Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/pjKn9V0k_BWuNpDRa3xJut4wmLY.roa
File:                     pjKn9V0k_BWuNpDRa3xJut4wmLY.roa (raw, json)
Hash identifier:          sAg4M1d02kHo82qFe0QdzUmGZmhh85XVW44gE+jUR4A=
Subject key identifier:   A6:32:A7:F5:5D:24:FC:15:AE:36:90:D1:6B:7C:49:BA:DE:30:98:B6
Certificate issuer:       /CN=ad9681f144db1430ac315c8306e1c14730c5fec2
Certificate serial:       038282EC
Authority key identifier: AD:96:81:F1:44:DB:14:30:AC:31:5C:83:06:E1:C1:47:30:C5:FE:C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/pjKn9V0k_BWuNpDRa3xJut4wmLY.roa
Signing time:             Sat 01 Jan 2022 01:59:21 +0000
ROA not before:           Sat 01 Jan 2022 01:59:21 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     39164
IP address blocks:        185.222.210.0/24 maxlen: 24
                          2a10:8180::/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58884844 (0x38282ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad9681f144db1430ac315c8306e1c14730c5fec2
        Validity
            Not Before: Jan  1 01:59:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a632a7f55d24fc15ae3690d16b7c49bade3098b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d0:44:55:0d:62:df:e5:ac:37:b7:c9:89:a5:
                    30:7c:6a:47:81:f0:ef:9b:ee:e3:15:f7:d5:e1:de:
                    77:b7:7b:f3:c5:ab:7c:f9:bb:f8:de:96:fa:4e:24:
                    d4:9c:9a:e0:ca:5c:1e:23:6a:ba:eb:7b:84:cc:34:
                    5e:d1:30:a3:52:a8:56:67:ee:68:59:b9:6e:05:1c:
                    c7:a0:c7:ea:93:61:0e:4b:74:ca:15:71:f7:72:89:
                    0d:cc:81:f0:f7:0f:a0:d8:1b:be:59:2a:d0:f3:f9:
                    26:24:16:70:5c:7c:85:81:04:93:0f:b8:f5:de:93:
                    9a:2d:43:00:61:3a:a8:a9:85:15:06:ac:85:5d:1d:
                    84:4a:ee:82:2e:10:5d:bd:92:4b:5c:65:2b:ee:fb:
                    8d:c7:27:6f:2c:73:13:b1:d9:3e:3d:84:d1:62:a0:
                    e8:b2:1f:e8:ca:ce:61:66:f9:d8:94:c5:b0:9f:17:
                    89:2c:b0:0c:7a:53:b5:dc:84:d9:4e:04:d6:ab:66:
                    d4:d1:70:67:97:44:ca:7d:7d:85:a2:5f:49:28:ac:
                    ef:cf:98:7d:9b:01:06:62:7a:bc:68:d7:21:ff:42:
                    70:00:38:55:3d:2c:b4:e0:4d:6c:76:0a:bc:df:83:
                    13:4c:51:1e:21:9e:db:57:fd:89:a2:c1:2c:39:13:
                    69:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:32:A7:F5:5D:24:FC:15:AE:36:90:D1:6B:7C:49:BA:DE:30:98:B6
            X509v3 Authority Key Identifier:
                keyid:AD:96:81:F1:44:DB:14:30:AC:31:5C:83:06:E1:C1:47:30:C5:FE:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/pjKn9V0k_BWuNpDRa3xJut4wmLY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.222.210.0/24
                IPv6:
                  2a10:8180::/29

    Signature Algorithm: sha256WithRSAEncryption
         7a:40:9a:e7:73:c7:bf:89:59:83:60:6a:c3:7f:3f:f6:b4:d9:
         0f:7d:a9:35:f4:8a:fe:aa:0e:2e:cf:8e:31:7e:ab:dd:e4:c0:
         65:b7:77:80:25:fe:65:dc:33:81:24:ed:5c:c2:1e:6a:9d:85:
         43:d7:ad:34:e5:73:42:3a:06:50:7c:cf:bd:45:f6:81:d6:34:
         89:6d:a3:ed:32:35:0d:ec:81:25:ab:25:01:42:6b:5d:2d:d8:
         08:1e:c4:43:d5:d8:5c:31:2b:c7:d4:cc:0d:71:cb:82:85:f3:
         36:f8:6f:4d:4b:ec:62:f9:ea:b3:9e:a2:59:2d:4b:fb:0b:d4:
         70:6b:55:c0:60:52:57:f3:ea:9d:c4:4a:70:89:1c:78:ac:a9:
         0e:94:79:48:27:87:16:14:5c:27:8d:2f:ba:a0:dd:99:81:e6:
         73:16:84:48:02:da:c6:3c:28:5e:ac:e6:b9:e8:25:56:4c:e3:
         6b:ca:81:76:c8:f5:09:cc:77:73:61:4d:53:76:94:04:c5:26:
         2c:40:f4:54:a1:dc:b4:15:2f:1d:68:22:3b:1a:92:75:2a:a2:
         6f:9c:39:47:b9:f8:2b:0d:ea:62:5d:51:43:d0:97:7d:d1:2d:
         f8:ad:e0:08:05:78:f5:9f:df:f4:b0:ba:4a:5a:d8:af:29:25:
         d3:b7:9c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:07 2024 by rpki-client on console-fra.rpki-client.org