Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1-C_OSeewnp708T47BcllVamDqow.roa
File:                     1-C_OSeewnp708T47BcllVamDqow.roa (raw, json)
Hash identifier:          E5ivHyeY6Wn7L+Tgdw+ipvsJ5v1GUMueSI8BTRVsqW8=
Subject key identifier:   F8:2F:CE:49:E7:B0:9E:9E:F4:F1:3E:3B:05:C9:65:55:A9:83:AA:8C
Certificate issuer:       /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial:       064A6834
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1-C_OSeewnp708T47BcllVamDqow.roa
Signing time:             Sat 01 Jan 2022 06:52:42 +0000
ROA not before:           Sat 01 Jan 2022 06:52:42 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207915
IP address blocks:        185.124.136.0/22 maxlen: 22
                          194.76.172.0/23 maxlen: 23
                          194.76.168.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105539636 (0x64a6834)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
        Validity
            Not Before: Jan  1 06:52:42 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f82fce49e7b09e9ef4f13e3b05c96555a983aa8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5f:a7:31:3d:bd:d3:af:3b:ec:d7:c8:06:50:
                    99:fa:21:3a:64:90:72:b1:76:a3:95:e9:ec:04:39:
                    f3:a3:ee:27:fa:d5:fa:6d:34:a4:d1:88:02:ca:7c:
                    ca:05:ba:4e:46:45:01:f4:d4:76:72:39:d8:65:f6:
                    2f:bf:0d:15:22:5e:d1:95:e0:32:6c:3f:5b:b0:33:
                    65:38:1e:82:00:25:57:a4:7a:08:e3:20:c1:dd:dd:
                    3b:3b:97:97:06:26:ab:58:12:0c:8f:75:9e:c7:a4:
                    38:ef:dc:cb:b5:7c:a5:94:ae:13:dd:2f:0d:5c:cc:
                    f8:44:58:63:d2:d5:e1:fc:6b:b8:5d:8d:79:da:6e:
                    a7:77:ad:be:81:c4:e6:01:4c:f4:57:ce:b4:e2:50:
                    8a:ba:2a:1c:78:94:66:4a:f5:88:5b:e0:d4:5d:1d:
                    c9:e9:67:d9:76:66:45:7c:ad:b6:71:99:09:91:13:
                    d6:98:7e:49:be:58:68:07:8e:46:24:a9:c8:7f:45:
                    10:d7:4a:9c:c1:3f:e2:97:b6:a9:a6:9a:63:f8:e5:
                    d2:08:02:1c:5e:24:f1:7f:2d:ee:30:34:8a:8c:35:
                    f7:a2:bd:be:4e:80:a9:35:15:24:fc:40:31:a6:2c:
                    ea:df:6f:66:70:3f:5d:72:38:93:6f:18:6f:ac:94:
                    c7:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:2F:CE:49:E7:B0:9E:9E:F4:F1:3E:3B:05:C9:65:55:A9:83:AA:8C
            X509v3 Authority Key Identifier:
                keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1-C_OSeewnp708T47BcllVamDqow.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.124.136.0/22
                  194.76.168.0/23
                  194.76.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:6a:11:38:31:26:76:e8:2d:a2:eb:b1:b0:4a:28:7f:80:40:
         6c:c8:14:c1:a4:e2:51:af:c2:5b:f3:4d:88:d7:de:cf:00:56:
         99:73:7d:c3:0f:7a:ac:d5:2d:94:83:11:89:f9:9b:cd:4f:6d:
         08:d3:65:e5:d8:f1:13:5d:36:23:d2:72:57:88:47:dd:6e:46:
         95:24:41:4e:3b:dc:b1:54:9f:ed:6b:8e:af:45:f4:dd:7b:46:
         27:e2:5b:44:03:a8:33:de:56:89:1f:bc:02:76:8a:03:82:8b:
         3f:82:8b:d6:4b:ac:d0:c4:52:ea:b8:47:a2:e2:a1:9e:d7:25:
         c4:de:02:34:85:f0:1b:bb:58:8d:d4:5e:e8:68:1a:ca:e4:83:
         39:86:19:de:03:a3:e8:28:5d:11:cc:c6:7e:28:7d:78:ec:f6:
         f8:2f:82:a0:ac:a1:26:ff:cb:c2:aa:ad:93:42:03:99:72:e6:
         f8:8f:4e:5b:ec:2f:33:4f:cc:23:46:ef:aa:a3:ed:7c:a6:be:
         4d:58:66:ea:69:a0:d4:08:a0:26:0b:79:c3:59:ef:eb:41:22:
         f9:f8:5c:fd:f3:4e:37:eb:4a:91:6e:89:45:57:3f:2d:ab:2c:
         8d:6c:ba:49:5e:a8:03:02:c5:9c:56:46:f7:68:c8:29:cd:c7:
         65:ee:fc:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:39 2024 by rpki-client on console-fra.rpki-client.org