Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/dYjnl7e3hZgNeI85U9b6mVjsP2o.roa
File:                     dYjnl7e3hZgNeI85U9b6mVjsP2o.roa (raw, json)
Hash identifier:          1I9cPLS+Tyornigo1woTyPlQiNpwmpfsdaqFdtk/IvE=
Subject key identifier:   75:88:E7:97:B7:B7:85:98:0D:78:8F:39:53:D6:FA:99:58:EC:3F:6A
Certificate issuer:       /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial:       0184852766F1DCE9121579330ED0224263CB
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/dYjnl7e3hZgNeI85U9b6mVjsP2o.roa
Signing time:             Thu 17 Nov 2022 10:34:22 +0000
ROA not before:           Thu 17 Nov 2022 10:34:22 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207633
IP address blocks:        185.194.30.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:85:27:66:f1:dc:e9:12:15:79:33:0e:d0:22:42:63:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
        Validity
            Not Before: Nov 17 10:34:22 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7588e797b7b785980d788f3953d6fa9958ec3f6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:43:1d:c5:33:d1:d7:ed:af:4c:2d:e1:9e:aa:
                    cb:95:e0:0e:65:8c:1a:b5:b9:3b:0b:07:bd:67:ed:
                    03:de:48:66:8c:04:ab:05:20:f3:c9:e0:39:18:c0:
                    c9:a8:41:32:12:b5:71:a7:7d:04:41:aa:a0:7d:47:
                    b9:57:78:80:5c:34:ca:7a:f3:4f:30:6b:7a:3a:4c:
                    b7:35:1b:2b:69:99:b8:c9:13:b6:c6:ed:21:6d:9c:
                    9c:01:8d:5f:2a:78:07:4f:22:04:1e:b2:c2:cc:b4:
                    0f:2f:37:09:00:df:59:4a:e7:4f:06:33:b1:79:38:
                    c8:cb:ea:00:9d:8a:e0:59:c5:31:c4:cd:42:ad:dd:
                    df:47:87:16:9f:5c:fa:25:30:a5:1c:71:16:e8:fe:
                    65:c8:39:20:78:cf:b2:c8:f6:82:16:53:35:a7:48:
                    65:c6:bc:d7:5c:3c:fe:db:4a:3f:6e:d0:82:ba:da:
                    39:b5:f2:65:d9:f3:1c:aa:cc:76:91:11:c9:cc:0f:
                    a0:4c:e8:26:93:f0:21:6b:5e:8c:d8:8f:e9:58:98:
                    04:2b:56:55:e9:ee:d0:13:a6:9a:31:f2:40:0f:7f:
                    cb:64:be:ff:f0:54:75:50:a9:06:c5:4c:77:b7:48:
                    7e:ec:0f:f0:bb:7d:d6:fa:e9:b0:d0:35:15:94:37:
                    43:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:88:E7:97:B7:B7:85:98:0D:78:8F:39:53:D6:FA:99:58:EC:3F:6A
            X509v3 Authority Key Identifier:
                keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/dYjnl7e3hZgNeI85U9b6mVjsP2o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.194.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:df:4d:72:93:1b:bd:ca:cb:a4:2d:09:d5:02:fc:7a:81:0c:
         09:16:21:0f:b0:9b:42:3a:8c:fe:c4:5e:95:33:2b:5e:47:a4:
         f3:64:cd:1a:6a:69:91:1f:c2:e3:8e:ef:da:80:3b:bc:de:71:
         f7:c7:9f:fb:0b:4d:2b:b9:5e:9f:3b:c5:09:c8:a8:b9:9e:c6:
         61:56:86:20:b9:a2:2a:cb:47:1b:d6:2e:4e:f6:86:86:43:61:
         b0:4e:bd:1e:65:a9:9e:4b:cb:6c:bf:c5:51:96:15:68:73:15:
         f1:d1:99:13:f0:94:ce:d6:1e:b4:89:53:13:51:85:1a:0b:68:
         cc:2f:fd:af:cc:48:35:11:73:f2:c3:d6:f5:46:53:84:57:6b:
         16:bc:a1:34:c7:8f:7e:ec:ad:7d:a9:4a:58:92:05:a0:f3:b6:
         af:bf:90:27:99:2f:38:a2:8c:c6:5a:69:23:67:c2:ea:66:6d:
         1d:1e:e2:79:af:c5:11:c8:e6:60:9d:5c:22:7c:98:10:9a:fd:
         97:9c:55:91:a6:cb:5d:ce:11:5d:34:c0:3d:fb:f7:b5:21:79:
         bc:38:cf:91:ba:dc:e2:3b:a3:29:5b:58:44:c0:46:81:39:a0:
         4b:97:6c:4b:b3:b0:ab:ae:92:7b:17:79:87:c7:44:23:d5:d5:
         ee:85:c7:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:42 2024 by rpki-client on console-fra.rpki-client.org