Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/b1YS7R1HDTmmb2H1y4XoHiynRLY.roa
File:                     b1YS7R1HDTmmb2H1y4XoHiynRLY.roa (raw, json)
Hash identifier:          wu0rOb2oAbWcYfExvQD/RJduNhKMslffye5Jqb0kP28=
Subject key identifier:   6F:56:12:ED:1D:47:0D:39:A6:6F:61:F5:CB:85:E8:1E:2C:A7:44:B6
Certificate issuer:       /CN=27d54e4a788d6967a2eef3a6692622626f54efad
Certificate serial:       0183794638136CFC379B0BAFD2280116FBE8
Authority key identifier: 27:D5:4E:4A:78:8D:69:67:A2:EE:F3:A6:69:26:22:62:6F:54:EF:AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J9VOSniNaWei7vOmaSYiYm9U760.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/b1YS7R1HDTmmb2H1y4XoHiynRLY.roa
Signing time:             Mon 26 Sep 2022 10:09:48 +0000
ROA not before:           Mon 26 Sep 2022 10:09:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     59853
IP address blocks:        185.156.27.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:79:46:38:13:6c:fc:37:9b:0b:af:d2:28:01:16:fb:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27d54e4a788d6967a2eef3a6692622626f54efad
        Validity
            Not Before: Sep 26 10:09:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6f5612ed1d470d39a66f61f5cb85e81e2ca744b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:07:de:b7:fd:0b:ee:90:7e:1d:63:b4:25:77:
                    ce:05:d9:2f:0c:40:6c:11:d5:22:1c:91:4d:f6:44:
                    63:9a:b7:d4:e2:45:15:1d:02:18:73:d7:1a:1c:41:
                    9d:1d:a0:63:8f:7f:8c:d2:e6:b0:c0:a2:2d:6b:b5:
                    79:e5:a5:d4:48:42:5b:14:5f:38:cf:63:43:2b:af:
                    e2:c6:13:81:a2:05:e8:1a:77:7c:4d:05:06:22:09:
                    e1:7c:3e:7f:07:97:c0:66:91:1e:bd:08:ec:10:93:
                    04:76:03:a8:88:6b:55:1b:51:2b:09:1e:48:5a:ab:
                    ba:e9:cf:87:ab:86:cb:47:f3:97:e8:c0:38:4f:71:
                    cd:88:16:c1:50:92:2a:29:bb:46:38:c6:be:dc:87:
                    a7:23:b1:26:89:e1:01:40:70:67:76:b7:e9:1d:1b:
                    9c:3c:4c:ad:5b:8b:55:15:f7:70:65:16:12:a9:58:
                    00:03:5f:b4:f2:74:88:9e:ea:0a:c9:55:0c:9c:a8:
                    67:a5:94:e4:12:26:9f:5d:19:de:18:23:47:67:7e:
                    0f:8d:1b:a8:ad:ee:63:b7:9b:db:58:3c:43:2f:68:
                    86:18:62:5c:60:57:18:3a:ef:83:a4:ff:36:ea:cc:
                    f3:2a:b6:f5:4f:33:f6:13:09:60:4d:31:64:48:3d:
                    b3:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:56:12:ED:1D:47:0D:39:A6:6F:61:F5:CB:85:E8:1E:2C:A7:44:B6
            X509v3 Authority Key Identifier:
                keyid:27:D5:4E:4A:78:8D:69:67:A2:EE:F3:A6:69:26:22:62:6F:54:EF:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9VOSniNaWei7vOmaSYiYm9U760.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/b1YS7R1HDTmmb2H1y4XoHiynRLY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.156.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:01:b7:fe:15:15:ba:5c:01:3e:57:d1:83:a3:38:ff:86:5b:
         1a:1f:64:4f:24:78:e4:33:7f:85:30:21:7a:2e:91:77:4e:52:
         ec:0d:c9:c4:61:1e:4a:e9:e6:14:3c:13:21:aa:c4:75:74:71:
         29:fb:49:c6:de:e8:41:51:f6:24:39:59:a7:b0:0d:f0:f9:bc:
         81:45:e3:38:9f:9d:83:aa:9f:a7:1b:68:3d:35:fd:16:bc:79:
         e0:dd:8e:50:42:90:fe:50:a7:a4:ef:09:54:e0:2a:65:b5:b5:
         c8:07:53:e4:9a:96:36:d5:90:3f:e4:40:cd:13:31:70:62:55:
         56:c9:26:4a:e4:87:84:c3:98:dd:7c:81:d4:54:53:19:7a:c5:
         9b:3b:e6:ca:d4:fb:35:10:a5:c9:d0:cd:87:53:17:e6:b1:d1:
         37:43:3d:90:ed:e5:b1:f7:6e:3c:22:3f:2d:a0:16:f7:89:d0:
         86:e6:54:23:f4:59:3d:8a:a6:d5:b2:3a:8e:e9:09:ea:dd:60:
         b2:04:fb:a6:9e:63:a9:53:61:8c:05:84:6d:2a:3a:e6:03:03:
         dd:f1:fa:6b:16:23:ac:79:bb:b0:7f:42:ce:30:3b:1c:bc:79:
         f1:83:da:07:02:8d:12:b1:2c:86:06:6c:c7:16:c2:b0:da:8a:
         7e:c7:45:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:17 2024 by rpki-client on console-fra.rpki-client.org