Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/HudATSo36OsUxAcd-DBSF1ypKeQ.roa
File:                     HudATSo36OsUxAcd-DBSF1ypKeQ.roa (raw, json)
Hash identifier:          /4uUhS0yX0bk09xJaE2Cg+sVkhnqpZbT7ETXkUta1r0=
Subject key identifier:   1E:E7:40:4D:2A:37:E8:EB:14:C4:07:1D:F8:30:52:17:5C:A9:29:E4
Certificate issuer:       /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial:       07773FC4
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/HudATSo36OsUxAcd-DBSF1ypKeQ.roa
Signing time:             Fri 08 Apr 2022 08:03:20 +0000
ROA not before:           Fri 08 Apr 2022 08:03:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49999
IP address blocks:        185.226.106.0/24 maxlen: 24
                          185.194.29.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125255620 (0x7773fc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
        Validity
            Not Before: Apr  8 08:03:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1ee7404d2a37e8eb14c4071df83052175ca929e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:26:75:47:ba:6d:f7:61:66:08:c2:c8:9c:d5:
                    6a:c4:87:84:cf:38:80:d7:3d:59:bd:b9:d6:c7:c5:
                    66:7a:96:d9:bf:7c:71:68:e4:75:94:54:0b:ce:69:
                    e3:c2:d9:b5:9a:aa:2d:15:11:ec:39:7d:36:85:c9:
                    49:e2:26:b4:05:48:0f:d8:a7:3f:2e:4a:73:79:05:
                    16:a9:aa:ad:5e:01:91:36:63:c3:25:74:22:90:c0:
                    97:8c:c3:e5:53:54:0a:3c:5c:d7:fb:bc:6c:62:d2:
                    7a:3e:26:66:fe:21:3f:2b:d3:93:f0:e9:61:d3:a5:
                    0c:3e:8c:6b:14:25:72:35:93:e1:e8:41:3f:1c:59:
                    99:5d:98:c5:6f:ef:3e:c1:cc:04:fb:ca:ea:71:08:
                    75:46:b2:a0:4a:38:39:2f:eb:18:f9:79:94:ac:05:
                    d1:ec:37:d1:a1:c4:c1:ec:35:ae:74:ec:11:a6:43:
                    75:58:2e:7f:7c:ab:1f:b0:b6:08:82:49:5b:d1:cc:
                    f3:1a:76:86:29:0f:bf:7a:77:f7:76:c1:42:1e:06:
                    4b:f7:64:4d:89:77:c2:56:9e:81:0a:68:c5:da:c1:
                    08:35:29:0c:46:e2:a3:1a:f4:05:05:7c:ab:01:03:
                    69:e0:65:a9:3b:11:2b:ac:2a:7c:e8:2a:8d:c1:fa:
                    3a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:E7:40:4D:2A:37:E8:EB:14:C4:07:1D:F8:30:52:17:5C:A9:29:E4
            X509v3 Authority Key Identifier:
                keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/HudATSo36OsUxAcd-DBSF1ypKeQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.194.29.0/24
                  185.226.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:67:9a:42:75:2c:96:7b:0b:87:1f:14:42:cd:25:32:37:fc:
         05:4c:cc:dc:0a:9d:27:6f:2f:9f:10:eb:6c:43:c5:ea:10:50:
         fe:b3:7c:d0:9b:da:98:31:f2:26:05:55:fa:69:14:33:d1:53:
         2f:28:0f:e4:fc:7b:7a:0b:dc:dd:51:47:10:fb:b7:a0:fb:6f:
         2f:ee:59:56:9d:18:31:95:0b:b6:d7:8a:ad:b6:6f:ca:c3:0c:
         9e:61:44:0d:aa:12:fb:70:4b:f1:29:8e:92:1c:c7:46:41:49:
         5d:7c:37:8a:28:52:14:25:76:96:64:34:71:24:9a:cd:84:58:
         43:1e:38:22:b2:d4:dd:28:ce:c2:a1:da:a2:24:f8:5d:dd:10:
         d8:d3:c9:06:38:e0:50:d8:85:d1:31:e4:d6:43:48:31:1a:57:
         d1:11:0a:1e:19:1b:c3:38:7b:ae:aa:41:05:5c:fe:9b:4a:16:
         08:39:8b:fb:0e:7e:7b:d3:f5:d1:6c:4c:df:43:b1:95:ac:c1:
         73:2a:78:ea:a9:84:c0:a6:37:7a:85:f2:bb:9f:30:8b:ed:89:
         af:75:e3:a8:86:d3:27:72:14:8f:62:ed:a7:4b:7f:79:24:56:
         b9:02:96:31:29:98:eb:97:75:0e:1a:15:54:77:ca:2a:5e:ae:
         c5:a8:12:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:21 2024 by rpki-client on console-ams.rpki-client.org