Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/RJViI4ipoGIyqdcBl--j37DyMAc.roa
File:                     RJViI4ipoGIyqdcBl--j37DyMAc.roa (raw, json)
Hash identifier:          aru9t/Ie+NPdSC7fyCs8t0zFTAKFlP1sl5P1wXc22Nk=
Subject key identifier:   44:95:62:23:88:A9:A0:62:32:A9:D7:01:97:EF:A3:DF:B0:F2:30:07
Certificate issuer:       /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial:       0183D12E9D8429188C43AB8457AD781B2EE8
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/RJViI4ipoGIyqdcBl--j37DyMAc.roa
Signing time:             Thu 13 Oct 2022 11:50:36 +0000
ROA not before:           Thu 13 Oct 2022 11:50:36 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     18229
IP address blocks:        185.255.127.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:d1:2e:9d:84:29:18:8c:43:ab:84:57:ad:78:1b:2e:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
        Validity
            Not Before: Oct 13 11:50:36 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4495622388a9a06232a9d70197efa3dfb0f23007
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c8:62:3b:d1:63:c0:8f:e8:10:ea:6a:9b:6d:
                    ff:ae:12:17:c5:91:19:1a:f9:3d:f3:18:a7:20:68:
                    47:cb:74:f4:9c:49:e2:c4:94:ee:56:ab:ac:cf:73:
                    5a:4d:40:2f:e3:a9:c4:fe:7d:30:31:0d:38:ec:ec:
                    72:47:2f:32:ff:2f:dc:76:5a:ba:db:bb:31:bf:7e:
                    5d:3a:cb:a2:46:7b:bb:af:72:07:a8:ef:0d:36:a3:
                    6c:4d:f7:84:91:fc:54:72:ae:82:de:6a:84:cf:04:
                    dc:7f:2a:55:f8:c0:a1:3b:3b:51:42:91:f4:89:75:
                    70:a7:90:3a:ea:93:02:ef:aa:24:ad:50:35:a3:cf:
                    bb:af:f6:e7:bf:06:61:ce:06:50:cd:45:31:0b:fd:
                    13:32:4c:5e:82:aa:0d:49:12:32:be:64:ba:2f:db:
                    45:56:bf:0d:cd:95:6b:e9:85:d0:ed:0c:74:3f:4b:
                    e1:4f:53:d5:34:b9:98:f9:1e:f4:eb:de:5e:be:10:
                    7d:91:e1:0b:b6:78:e9:0d:d4:69:fd:f1:2f:b7:a9:
                    60:e6:88:06:c2:9f:97:66:5d:b4:25:ee:ee:4e:8e:
                    e1:85:7f:59:af:a7:2c:3e:37:86:04:ae:9d:e2:f9:
                    9b:28:22:77:22:57:35:e5:69:13:ef:c2:74:25:98:
                    84:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:95:62:23:88:A9:A0:62:32:A9:D7:01:97:EF:A3:DF:B0:F2:30:07
            X509v3 Authority Key Identifier:
                keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/RJViI4ipoGIyqdcBl--j37DyMAc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.255.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:80:93:22:f1:f8:0d:3e:b7:d6:61:de:75:eb:ad:27:14:a1:
         8a:dd:ca:9c:bc:95:d1:a3:4b:b8:13:61:0f:8a:39:11:de:18:
         f8:c7:fe:72:19:78:f3:5a:8b:ae:3c:db:17:4b:a9:0b:aa:91:
         b5:85:9d:f1:f2:b4:3b:08:29:1d:98:aa:93:e2:bc:cf:6c:96:
         ca:42:02:17:08:31:73:4e:9f:fb:ed:a4:5f:26:3b:ac:ff:4c:
         7d:27:4b:9d:55:a6:c5:f3:7d:e4:cf:50:5f:ff:24:2c:17:1c:
         f2:88:68:cc:da:64:aa:f6:c6:f3:ea:4e:33:de:83:ea:8a:5c:
         ce:ec:27:98:99:f3:a6:fc:57:2f:7c:e9:c8:81:b9:2a:9c:85:
         c4:2d:91:78:a3:ac:e4:7e:d4:88:48:b3:b1:0d:cf:24:58:e7:
         f5:65:e8:3d:01:8f:0f:f1:c8:63:b8:ac:ae:81:0d:bd:59:68:
         52:00:5b:cf:0d:59:62:20:c2:d8:be:8c:40:58:31:ba:0d:a5:
         f9:41:ab:a7:7c:41:39:61:0c:93:d5:d7:7d:cf:c6:e7:d2:fd:
         8b:00:5d:2e:28:29:99:25:02:4c:08:f0:95:03:f0:77:84:64:
         38:43:4c:b5:24:76:9e:28:23:a4:18:65:5f:36:51:23:d1:7f:
         c1:e6:aa:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:41 2024 by rpki-client on console-fra.rpki-client.org