyHS2Ele0to_KGWKA7218y4Zn8.roa
Signing time:             Sat 01 Jan 2022 09:57:22 +0000
ROA not before:           Sat 01 Jan 2022 09:57:22 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207187
IP address blocks:        185.214.116.0/22 maxlen: 22
                          2a0b:99c0::/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98553934 (0x5dfd04e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46649b57b817ec143ddcb7d7712c22bb1f28ac75
        Validity
            Not Before: Jan  1 09:57:22 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=48fc874b61257b4b68fca196280ef6d7ccb8667f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:6c:07:76:f1:d3:34:4a:ae:27:4f:29:75:90:
                    6a:8c:c5:17:db:8b:0c:5a:df:16:d8:d7:ec:cd:ad:
                    26:98:df:9a:dc:eb:e9:bb:96:d7:87:63:70:d2:88:
                    0b:20:5d:50:60:dd:0d:28:e8:a5:65:08:e1:2a:87:
                    5b:e5:18:32:1a:8c:e1:c6:d8:04:6a:85:86:1a:cf:
                    52:e7:a4:53:02:5d:d5:f0:dd:0e:e7:df:3f:fb:9b:
                    3e:b1:86:9d:1f:37:72:f9:91:8e:75:6c:8e:a8:ef:
                    de:bc:ac:1b:2c:42:b5:2a:9e:ca:51:e6:ac:37:ed:
                    89:80:5b:b8:ea:2b:fb:ad:d1:69:7f:09:dd:e1:92:
                    c3:1a:63:5a:50:6d:09:77:14:1b:e3:db:52:f7:77:
                    7b:71:32:de:0a:45:62:d2:c1:27:29:a0:8e:f6:81:
                    ef:46:6a:ab:e3:5e:7e:cb:b1:a1:f5:06:84:bc:3a:
                    68:2c:2b:df:73:36:38:8c:5e:66:e0:4d:96:72:6a:
                    fb:0b:37:86:4f:d8:57:13:9b:b6:1d:ac:05:f8:1c:
                    c3:e0:d7:4c:19:92:46:a7:a1:fb:bc:24:43:a2:b4:
                    bc:6d:60:34:d2:6d:38:55:f7:87:c9:1c:9f:86:52:
                    45:6f:2c:46:f8:cc:54:26:07:25:a0:e0:44:3e:c5:
                    6e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:FC:87:4B:61:25:7B:4B:68:FC:A1:96:28:0E:F6:D7:CC:B8:66:7F
            X509v3 Authority Key Identifier:
                keyid:46:64:9B:57:B8:17:EC:14:3D:DC:B7:D7:71:2C:22:BB:1F:28:AC:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RmSbV7gX7BQ93LfXcSwiux8orHU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/SPyHS2Ele0to_KGWKA7218y4Zn8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.214.116.0/22
                IPv6:
                  2a0b:99c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         3b:1a:e5:4b:16:fa:d6:fb:ee:31:98:ab:03:fa:29:96:20:20:
         05:12:71:be:62:0c:db:45:7e:03:75:de:ad:d3:4a:a8:8a:7e:
         2b:73:bf:d0:0f:95:2d:28:5c:f0:37:a2:ec:fa:99:36:0e:35:
         e1:60:bc:4d:75:0c:03:1e:e2:64:b8:bb:3c:5e:3e:58:dd:19:
         6a:f4:46:3c:9b:ce:e3:fd:99:cd:80:4e:c9:bc:4a:ed:90:5e:
         df:e4:9d:25:e4:44:00:0b:58:1d:8a:f0:47:27:39:fd:93:ba:
         52:f8:14:20:20:df:70:76:a6:87:27:5a:50:d0:b8:5d:61:4c:
         33:1d:ae:5b:b4:21:81:dd:6c:96:60:9d:f0:91:99:c4:c0:29:
         27:ac:dd:c9:e7:57:fc:15:99:e0:d5:74:4d:21:d1:6b:9a:eb:
         36:ef:93:2d:14:53:03:e8:3b:6d:7c:10:93:7b:61:43:f2:08:
         ce:77:f9:c7:68:1e:41:a8:ec:3a:e2:43:ef:8a:78:61:4a:b0:
         be:e4:61:a4:6e:93:f8:e5:66:ef:63:5e:38:6c:58:46:81:88:
         62:74:bd:e2:36:3f:69:0f:30:f6:5c:03:ce:c1:37:2d:df:99:
         41:5e:54:e3:c1:ef:ff:1a:6f:0a:30:3c:dc:2c:2c:1e:ec:7b:
         4c:42:c8:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:23 2024 by rpki-client on console-fra.rpki-client.org