Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/VWcxPZ_KeGWa5mKgUS4MboU2Tpg.roa
File:                     VWcxPZ_KeGWa5mKgUS4MboU2Tpg.roa (raw, json)
Hash identifier:          ZRK0VdE3S+riDy+kFf+RKeEw5Zy1YIfkvRjXDpbMpH8=
Subject key identifier:   55:67:31:3D:9F:CA:78:65:9A:E6:62:A0:51:2E:0C:6E:85:36:4E:98
Certificate issuer:       /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial:       063B7D00
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/VWcxPZ_KeGWa5mKgUS4MboU2Tpg.roa
Signing time:             Sat 01 Jan 2022 06:52:33 +0000
ROA not before:           Sat 01 Jan 2022 06:52:33 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     33932
IP address blocks:        185.230.54.0/23 maxlen: 24
                          185.227.204.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104561920 (0x63b7d00)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
        Validity
            Not Before: Jan  1 06:52:33 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5567313d9fca78659ae662a0512e0c6e85364e98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d6:1b:d5:f3:0b:26:bb:c9:d7:11:e6:dc:81:
                    2f:b2:98:02:06:ce:cb:04:f3:03:21:af:f9:46:24:
                    dc:db:30:dc:d5:22:43:75:d5:58:fd:29:fe:9e:54:
                    ff:83:23:53:96:db:75:6b:b0:7c:d6:ad:56:a9:f2:
                    c3:91:ab:24:e6:a5:78:a4:74:65:18:b8:bb:e8:62:
                    7e:63:96:5d:58:b9:b2:be:4e:ed:0f:1c:94:41:bc:
                    c2:fd:1b:2c:70:1a:54:5b:17:32:d8:6b:04:a7:38:
                    a7:97:ce:f1:48:c9:c3:ca:70:b2:9e:b3:55:01:8d:
                    1c:25:2e:71:74:65:7f:e1:69:03:34:a3:c8:f2:dc:
                    ab:ff:27:0a:c2:d5:5a:c9:2d:76:e3:87:3b:0b:b8:
                    90:e0:9f:ad:c7:07:22:db:40:30:70:48:8e:20:ca:
                    a3:f6:81:8d:46:28:c6:15:d9:9f:fb:36:8c:32:db:
                    ab:3a:ab:16:37:cd:b2:68:9d:09:8a:4c:df:1e:f4:
                    d1:73:4e:b8:a7:92:ff:21:29:10:7d:b7:72:41:ee:
                    77:a2:19:99:5e:1a:d1:71:ea:cd:bf:a9:5a:3f:92:
                    1a:7a:b5:b2:cf:b3:ef:e3:e0:fe:db:df:11:c4:9b:
                    99:39:bc:36:39:6e:f9:e1:86:d4:07:19:03:dc:42:
                    d0:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:67:31:3D:9F:CA:78:65:9A:E6:62:A0:51:2E:0C:6E:85:36:4E:98
            X509v3 Authority Key Identifier:
                keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/VWcxPZ_KeGWa5mKgUS4MboU2Tpg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.227.204.0/24
                  185.230.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ab:53:c7:32:13:3e:c6:e7:8f:88:c5:f5:30:24:ce:f3:e3:e0:
         8a:45:32:a5:f7:79:7e:1e:d9:ab:21:8e:ae:68:4c:3e:3f:81:
         b5:ee:8e:b2:48:cc:05:8c:54:c6:66:58:af:86:57:ee:aa:fe:
         38:22:2b:ba:63:58:90:a7:37:ae:3b:7e:1f:db:5f:c4:4d:30:
         be:b4:99:ad:33:bb:fe:75:33:d5:b5:42:0c:25:c6:d4:b2:e2:
         6e:60:5e:12:3b:2c:3a:c2:dd:43:9e:88:0f:16:16:6f:e8:57:
         f8:fe:4a:86:05:22:80:4f:42:2b:af:5e:f1:e0:5c:9a:3f:11:
         37:ef:18:51:7e:eb:be:e3:b3:ad:48:17:b6:56:b9:14:5d:6f:
         f7:da:c7:03:63:ac:74:50:05:cc:9f:9a:d9:ec:1a:ca:0b:c7:
         b1:6e:e2:ba:34:d5:f8:69:20:2f:69:1e:00:1e:6b:93:d7:f4:
         ba:9f:ff:ed:63:e6:aa:63:35:5e:ba:00:d5:1e:f4:59:dc:d3:
         33:83:d3:74:e1:0b:33:2d:83:b1:32:aa:a4:62:a6:c4:1e:26:
         3a:c0:e5:f7:b2:5c:6c:d0:cc:83:4b:1b:9a:7f:af:0f:9c:b4:
         40:70:04:84:58:5f:ec:f9:0a:7a:13:17:08:c6:ff:fb:d6:bc:
         8e:38:be:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:27 2024 by rpki-client on console-ams.rpki-client.org