Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/7ynuUVwXyW1gU6N96ptwoNTLRKU.roa
File:                     7ynuUVwXyW1gU6N96ptwoNTLRKU.roa (raw, json)
Hash identifier:          W3DbwmpIUQIzNaS96Gd6IZ4BWDgn7+1onx5ddNVT7S4=
Subject key identifier:   EF:29:EE:51:5C:17:C9:6D:60:53:A3:7D:EA:9B:70:A0:D4:CB:44:A5
Certificate issuer:       /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial:       07C41E6A
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/7ynuUVwXyW1gU6N96ptwoNTLRKU.roa
Signing time:             Wed 04 May 2022 11:04:53 +0000
ROA not before:           Wed 04 May 2022 11:04:53 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211975
IP address blocks:        185.223.155.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 130293354 (0x7c41e6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
        Validity
            Not Before: May  4 11:04:53 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ef29ee515c17c96d6053a37dea9b70a0d4cb44a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:cb:e6:d8:31:96:60:f8:0f:93:de:fb:ed:8f:
                    62:f3:16:81:45:f3:3c:72:94:30:96:4a:b6:f9:ce:
                    6e:b0:c4:3b:92:21:e8:ea:1d:e5:d2:fa:6d:1c:2d:
                    1a:ef:af:cb:87:a6:5c:06:c6:76:69:eb:59:b0:60:
                    50:7f:be:3c:c6:a2:93:a9:72:88:55:ca:04:45:f5:
                    a7:61:c0:f9:6d:d4:a1:1f:ac:52:ae:4a:0f:26:e5:
                    bb:97:6e:b5:80:ee:f6:4d:89:b3:d0:73:7a:94:4d:
                    1f:f6:bc:7c:ff:af:cb:8f:4e:ac:10:e2:85:5e:92:
                    3b:f2:f5:33:f8:6c:c8:43:52:1e:92:35:f7:d0:f5:
                    3e:7b:93:d8:b1:df:8b:32:19:bd:e2:0d:a1:5a:3d:
                    91:ca:36:41:03:11:31:36:ba:9c:80:bf:1c:ba:7b:
                    be:57:8a:c1:b5:b7:af:7e:f8:7b:c5:98:88:e1:4b:
                    f1:dd:8a:12:e7:ce:f5:e2:23:7d:e6:6a:95:4d:64:
                    23:ba:1c:57:95:f1:f5:02:3b:d6:07:83:9d:33:e9:
                    38:07:b7:a6:b1:39:6d:ef:41:fb:f0:17:fb:82:1c:
                    70:79:c4:24:99:f1:ee:87:38:db:5d:c3:dd:cf:93:
                    d8:45:34:e0:9b:9c:32:99:f8:2d:9b:41:dd:29:b5:
                    36:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:29:EE:51:5C:17:C9:6D:60:53:A3:7D:EA:9B:70:A0:D4:CB:44:A5
            X509v3 Authority Key Identifier:
                keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/7ynuUVwXyW1gU6N96ptwoNTLRKU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.223.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:1c:34:30:63:d7:6b:6d:d7:79:6a:de:52:37:9f:a3:bc:0c:
         1a:eb:65:b0:d2:05:27:ae:71:98:78:57:d0:e4:c7:30:8a:a1:
         3d:ae:b3:ce:3a:73:17:06:e3:2e:59:05:0a:56:de:00:18:9d:
         cd:b1:02:44:c7:d8:ea:6b:be:a0:8b:94:90:46:ac:6a:cf:47:
         04:18:26:25:10:7d:5d:cf:5c:dc:72:9a:e9:d1:1f:9a:6c:80:
         a6:63:38:39:d2:c4:8c:c3:95:db:e5:8c:9c:20:0f:58:d8:10:
         06:bc:31:fa:01:87:5e:5b:b8:af:55:c3:dc:9a:16:63:cc:eb:
         55:18:ae:c4:01:62:6e:33:d4:f9:37:ed:73:0b:52:d7:c6:a2:
         67:49:e9:ed:89:42:bf:66:4f:d9:55:54:30:06:88:62:76:91:
         96:24:6c:73:9f:b1:47:35:21:82:0b:45:e4:6b:29:18:c8:b1:
         dc:74:ed:55:e0:69:1c:3a:36:87:11:a1:69:42:e3:5e:d4:23:
         28:fc:75:9a:a4:a9:e0:2c:93:2a:de:ef:06:20:fb:72:14:72:
         01:6b:ed:5d:ec:7f:cd:ed:54:97:75:97:15:97:50:6a:17:69:
         60:18:8d:48:ee:52:80:19:74:1f:65:e4:cb:80:7e:ea:88:1a:
         dc:be:08:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:20 2024 by rpki-client on console-ams.rpki-client.org